Edit tour

Linux Analysis Report
Aqua.x86_64.elf

Overview

General Information

Sample name:	Aqua.x86_64.elf
Analysis ID:	1582030
MD5:	838baaa65a20330047a42081a59654fa
SHA1:	528cb4d37ca9ae231f32e6d1ab9d45b0f3b3e358
SHA256:	809cf04075f674041b0891cb94adb6169e2e9987077b64e9cde692b0e34fc892
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Reads system files that contain records of logged in users

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582030
Start date and time:	2024-12-29 16:22:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.x86_64.elf
Detection:	MAL
Classification:	mal84.spre.troj.evad.linELF@0/257@12/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.

Runtime Messages

Command:	/tmp/Aqua.x86_64.elf
PID:	5528
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.x86_64.elf (PID: 5528, Parent: 5445, MD5: 838baaa65a20330047a42081a59654fa) Arguments: /tmp/Aqua.x86_64.elf

Aqua.x86_64.elf New Fork (PID: 5529, Parent: 5528)

Aqua.x86_64.elf New Fork (PID: 5530, Parent: 5529)

gnome-session-binary New Fork (PID: 5531, Parent: 1498)

sh (PID: 5531, Parent: 1498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5531, Parent: 1498, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5536, Parent: 1)

systemd-hostnamed (PID: 5536, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5683, Parent: 1333)

Default (PID: 5683, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5684, Parent: 1333)

Default (PID: 5684, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5699, Parent: 1333)

Default (PID: 5699, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5702, Parent: 3044)

pulseaudio (PID: 5702, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5703, Parent: 1)

dbus-daemon (PID: 5703, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5704, Parent: 1)

rsyslogd (PID: 5704, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 5708, Parent: 3210)

fusermount (PID: 5708, Parent: 3210, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5716, Parent: 1)

rtkit-daemon (PID: 5716, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5719, Parent: 1)

systemd-logind (PID: 5719, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5746, Parent: 1)

polkitd (PID: 5746, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5782, Parent: 1)

gpu-manager (PID: 5782, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5784, Parent: 5782)

sh (PID: 5784, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5785, Parent: 5784)

grep (PID: 5785, Parent: 5784, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5789, Parent: 5782)

sh (PID: 5789, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5790, Parent: 5789)

grep (PID: 5790, Parent: 5789, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5791, Parent: 5782)

sh (PID: 5791, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5792, Parent: 5791)

grep (PID: 5792, Parent: 5791, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5793, Parent: 5782)

sh (PID: 5793, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5794, Parent: 5793)

grep (PID: 5794, Parent: 5793, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5795, Parent: 5782)

sh (PID: 5795, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5796, Parent: 5795)

grep (PID: 5796, Parent: 5795, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5797, Parent: 5782)

sh (PID: 5797, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5798, Parent: 5797)

grep (PID: 5798, Parent: 5797, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5799, Parent: 5782)

sh (PID: 5799, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5800, Parent: 5799)

grep (PID: 5800, Parent: 5799, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5801, Parent: 5782)

sh (PID: 5801, Parent: 5782, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5802, Parent: 5801)

grep (PID: 5802, Parent: 5801, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5783, Parent: 1)

rsyslogd (PID: 5783, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5805, Parent: 1)

generate-config (PID: 5805, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5806, Parent: 5805)

pkill (PID: 5806, Parent: 5805, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5807, Parent: 1)

gdm-wait-for-drm (PID: 5807, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5825, Parent: 1)

rsyslogd (PID: 5825, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5829, Parent: 1)

journalctl (PID: 5829, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5830, Parent: 1)

systemd-journald (PID: 5830, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5835, Parent: 1)

systemd-logind (PID: 5835, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5892, Parent: 1)

systemd-journald (PID: 5892, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5893, Parent: 1)

rsyslogd (PID: 5893, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5894, Parent: 1)

dbus-daemon (PID: 5894, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5897, Parent: 1)

systemd-logind (PID: 5897, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5957, Parent: 1)

gpu-manager (PID: 5957, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5958, Parent: 5957)

sh (PID: 5958, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5959, Parent: 5958)

grep (PID: 5959, Parent: 5958, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5960, Parent: 5957)

sh (PID: 5960, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5961, Parent: 5960)

grep (PID: 5961, Parent: 5960, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5962, Parent: 5957)

sh (PID: 5962, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5963, Parent: 5962)

grep (PID: 5963, Parent: 5962, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5964, Parent: 5957)

sh (PID: 5964, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5965, Parent: 5964)

grep (PID: 5965, Parent: 5964, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5967, Parent: 5957)

sh (PID: 5967, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5970, Parent: 5967)

grep (PID: 5970, Parent: 5967, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5971, Parent: 5957)

sh (PID: 5971, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5972, Parent: 5971)

grep (PID: 5972, Parent: 5971, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5973, Parent: 5957)

sh (PID: 5973, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5974, Parent: 5973)

grep (PID: 5974, Parent: 5973, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5975, Parent: 5957)

sh (PID: 5975, Parent: 5957, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5976, Parent: 5975)

grep (PID: 5976, Parent: 5975, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5966, Parent: 1)

agetty (PID: 5966, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5977, Parent: 1)

rsyslogd (PID: 5977, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5978, Parent: 1)

dbus-daemon (PID: 5978, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5979, Parent: 1)

generate-config (PID: 5979, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5980, Parent: 5979)

pkill (PID: 5980, Parent: 5979, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5986, Parent: 1)

systemd-logind (PID: 5986, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6045, Parent: 1)

gdm-wait-for-drm (PID: 6045, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6049, Parent: 1)

rsyslogd (PID: 6049, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6050, Parent: 1)

dbus-daemon (PID: 6050, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6054, Parent: 1)

systemd-journald (PID: 6054, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6057, Parent: 1)

systemd-logind (PID: 6057, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6114, Parent: 1)

agetty (PID: 6114, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6115, Parent: 1)

rsyslogd (PID: 6115, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6116, Parent: 1)

dbus-daemon (PID: 6116, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6120, Parent: 1)

gpu-manager (PID: 6120, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6123, Parent: 6120)

sh (PID: 6123, Parent: 6120, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6124, Parent: 6123)

grep (PID: 6124, Parent: 6123, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6125, Parent: 1)

dbus-daemon (PID: 6125, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6126, Parent: 1)

rsyslogd (PID: 6126, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6128, Parent: 1)

generate-config (PID: 6128, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6129, Parent: 6128)

pkill (PID: 6129, Parent: 6128, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6133, Parent: 1)

gdm-wait-for-drm (PID: 6133, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6137, Parent: 1)

rsyslogd (PID: 6137, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6143, Parent: 1)

systemd-journald (PID: 6143, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6146, Parent: 1)

systemd-logind (PID: 6146, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6203, Parent: 1)

agetty (PID: 6203, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6204, Parent: 1)

dbus-daemon (PID: 6204, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6205, Parent: 1)

gpu-manager (PID: 6205, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6206, Parent: 6205)

sh (PID: 6206, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6209, Parent: 6206)

grep (PID: 6209, Parent: 6206, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6210, Parent: 6205)

sh (PID: 6210, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6211, Parent: 6210)

grep (PID: 6211, Parent: 6210, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6215, Parent: 6205)

sh (PID: 6215, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6216, Parent: 6215)

grep (PID: 6216, Parent: 6215, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6217, Parent: 6205)

sh (PID: 6217, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6218, Parent: 6217)

grep (PID: 6218, Parent: 6217, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6219, Parent: 6205)

sh (PID: 6219, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6220, Parent: 6219)

grep (PID: 6220, Parent: 6219, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6221, Parent: 6205)

sh (PID: 6221, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6222, Parent: 6221)

grep (PID: 6222, Parent: 6221, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6223, Parent: 6205)

sh (PID: 6223, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6226, Parent: 6223)

grep (PID: 6226, Parent: 6223, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6227, Parent: 6205)

sh (PID: 6227, Parent: 6205, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6228, Parent: 6227)

grep (PID: 6228, Parent: 6227, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6207, Parent: 1)

dbus-daemon (PID: 6207, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6208, Parent: 1)

rsyslogd (PID: 6208, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6229, Parent: 1)

generate-config (PID: 6229, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6230, Parent: 6229)

pkill (PID: 6230, Parent: 6229, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6231, Parent: 1)

gdm-wait-for-drm (PID: 6231, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6235, Parent: 1)

rsyslogd (PID: 6235, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6236, Parent: 1)

systemd-journald (PID: 6236, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6239, Parent: 1)

systemd-logind (PID: 6239, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6296, Parent: 1)

agetty (PID: 6296, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6297, Parent: 1)

dbus-daemon (PID: 6297, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6298, Parent: 1)

rsyslogd (PID: 6298, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6302, Parent: 1)

gpu-manager (PID: 6302, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6303, Parent: 6302)

sh (PID: 6303, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6304, Parent: 6303)

grep (PID: 6304, Parent: 6303, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6305, Parent: 6302)

sh (PID: 6305, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6306, Parent: 6305)

grep (PID: 6306, Parent: 6305, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6308, Parent: 6302)

sh (PID: 6308, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6309, Parent: 6308)

grep (PID: 6309, Parent: 6308, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6312, Parent: 6302)

sh (PID: 6312, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6313, Parent: 6312)

grep (PID: 6313, Parent: 6312, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6317, Parent: 6302)

sh (PID: 6317, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6318, Parent: 6317)

grep (PID: 6318, Parent: 6317, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6319, Parent: 6302)

sh (PID: 6319, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6320, Parent: 6319)

grep (PID: 6320, Parent: 6319, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6321, Parent: 6302)

sh (PID: 6321, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6322, Parent: 6321)

grep (PID: 6322, Parent: 6321, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6323, Parent: 6302)

sh (PID: 6323, Parent: 6302, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6324, Parent: 6323)

grep (PID: 6324, Parent: 6323, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6307, Parent: 1)

rsyslogd (PID: 6307, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6325, Parent: 1)

generate-config (PID: 6325, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6326, Parent: 6325)

pkill (PID: 6326, Parent: 6325, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6327, Parent: 1)

gdm-wait-for-drm (PID: 6327, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6331, Parent: 1)

rsyslogd (PID: 6331, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6335, Parent: 1)

systemd-journald (PID: 6335, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6338, Parent: 1)

systemd-logind (PID: 6338, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6397, Parent: 1)

agetty (PID: 6397, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6398, Parent: 1)

dbus-daemon (PID: 6398, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6399, Parent: 1)

gpu-manager (PID: 6399, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6402, Parent: 6399)

sh (PID: 6402, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6403, Parent: 6402)

grep (PID: 6403, Parent: 6402, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6404, Parent: 6399)

sh (PID: 6404, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6408, Parent: 6404)

grep (PID: 6408, Parent: 6404, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6409, Parent: 6399)

sh (PID: 6409, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6410, Parent: 6409)

grep (PID: 6410, Parent: 6409, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6411, Parent: 6399)

sh (PID: 6411, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6412, Parent: 6411)

grep (PID: 6412, Parent: 6411, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6413, Parent: 6399)

sh (PID: 6413, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6414, Parent: 6413)

grep (PID: 6414, Parent: 6413, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6415, Parent: 6399)

sh (PID: 6415, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6416, Parent: 6415)

grep (PID: 6416, Parent: 6415, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6417, Parent: 6399)

sh (PID: 6417, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6418, Parent: 6417)

grep (PID: 6418, Parent: 6417, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6419, Parent: 6399)

sh (PID: 6419, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6420, Parent: 6419)

grep (PID: 6420, Parent: 6419, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6400, Parent: 1)

dbus-daemon (PID: 6400, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6401, Parent: 1)

rsyslogd (PID: 6401, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6421, Parent: 1)

generate-config (PID: 6421, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6422, Parent: 6421)

pkill (PID: 6422, Parent: 6421, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6425, Parent: 1)

gdm-wait-for-drm (PID: 6425, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6429, Parent: 1)

rsyslogd (PID: 6429, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6433, Parent: 1)

systemd-journald (PID: 6433, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6436, Parent: 1)

systemd-logind (PID: 6436, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6493, Parent: 1)

agetty (PID: 6493, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6494, Parent: 1)

dbus-daemon (PID: 6494, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6495, Parent: 1)

gpu-manager (PID: 6495, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6498, Parent: 6495)

sh (PID: 6498, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6499, Parent: 6498)

grep (PID: 6499, Parent: 6498, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6500, Parent: 6495)

sh (PID: 6500, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6504, Parent: 6500)

grep (PID: 6504, Parent: 6500, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6505, Parent: 6495)

sh (PID: 6505, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6506, Parent: 6505)

grep (PID: 6506, Parent: 6505, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6507, Parent: 6495)

sh (PID: 6507, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6508, Parent: 6507)

grep (PID: 6508, Parent: 6507, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6509, Parent: 6495)

sh (PID: 6509, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6510, Parent: 6509)

grep (PID: 6510, Parent: 6509, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6511, Parent: 6495)

sh (PID: 6511, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6512, Parent: 6511)

grep (PID: 6512, Parent: 6511, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6515, Parent: 6495)

sh (PID: 6515, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6516, Parent: 6515)

grep (PID: 6516, Parent: 6515, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6517, Parent: 6495)

sh (PID: 6517, Parent: 6495, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6518, Parent: 6517)

grep (PID: 6518, Parent: 6517, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6496, Parent: 1)

rsyslogd (PID: 6496, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6497, Parent: 1)

dbus-daemon (PID: 6497, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6519, Parent: 1)

generate-config (PID: 6519, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6520, Parent: 6519)

pkill (PID: 6520, Parent: 6519, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6521, Parent: 1)

gdm-wait-for-drm (PID: 6521, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6525, Parent: 3044)

dbus-daemon (PID: 6525, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6527, Parent: 3044)

pulseaudio (PID: 6527, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6528, Parent: 1)

rsyslogd (PID: 6528, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6532, Parent: 1)

dbus-daemon (PID: 6532, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6533, Parent: 1)

systemd-journald (PID: 6533, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6536, Parent: 1)

systemd-logind (PID: 6536, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6593, Parent: 1)

agetty (PID: 6593, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6594, Parent: 3044)

pulseaudio (PID: 6594, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6595, Parent: 1)

dbus-daemon (PID: 6595, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6596, Parent: 1)

rsyslogd (PID: 6596, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6597, Parent: 1)

gpu-manager (PID: 6597, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6603, Parent: 6597)

sh (PID: 6603, Parent: 6597, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6604, Parent: 6603)

grep (PID: 6604, Parent: 6603, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6605, Parent: 6597)

sh (PID: 6605, Parent: 6597, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6606, Parent: 6605)

grep (PID: 6606, Parent: 6605, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6608, Parent: 6597)

sh (PID: 6608, Parent: 6597, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6609, Parent: 6608)

grep (PID: 6609, Parent: 6608, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6607, Parent: 1)

dbus-daemon (PID: 6607, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6610, Parent: 3044)

pulseaudio (PID: 6610, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6611, Parent: 1)

rsyslogd (PID: 6611, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6612, Parent: 1)

generate-config (PID: 6612, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6613, Parent: 6612)

pkill (PID: 6613, Parent: 6612, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6617, Parent: 1)

rtkit-daemon (PID: 6617, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6620, Parent: 1)

polkitd (PID: 6620, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6624, Parent: 1)

gdm-wait-for-drm (PID: 6624, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6629, Parent: 3044)

dbus-daemon (PID: 6629, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6631, Parent: 3044)

pulseaudio (PID: 6631, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6632, Parent: 1)

rsyslogd (PID: 6632, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6638, Parent: 1)

systemd-journald (PID: 6638, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6641, Parent: 1)

systemd-logind (PID: 6641, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6698, Parent: 1)

agetty (PID: 6698, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6700, Parent: 1)

dbus-daemon (PID: 6700, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6701, Parent: 1)

rsyslogd (PID: 6701, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6702, Parent: 3044)

pulseaudio (PID: 6702, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6706, Parent: 1)

gpu-manager (PID: 6706, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6707, Parent: 6706)

sh (PID: 6707, Parent: 6706, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6708, Parent: 6707)

grep (PID: 6708, Parent: 6707, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6710, Parent: 6706)

sh (PID: 6710, Parent: 6706, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6711, Parent: 6710)

grep (PID: 6711, Parent: 6710, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6713, Parent: 6706)

sh (PID: 6713, Parent: 6706, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 6709, Parent: 1)

dbus-daemon (PID: 6709, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6712, Parent: 1)

rsyslogd (PID: 6712, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6714, Parent: 1)

generate-config (PID: 6714, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6716, Parent: 6714)

pkill (PID: 6716, Parent: 6714, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6715, Parent: 3044)

pulseaudio (PID: 6715, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6720, Parent: 1)

rtkit-daemon (PID: 6720, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6725, Parent: 1)

polkitd (PID: 6725, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6729, Parent: 1)

gdm-wait-for-drm (PID: 6729, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6732, Parent: 3044)

dbus-daemon (PID: 6732, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6736, Parent: 1)

rsyslogd (PID: 6736, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6740, Parent: 3044)

pulseaudio (PID: 6740, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6741, Parent: 1)

dbus-daemon (PID: 6741, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6744, Parent: 1)

systemd-logind (PID: 6744, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6801, Parent: 1)

systemd-journald (PID: 6801, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6802, Parent: 1)

agetty (PID: 6802, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6803, Parent: 1)

rsyslogd (PID: 6803, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6809, Parent: 1)

systemd-logind (PID: 6809, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6866, Parent: 3044)

pulseaudio (PID: 6866, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6869, Parent: 1)

gpu-manager (PID: 6869, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6871, Parent: 6869)

sh (PID: 6871, Parent: 6869, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6872, Parent: 6871)

grep (PID: 6872, Parent: 6871, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6876, Parent: 6869)

sh (PID: 6876, Parent: 6869, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6878, Parent: 6876)

grep (PID: 6878, Parent: 6876, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6870, Parent: 1)

rtkit-daemon (PID: 6870, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6873, Parent: 1)

dbus-daemon (PID: 6873, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6877, Parent: 1)

rsyslogd (PID: 6877, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6879, Parent: 1)

generate-config (PID: 6879, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6880, Parent: 6879)

pkill (PID: 6880, Parent: 6879, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6881, Parent: 3044)

pulseaudio (PID: 6881, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6885, Parent: 1)

rtkit-daemon (PID: 6885, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6888, Parent: 1)

systemd-logind (PID: 6888, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6947, Parent: 1)

polkitd (PID: 6947, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6953, Parent: 1)

gdm-wait-for-drm (PID: 6953, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6956, Parent: 3044)

dbus-daemon (PID: 6956, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6958, Parent: 1)

rsyslogd (PID: 6958, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6964, Parent: 3044)

pulseaudio (PID: 6964, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6965, Parent: 1)

dbus-daemon (PID: 6965, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6966, Parent: 1)

rtkit-daemon (PID: 6966, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6969, Parent: 1)

systemd-logind (PID: 6969, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6994, Parent: 1)

polkitd (PID: 6994, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7032, Parent: 1)

systemd-journald (PID: 7032, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7034, Parent: 1)

agetty (PID: 7034, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7035, Parent: 1)

rsyslogd (PID: 7035, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7036, Parent: 1)

dbus-daemon (PID: 7036, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7039, Parent: 1)

systemd-logind (PID: 7039, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7096, Parent: 1)

gpu-manager (PID: 7096, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7102, Parent: 7096)

sh (PID: 7102, Parent: 7096, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7103, Parent: 7102)

grep (PID: 7103, Parent: 7102, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7105, Parent: 7096)

sh (PID: 7105, Parent: 7096, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7108, Parent: 7105)

grep (PID: 7108, Parent: 7105, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7101, Parent: 3044)

dbus-daemon (PID: 7101, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7104, Parent: 3044)

pulseaudio (PID: 7104, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7106, Parent: 1)

dbus-daemon (PID: 7106, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7107, Parent: 1)

rsyslogd (PID: 7107, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7109, Parent: 1)

generate-config (PID: 7109, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7110, Parent: 7109)

pkill (PID: 7110, Parent: 7109, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7116, Parent: 1)

rtkit-daemon (PID: 7116, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7119, Parent: 1)

polkitd (PID: 7119, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7123, Parent: 1)

gdm-wait-for-drm (PID: 7123, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7128, Parent: 1)

agetty (PID: 7128, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7129, Parent: 1)

dbus-daemon (PID: 7129, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7130, Parent: 1)

rsyslogd (PID: 7130, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7131, Parent: 1)

dbus-daemon (PID: 7131, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7132, Parent: 1)

rsyslogd (PID: 7132, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7138, Parent: 1)

systemd-logind (PID: 7138, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7197, Parent: 1)

gdm3 (PID: 7197, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

gdm3 New Fork (PID: 7200, Parent: 7197)

plymouth (PID: 7200, Parent: 7197, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: plymouth --ping

gdm3 New Fork (PID: 7214, Parent: 7197)

gdm-session-worker (PID: 7214, Parent: 7197, MD5: 692243754bd9f38fe9bd7e230b5c060a) Arguments: "gdm-session-worker [pam/gdm-launch-environment]"

gdm-session-worker New Fork (PID: 7220, Parent: 7214)

gdm-wayland-session (PID: 7220, Parent: 7214, MD5: d3def63cf1e83f7fb8a0f13b1744ff7c) Arguments: /usr/lib/gdm3/gdm-wayland-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"

systemd New Fork (PID: 7201, Parent: 1)

accounts-daemon (PID: 7201, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 7205, Parent: 7201)

language-validate (PID: 7205, Parent: 7201, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 7206, Parent: 7205)

language-options (PID: 7206, Parent: 7205, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 7207, Parent: 7206)

sh (PID: 7207, Parent: 7206, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 7208, Parent: 7207)

locale (PID: 7208, Parent: 7207, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 7209, Parent: 7207)

grep (PID: 7209, Parent: 7207, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

systemd New Fork (PID: 7210, Parent: 1)

polkitd (PID: 7210, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xa084:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xa873:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x740e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xc40c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xe2ba:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xa433:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xa6fe:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
Aqua.x86_64.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x34a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
Aqua.x86_64.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x44d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
Aqua.x86_64.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x4592:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 4 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xa084:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xa873:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x740e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xc40c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xe2ba:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xa433:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xa6fe:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x34a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x44d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
5528.1.0000000000400000.0000000000411000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x4592:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 4 entries

String: EOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Source: global traffic	TCP traffic: 192.168.2.15:44110 -> 193.111.248.108:33966
Source: global traffic	TCP traffic: 192.168.2.15:37428 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5704)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5783)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5825)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5893)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5977)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6049)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6115)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6126)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6137)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6208)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6298)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6307)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6331)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6401)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6429)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6496)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6528)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6596)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6611)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6632)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6701)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6712)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6736)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6803)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6877)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6958)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7035)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7107)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7130)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7132)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5830)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6236)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6335)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6433)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6533)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6638)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6801)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7032)	Socket: unknown address family
Source: /usr/sbin/gdm3 (PID: 7197)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic

DNS traffic detected: DNS query: raw.cloudboats.vip

Source: syslog.251.dr, syslog.29.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1679, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 724, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 779, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 789, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1333, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1440, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3060, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5504, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5505, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5702, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5703, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5704, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5783, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 766, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1431, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3044, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5364, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5719, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5807, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5825, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5830, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5835, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5893, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5894, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5957, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5966, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5977, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5978, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5892, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5986, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6045, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6048, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6049, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6050, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6115, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6120, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6114, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6125, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6126, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6054, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6057, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6133, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6136, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6137, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6204, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6203, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6207, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6208, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6143, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6146, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6231, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6234, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6235, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6297, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6298, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6296, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6330, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6398, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6401, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6425, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6426, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6429, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6494, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6496, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6497, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6433, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6436, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6521, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6525, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6526, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6527, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6528, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6594, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6595, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6596, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6597, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6593, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6607, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6610, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6611, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6629, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6533, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6624, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6630, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6631, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6632, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6700, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6701, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6702, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6706, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6698, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6709, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6712, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6715, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6732, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6729, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6735, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6736, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6740, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6744, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6803, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6866, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6869, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6802, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6873, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6877, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6881, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6801, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6953, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6956, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6957, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6958, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6965, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6969, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6964, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7035, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7036, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7096, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7101, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7034, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7104, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7106, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7107, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7129, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7130, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1679, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 724, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 779, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 789, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1333, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1440, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3060, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5504, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5505, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5702, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5703, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5704, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5783, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 766, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 1431, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 3044, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5364, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5719, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5807, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5825, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5830, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5835, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5893, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5894, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5957, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5966, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5977, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5978, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5892, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 5986, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6045, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6048, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6049, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6050, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6115, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6120, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6114, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6125, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6126, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6054, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6057, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6133, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6136, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6137, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6204, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6203, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6207, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6208, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6143, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6146, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6231, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6234, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6235, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6297, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6298, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6296, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6330, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6398, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6401, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6425, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6426, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6429, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6494, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6496, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6497, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6433, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6436, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6521, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6525, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6526, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6527, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6528, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6594, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6595, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6596, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6597, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6593, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6607, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6610, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6611, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6629, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6533, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6624, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6630, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6631, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6632, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6700, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6701, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6702, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6706, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6698, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6709, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6712, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6715, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6732, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6729, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6735, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6736, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6740, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6744, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6803, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6866, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6869, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6802, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6873, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6877, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6881, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6801, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6953, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6956, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6957, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6958, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6965, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6969, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 6964, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7035, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7036, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7096, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7101, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7034, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7104, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7106, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7107, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7129, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 5530)	SIGKILL sent: pid: 7130, result: successful	Jump to behavior

Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 5528.1.0000000000400000.0000000000411000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16

Source: classification engine

Classification label: mal84.spre.troj.evad.linELF@0/257@12/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5703)	File: /proc/5703/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5708)	File: /proc/5708/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5894)	File: /proc/5894/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5978)	File: /proc/5978/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6050)	File: /proc/6050/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6116)	File: /proc/6116/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6125)	File: /proc/6125/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6204)	File: /proc/6204/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6207)	File: /proc/6207/mounts
Source: /usr/bin/dbus-daemon (PID: 6297)	File: /proc/6297/mounts
Source: /usr/bin/dbus-daemon (PID: 6398)	File: /proc/6398/mounts
Source: /usr/bin/dbus-daemon (PID: 6400)	File: /proc/6400/mounts
Source: /usr/bin/dbus-daemon (PID: 6494)	File: /proc/6494/mounts
Source: /usr/bin/dbus-daemon (PID: 6497)	File: /proc/6497/mounts
Source: /usr/bin/dbus-daemon (PID: 6525)	File: /proc/6525/mounts
Source: /usr/bin/dbus-daemon (PID: 6595)	File: /proc/6595/mounts
Source: /usr/bin/dbus-daemon (PID: 6607)	File: /proc/6607/mounts
Source: /usr/bin/dbus-daemon (PID: 6629)	File: /proc/6629/mounts
Source: /usr/bin/dbus-daemon (PID: 6700)	File: /proc/6700/mounts
Source: /usr/bin/dbus-daemon (PID: 6709)	File: /proc/6709/mounts
Source: /usr/bin/dbus-daemon (PID: 6732)	File: /proc/6732/mounts
Source: /usr/bin/dbus-daemon (PID: 6741)	File: /proc/6741/mounts
Source: /usr/bin/dbus-daemon (PID: 6873)	File: /proc/6873/mounts
Source: /usr/bin/dbus-daemon (PID: 6956)	File: /proc/6956/mounts
Source: /usr/bin/dbus-daemon (PID: 6965)	File: /proc/6965/mounts
Source: /usr/bin/dbus-daemon (PID: 7036)	File: /proc/7036/mounts
Source: /usr/bin/dbus-daemon (PID: 7101)	File: /proc/7101/mounts
Source: /usr/bin/dbus-daemon (PID: 7106)	File: /proc/7106/mounts
Source: /usr/bin/dbus-daemon (PID: 7129)	File: /proc/7129/mounts
Source: /usr/bin/dbus-daemon (PID: 7131)	File: /proc/7131/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5531)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5531)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5536)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5719)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5719)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5719)	File: /run/systemd/seats/.#seat0kAvZsD	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5746)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65594l1rqOG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65596NetcFK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65597pAXtdK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65600HlVwNI	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65601CN1lDK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65602QerSGK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65618Ai5wCJ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65619isaReI	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65637EJOhZH	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	File: /run/systemd/journal/streams/.#9:65273WybNmI	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5897)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5897)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5897)	File: /run/systemd/seats/.#seat0qzHzL5	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5986)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5986)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5986)	File: /run/systemd/seats/.#seat065aoCN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	File: /run/systemd/journal/streams/.#9:66303Qp7oh0	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	File: /run/systemd/journal/streams/.#9:66305wAcBqZ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	File: /run/systemd/journal/streams/.#9:663060oX6fY	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	File: /run/systemd/journal/streams/.#9:66317RvqrG0	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	File: /run/systemd/journal/streams/.#9:66318FuR6QX	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	File: /run/systemd/journal/streams/.#9:6631972N90Y	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6057)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6057)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6057)	File: /run/systemd/seats/.#seat0JYMWWb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	File: /run/systemd/journal/streams/.#9:67210Mm2BZJ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	File: /run/systemd/journal/streams/.#9:67211q5WBNI	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	File: /run/systemd/journal/streams/.#9:67212KWGYpG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	File: /run/systemd/journal/streams/.#9:67213ccDIZH	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	File: /run/systemd/journal/streams/.#9:67220X1RA5I	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	File: /run/systemd/journal/streams/.#9:67307zzXWIH	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6146)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6146)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6146)	File: /run/systemd/seats/.#seat0yiKYzV	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6236)	File: /run/systemd/journal/streams/.#9:68440DRhOrJ
Source: /lib/systemd/systemd-journald (PID: 6236)	File: /run/systemd/journal/streams/.#9:68441J8RnhL
Source: /lib/systemd/systemd-journald (PID: 6236)	File: /run/systemd/journal/streams/.#9:68442w0WPvJ
Source: /lib/systemd/systemd-journald (PID: 6236)	File: /run/systemd/journal/streams/.#9:68471Uuts2J
Source: /lib/systemd/systemd-journald (PID: 6236)	File: /run/systemd/journal/streams/.#9:68481L1MrRI
Source: /lib/systemd/systemd-logind (PID: 6239)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6239)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6239)	File: /run/systemd/seats/.#seat0xdXtxV
Source: /lib/systemd/systemd-journald (PID: 6335)	File: /run/systemd/journal/streams/.#9:69556d4jEJc
Source: /lib/systemd/systemd-journald (PID: 6335)	File: /run/systemd/journal/streams/.#9:69557KzZJFe
Source: /lib/systemd/systemd-journald (PID: 6335)	File: /run/systemd/journal/streams/.#9:69558jrFLvc
Source: /lib/systemd/systemd-journald (PID: 6335)	File: /run/systemd/journal/streams/.#9:69559sMpIVe
Source: /lib/systemd/systemd-journald (PID: 6335)	File: /run/systemd/journal/streams/.#9:69574Ows7hf
Source: /lib/systemd/systemd-journald (PID: 6335)	File: /run/systemd/journal/streams/.#9:70677l418oe
Source: /lib/systemd/systemd-logind (PID: 6338)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6338)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6338)	File: /run/systemd/seats/.#seat01pxrOp
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:711823o7BeE
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:71183vdf5CB
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:71184zhUQXC
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:71185WovX9D
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:712008VMzEC
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:71280n8e7vF
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:71326N15E7C
Source: /lib/systemd/systemd-journald (PID: 6433)	File: /run/systemd/journal/streams/.#9:71387FwAJ9A
Source: /lib/systemd/systemd-logind (PID: 6436)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6436)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6436)	File: /run/systemd/seats/.#seat0x7JE8R
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73188UayBwb
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73190M0BW49
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73191KYZhGd
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73192OjyDrd
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:731939lSy0d
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73199q55YWd
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73205Qmfr0b
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73206Ftc9md
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73213UysX0b
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73214Povmsd
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73216ih2Rxb
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73287XvyEUd
Source: /lib/systemd/systemd-journald (PID: 6533)	File: /run/systemd/journal/streams/.#9:73353Dhl5mc
Source: /lib/systemd/systemd-logind (PID: 6536)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6536)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6536)	File: /run/systemd/seats/.#seat0zl9Hyp
Source: /usr/lib/policykit-1/polkitd (PID: 6620)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:741232nxEMa
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74124jmtOo8
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74128Ensn06
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74129GYdjN6
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74135AFaJQ6
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74141WL2m68
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74142twVNv6
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74143aJwsh8
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74150bOWwm9
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74151vMJzU7
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74152oRKc36
Source: /lib/systemd/systemd-journald (PID: 6638)	File: /run/systemd/journal/streams/.#9:74955UFIho7
Source: /lib/systemd/systemd-logind (PID: 6641)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6641)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6641)	File: /run/systemd/seats/.#seat03CHRRk
Source: /usr/lib/policykit-1/polkitd (PID: 6725)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 6744)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6744)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6744)	File: /run/systemd/seats/.#seat0XZZaW9
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76081iqBzMs
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76082uZssmr
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76083Co6BUq
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76084zsRMVq
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76085ocAnCs
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76086X8Rm9q
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76093fP3u2s
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76094bhDTRs
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76095SInLpq
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76096ekwW0t
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:760973rGZ8t
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:76172iYRGGu
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:761733oqQ6r
Source: /lib/systemd/systemd-journald (PID: 6801)	File: /run/systemd/journal/streams/.#9:762625xtpFt
Source: /lib/systemd/systemd-logind (PID: 6809)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6809)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6809)	File: /run/systemd/seats/.#seat01ER2M2
Source: /lib/systemd/systemd-logind (PID: 6888)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6888)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6888)	File: /run/systemd/seats/.#seat0uXO2U3
Source: /usr/lib/policykit-1/polkitd (PID: 6947)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 6969)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6969)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6969)	File: /run/systemd/seats/.#seat0iCMO6a
Source: /usr/lib/policykit-1/polkitd (PID: 6994)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:785100ervhV
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78511UY2kwW
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78512gNBc5T
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:785130LP7QX
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78514a8tNDT
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:785150tdWrX
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78516aZbHsV
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78517TXkd5V
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78518quZSqV
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:785197j2uNW
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78525mYaFTX
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78526NRYfyV
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78527WntXFT
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78528E46GbV
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:785297qbnZT
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78639KKg8UW
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:787300bsntU
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:78899w5z2wT
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:799035KFGrU
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:79908UnbRxU
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:80004DCQB9W
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:79155qazRtV
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:79197NDLugX
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:79199YDHs6V
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:79230ANDptT
Source: /lib/systemd/systemd-journald (PID: 7032)	File: /run/systemd/journal/streams/.#9:79231OTFJYW
Source: /lib/systemd/systemd-logind (PID: 7039)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7039)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7039)	File: /run/systemd/seats/.#seat09acyVq
Source: /usr/lib/policykit-1/polkitd (PID: 7119)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7138)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7138)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/seats/.#seat0ifxd4X
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/users/.#127mnsGaU
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/users/.#127ARN9qU
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/sessions/.#c1BX8xoX
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/users/.#127aHJ8sY
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/seats/.#seat0584bmV
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/users/.#127OVYYgU
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/sessions/.#c1rqFLCW
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/sessions/.#c1NlzovU
Source: /lib/systemd/systemd-logind (PID: 7138)	File: /run/systemd/users/.#127OoqPxX
Source: /lib/systemd/systemd-logind (PID: 7138)	Directory: <invalid fd (21)>/..
Source: /lib/systemd/systemd-logind (PID: 7138)	Directory: <invalid fd (20)>/..
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7201)	Directory: /var/lib/gdm3/.pam_environment
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7201)	Directory: /root/.cache
Source: /usr/lib/policykit-1/polkitd (PID: 7210)	Directory: /root/.cache

Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/6230/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/6230/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/231/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/231/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/111/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/112/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/112/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/233/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/233/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/113/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/113/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/114/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/114/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/235/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/235/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/115/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/115/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/116/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/116/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/117/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/117/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/118/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/118/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/119/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/119/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/911/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/911/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/6229/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/6229/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/914/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/914/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/15/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/16/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/16/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/17/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/17/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/18/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/18/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/19/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/19/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/120/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/120/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/121/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/121/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/122/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/122/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/243/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/243/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/2/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/123/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/123/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/3/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/3/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/124/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/124/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/125/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/125/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/4/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/4/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/246/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/246/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/126/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/126/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/5/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/5/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/127/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/127/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/6/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/6/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/128/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/128/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/7/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/7/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/129/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/129/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/8/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/8/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/9/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/9/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/5702/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/5702/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/20/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/20/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/21/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/21/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/22/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/22/cmdline
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/23/status
Source: /usr/bin/pkill (PID: 6230)	File opened: /proc/23/cmdline

Source: /usr/bin/gpu-manager (PID: 5784)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5789)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5791)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5793)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5795)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5797)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5799)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5801)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5958)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5960)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5962)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5964)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5967)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5971)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5973)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5975)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6123)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6206)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6210)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6215)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6217)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6219)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6221)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6223)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6227)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6303)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6305)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6308)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6312)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6317)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6319)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6321)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6323)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6402)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6404)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6409)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6411)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6413)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6415)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6417)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6419)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6498)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6500)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6505)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6507)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6509)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6511)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6515)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6517)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6603)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6605)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6608)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6707)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6710)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6713)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6871)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6876)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7102)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7105)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/share/language-tools/language-options (PID: 7207)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "

Source: /bin/sh (PID: 5785)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5790)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5792)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5794)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5796)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5798)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5800)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5802)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5959)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5961)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5963)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5965)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5970)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5972)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5974)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5976)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6124)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6209)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6211)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6216)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6218)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6220)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6222)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6226)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6228)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6304)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6306)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6309)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6313)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6318)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6320)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6322)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6324)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6403)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6408)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6410)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6412)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6414)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6416)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6418)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6420)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6499)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6504)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6506)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6508)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6510)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6512)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6516)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6518)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6604)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6606)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6609)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6708)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6711)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6872)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6878)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7103)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7108)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7209)	Grep executable: /usr/bin/grep -> grep -F .utf8

Source: /usr/share/gdm/generate-config (PID: 5806)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5980)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6129)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6230)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6326)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6422)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6520)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6613)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6716)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6880)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7110)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 5830)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6236)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6335)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6433)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6533)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6638)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6801)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7032)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 5966)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6114)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6203)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6296)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6397)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6493)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6593)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6698)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6802)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7034)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7128)	Reads version info: /etc/issue

Source: /usr/sbin/gdm3 (PID: 7197)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/sbin/gdm3 (PID: 7197)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7201)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7201)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)

Source: /usr/sbin/rsyslogd (PID: 5704)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5704)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5782)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5783)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5783)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5825)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5893)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5977)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5977)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6049)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6115)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6126)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6126)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6137)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6205)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6208)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6208)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6298)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6302)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6307)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6307)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6331)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6399)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6401)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6401)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6429)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6495)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6496)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6496)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6528)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6596)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6611)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6611)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6632)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6701)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6712)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6712)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6736)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6803)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6877)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6877)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6958)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7035)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7107)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7107)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7132)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7132)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.x86_64.elf (PID: 5529)

File: /tmp/Aqua.x86_64.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5782)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5957)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6120)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6205)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6302)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6399)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6495)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6597)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6706)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6869)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7096)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 5806)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5980)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6129)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6230)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6326)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6422)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6520)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6610)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6613)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6716)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6715)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6880)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6881)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6964)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7104)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7110)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 5536)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5704)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5782)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5783)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5825)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5830)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5892)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5893)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5957)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5966)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5977)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6049)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6054)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6114)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6115)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6126)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6137)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6143)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6203)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6205)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6208)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6236)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6296)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6298)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6302)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6307)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6331)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6335)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6397)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6399)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6401)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6429)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6433)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6493)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6495)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6496)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6528)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6533)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6593)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6596)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6610)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6611)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6632)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6638)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6698)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6701)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6712)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6715)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6736)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6801)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6802)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6803)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6877)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6881)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6958)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6964)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7032)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7034)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7035)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7104)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7107)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7128)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7130)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7132)	Queries kernel information via 'uname':
Source: /usr/lib/gdm3/gdm-session-worker (PID: 7214)	Queries kernel information via 'uname':

Source: kern.log.43.dr	Binary or memory string: Dec 29 09:23:16 galassia kernel: [ 164.580992] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel parport_pc ppdev lp parport drm ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper mptspi scsi_transport_spi psmouse mptscsih mptbase ahci libahci vmxnet3
Source: kern.log.43.dr	Binary or memory string: Dec 29 09:23:16 galassia kernel: [ 164.581014] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020

Language, Device and Operating System Detection

Reads system files that contain records of logged in users

Source: /usr/lib/accountsservice/accounts-daemon (PID: 7201)

Logged in records file read: /var/log/wtmp

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 File and Directory Permissions Modification	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	1 System Owner/User Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	11 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Indicator Removal	NTDS	3 System Information Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.x86_64.elf	52%	Virustotal		Browse
Aqua.x86_64.elf	50%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.x86_64.elf	100%	Avira	EXP/ELF.Mirai.W
Aqua.x86_64.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.cloudboats.vip	193.111.248.108	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.251.dr, syslog.29.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
193.111.248.108	raw.cloudboats.vip	Russian Federation		8100	ASN-QUADRANET-GLOBALUS	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
193.111.248.108	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
193.111.248.108	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
89.190.156.145	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
ASN-QUADRANET-GLOBALUS	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	db0fa4b8db0333367e9bda3ab68b8042.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse	192.161.55.174
	xd.ppc.elf	Get hash	malicious	Mirai	Browse	104.200.183.149
	armv4l.elf	Get hash	malicious	Mirai	Browse	72.11.146.94
	jklm68k.elf	Get hash	malicious	Unknown	Browse	162.220.9.16
	splmpsl.elf	Get hash	malicious	Unknown	Browse	104.200.183.167
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	104.223.82.214
	nshkarm7.elf	Get hash	malicious	Mirai	Browse	154.205.78.194
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	154.205.78.167

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/gdm3.pid

Download File

Process:	/usr/sbin/gdm3
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:nT:T
MD5:	0288B884CCD77CDAAE101584C26B839A
SHA1:	353E91CE3EB6EB4CA6875D712181FB876539ED7F
SHA-256:	2336BC34CCEF679CCE5679E23AE6D8261C76191975BF53B43157F9D20CA9294F
SHA-512:	2CC881FF855E1301ABD0CC41CB6DEF6E2DC4E731188BC52D1EA2974B903A21867C54AD9606D93E36BB5DB3644790860C560B40592A09E217C2711314D418E146
Malicious:	false
Reputation:	low
Preview:	7197.

/run/systemd/journal/streams/.#9:65273WybNmI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.352098232061399
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9PbGEBxGHJTBVyvsd:SbFuFyLVIg1BG+f+MfEfVnjosQu
MD5:	7167491AED7DED8F8BE2C88D20C08776
SHA1:	DE471FCB26BF9DB7DF1D5A85B7C9972BFD992F12
SHA-256:	F050F4C1807122ED4899AF9A78303F4A2E5579F7ADBD4508042853D0DC758270
SHA-512:	C0D1E573DE8127048F7713D32D3A8134243C565E81767F9D67485CE1507AD24F1392772832BF199ECAE7C75C814CF6BE0332BF6DD7E2A7411EB43A858ED54465
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7e292c9c71ad48219c22abccad092000.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65594l1rqOG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.534015846186567
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7I8kJLUKEcShuqjsv:SbFuFyLVIg1BG+f+M0LJLuhTji4s
MD5:	CA50A8CEDEC72955BE65C1100BEEA962
SHA1:	0CAF43D928CCFED5122EFD41408D38CADD86ECD2
SHA-256:	13CB62965CDBF4F787532483A77A876316BB726524E8EFC0080BC10052F1752A
SHA-512:	7DFF2E896A5A9E7EC4AAE538F5FE3EB4BCE6B755C76B182FA297272186AC1B54E087037673C25890F15803F2EEAD34FCCDEDC6C67BE906EB1EF99100BD074FAF
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1f10e26207234296b1743c7ca4c38d9d.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:65596NetcFK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.484207738376719
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5QiV3xTJWfSxQAg2i:SbFuFyLVIg1BG+f+MF3xQ8jZcHcljX+
MD5:	2B9353A43110F989F272CA352D219191
SHA1:	052DE9E63803684933A50673C4D35FCA90802E4F
SHA-256:	725565473BCFF63DCB72BECD6B38EA895EF88FE13E47534D7EAE1EB2F1E26332
SHA-512:	21B8E7665ECE8393B118047638AF7B992C36E842EE18402C3760B7558871BA48CFC1781305294F5E8A7649DE90DD3499C3BB772AC55B56846A76CB42F2783BA1
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3d45c9307a5746e695538875816692a7.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65597pAXtdK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4148057199423
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7ztLGWRbYWh90js16:SbFuFyLVIg1BG+f+MFGX++josQu
MD5:	B0F54C4A517EB54309EB9D6F0930D453
SHA1:	46318A0CCFCCB4CAA273E857F9ED8113667ACDC3
SHA-256:	2A7FF740F561D0E6BDAF965343154214E9647FD5CCDEAF47C9BA395DC9BB93D3
SHA-512:	D70B19C932E478DB2848DC72C4794200BB25ADCBF6BFD97405588BA26EC0B416D0321EEA25DC0F8DD5BED232E5F8748C690E5CD549B157C35AC88793D7E3592A
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1333c0bc9c3445858ffa42d09f193efd.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65600HlVwNI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.485115606286809
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuimT4H/RqjZcHcljX+:qgFq6g10+f+MET0kmAu
MD5:	7521971E3D166E80D82AC5745C3EE0D2
SHA1:	56F71558695C796D593C9E6818B462E6AA922425
SHA-256:	F34EBAA0EA530E98E03F6CD01846E25D121F2F69B8EE93EAE73426C153715E08
SHA-512:	2DAB4B2910D84F8E4F8411C878A5310701E686456507AB3EAB3E4A81153164BABF90B238C4DD21B18B034C503EBC63689803759417F2704BFE10CF3F66AED3AF
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d80c0f51ff9f4851b62bd64d1222d4ce.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65601CN1lDK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.361075481094846
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvYq1RzWHR4WIzE+wU:SbFuFyLVIg1BG+f+MAqnWHpAjosQu
MD5:	E6CD0B71A23E85D39C46ED2A9134AD19
SHA1:	A409CC3D73786D08849E05170AB89DDB2AF4C6EA
SHA-256:	D8621379C45524F729279D59FB697BFD9CF622321D179CCFE34BCE40C605AEB8
SHA-512:	EBE95861A50FEC07DF921C8E3008E58369D77FDB5DCEC32D43C6942843A9FAC978F088A5EB38CA1CE310661016567E12515874E67755141CDABFB7498EDA80B1
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e1d1e14e5a49405499b4073f1448daa1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65602QerSGK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.421282569390293
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8H+79Bzp1KZs2lsjs2o:SbFuFyLVIg1BAf+M8H+7bjKqjNALyAZD
MD5:	0595B4ACE9CEA1264540B02C88A83C7C
SHA1:	0F19CB427A07B391EF19C6F04A26BDD5B6A93768
SHA-256:	16A20E3A08C23E2C7F85A2F34048D55FBD8EB19D3D78E0B87ED6EBE282832E51
SHA-512:	990D188672135956F0433D7CC63165D75C9994614FC197B3AD390C1D47542AD54C27F1043FCAE364AD869F341A3CA302CC601AC0D730DE8391D31A9960996D18
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6ba2a70224d741c28daaeb6417b3ff3c.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65618Ai5wCJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.50895702673152
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5Jkf1BRhU0h+sjsig:SbFuFyLVIg1BG+f+MXE1nzTjZcHcljX+
MD5:	91D8442F5787EC499E3D7CE561CD4DAE
SHA1:	6CBB5E85920BA6ADE9ABA6E24448809A00C09755
SHA-256:	0917682B82CD257A6D660D992B8EB5B153A6005618D329BF8082F34876404751
SHA-512:	F9D38586C6B2BA8BBD2B3C2045D3579AFC2B7571045A95BACEF44714D5A151CD516D55DF3583F53DC5F39FB5653C9C89A7746F2B40B465F71A770E3A03193879
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=346f9088df514d41bf91026cb5296311.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65619isaReI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3972001117842785
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuiiMX8Wi7Ykc2jswK:SbFuFyLVIg1BG+f+MuilMHcgjLkGq
MD5:	B57C7BB0F344F22FDF6EA2091D09DF54
SHA1:	05A56F607275E01D62A3CC06F60FEEACB74DB371
SHA-256:	87D2AAD7A5EC859342399CAD5A652B468BCA8C0EBD3C814E0C1355A65BEE78DC
SHA-512:	D38CE44BD313E93CEF4E0519961B6DBCF8B6FFC66784500BD9C9AAF7FD61E1CCEB02143C7085B44027CF161E2D34C894E423E4561996FF33CAF6E9326748E785
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ddc274102a034b219566e5641e1a8137.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:65637EJOhZH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.447734539328022
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpstdyDBxsjs2BbQIeXD:SbFuFyLVIg1BAf+MWUDMjNdQIeXD
MD5:	2C5AA753C3FC38E2763054F0E302FBC8
SHA1:	294F49122FB77AD9B51D6B20AC34A6DFFC885785
SHA-256:	C5E7E5555B0E4EB2D56375FC28E1C295D0AA1C5B411E930F578C94B7F71ACB95
SHA-512:	5AAB872A30603A824818781C21F84399646D60A8F4E53B9D648F3392B298B13CA8191FEF460535775E09FE1FA3E33102874A37F9128906EEC956F14B29508903
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c016e3d2d4d04c4e8077af8746ab6f22.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66303Qp7oh0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5062747973415975
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6e4fA4G5qjZcHcljX+:qgFq6g10+f+M74fukmAu
MD5:	C8EFA69E162DF40B2479B9E5D6CEB5A0
SHA1:	E642B5B52BE4AF15B150D6F2BD99BBD5B4118368
SHA-256:	85C88E71F23A20DC163B438D09BD2C2A2BF096B074361C7BEA4859D3C9C83577
SHA-512:	EA5450ABD159537BD359CC9C0534EE597FE2D076489A66940183249EDB4E7035EBFBB3AE5A15C2C5D25D12826CDE4FD8799E7D74FA8F3551E6E084B7B8E39252
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0b7f701827f34a4390a4757b12d1648c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66305wAcBqZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.416678258893529
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm96AmcMgXvyqjs1Ha7:SbFuFyLVIg1BG+f+M7mrgXKqjosQu
MD5:	947B8DE76C327DE1F0BF13A31DD9E15A
SHA1:	23F1F2FF5410EE321CDE72A34EC83EBBED80E1D1
SHA-256:	E5CE9692B2B60161C2C040247F3A39D835B26077C136D117E9F3F6D344AD79C1
SHA-512:	8213CDCF7E7F7C2DB69FFBF80491D908233893971C0ACBB1CF76AC729AC50AAA71E50457F890928D5B53D94807758B36F6DE3AABF61325C5C32A82D71DC3ECC5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=736c73b4ec3345729bf935bcafb2b339.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:663060oX6fY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4414571699888095
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6xrKJASqdWvAuxsjx:SbFuFyLVIg1BG+f+M6cxhvAuqjosQu
MD5:	E405050E4FBF196F53296A0FF1C790C4
SHA1:	2F4340D5B2BB0EAA57A439A0F6C82F7BA4C916C3
SHA-256:	F49BE269E30DBFB6316CBCC7F0EF7C555D958C3E6FFD59964A7DB2BFB46521BF
SHA-512:	DFBAE9D2A27F1E6239C80A7ADA6E42FB7B91A1F7DC932021248076AB0CA3CCD5D02F7FEF90233E77245D1BFE1FF630E851403F1D4DB263AB9AFC2E2C18B54416
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=09e5180ab1214048955bc7167f4ed983.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66317RvqrG0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.425309477092183
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrbuUn1RlDkXUqTossj+:SbFuFyLVIg1BAf+MBRlweNjNALyAZD
MD5:	1F67AF32AA2AC2CD99BD5E646285BED4
SHA1:	0426B9FB598651CE79732242A51F57D8B750F14E
SHA-256:	B2974F2E5E3C9E2E4FDC32600798A52FF94F6C570EB94FF7A595DF58602DD5DF
SHA-512:	BCBEF75C64F5F02A79C739BFBADB296FEFEB1FAFDF61E174A4AFA34961FA4064328EC657D0BD5253A7338CD87B22D7FD10BE7FA3559C80AC446F4BBE9F1F1CEB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa3d0781719a402b8ded210e6b58e4fb.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66318FuR6QX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.355498460318464
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5vGQI3EGyVVkGa2r/:SbFuFyLVIg1BG+f+MtGVvyV0ZjLkGq
MD5:	A4B614544A2C9A2BE6E9CE41DA4239F2
SHA1:	904B6B1E591430E5D5034B559E02B0FF651EBB62
SHA-256:	50784861478C581C0AA6FEE426ADC0B9970DB1DF3C169F683901E959DEEDE22C
SHA-512:	6DDB9DB0313B0467F0D7CFAD50C2DD1D0242817F8E8E5484B6887F1FEA5301F2BBCC906E913FAEA716FF611948FFAC932C349E0927F251C426B1BC143BA80294
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=30e1c55317eb41b6afac7d00d7c7a310.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:6631972N90Y

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.465347885397567
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MpaldSShuqjNdQIeXD:qgFq6g1af+MIHRF2D
MD5:	738DACD90B6939D7A2A0F6E3E9AAA4B4
SHA1:	67CB161B5991D22F585DF0616639418088D0131C
SHA-256:	5E4310794155BD4E0632895B2572814D789C6170F3B1DAAB20BE83CC817E9E70
SHA-512:	94ADB2058081D7788AD2AFBDBBC2313294DCBC134918B80FFA59F8DB3E3957EF968BC2BB96702FD29994B79A1898087BFB709D7C9447646ABC2791220FD804D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3ace6d4a49514198bb4f99482f45654a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67210Mm2BZJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.508957026731521
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MVVV6+2rqjZcHcljX+:qgFq6g10+f+MVffmAu
MD5:	6DA2AF1CA34ABF3E71217FAF538B9991
SHA1:	99AD661B8F5217784418E319BEFCFD41C38EB91C
SHA-256:	F894846A1E280F9F37A9E0DDB9448C3852C06FB8E2345C86FA8D089E775623F6
SHA-512:	B91588B7ED4D6259CDF023C13F23167D2F5449C2A2E5628BA554AB5EE7ADF0AD13B91FA3599F9E3187BCA100A852855DE55CA32E565BEF3B11A5559C80F823C1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=179b23a94af04281bc05cff3d75cb84a.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67211q5WBNI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.395998669823509
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmruFR3HDH+AAWSNF2d:SbFuFyLVIg1BG+f+M2R3HC/2josQu
MD5:	C3C48EE1395EF89C0AD0682D97175BE7
SHA1:	86634E2977177CB53358A77EC9A411B708B8D355
SHA-256:	A9E387EC746027428F0C092F9F86FF0DD89DDC4901CC89F57B2AE13E8BEB570D
SHA-512:	1E96124E25AB59D58B0A5FC6C2BF6B17E5C9C54158F518DA88D1540968FDC29C1AE603819311DF3E1FC62273A35899888228AC082D1CDDE1F775733BF963D0CF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa44cfa6d2a9408bbfb0c0be3b373627.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67212KWGYpG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4083424213304845
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5Kr9nTG8GvsZjs1Ha:SbFuFyLVIg1BG+f+MsrA84sZjosQu
MD5:	A71FAECA9840B5E87F5C69168809552C
SHA1:	0E9AD064EE8BF217797049BFF33AD411E5B84275
SHA-256:	93A3A1CBE5F8AF7089E2DEF6B28C1BB0FABB958E250F29B760DE638A83C32CC1
SHA-512:	881DDD21D3520B4A15AD88ADD1C3FC0FF3186B0EBCD3433096124FDEC424188A142746D7504401F3051505BE6431570AC5C57699B2780BD4F5F342DE7C0AE39E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=316407c796154da49426cce49b66e5ad.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67213ccDIZH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.433739340889082
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpMduRumG66JRxsjs2Ax:SbFuFyLVIg1BAf+MfNG6QqjNALyAZD
MD5:	0361003B0DD740E1FA37CA4ED95E1DF2
SHA1:	4BC69310267DE8236498E074FF9BFAD3E1350271
SHA-256:	A378DB4F94C10EA5462FE1825944036574D03EDF252650CF140A9A053B8D9FD9
SHA-512:	ECBD83298B1ABB25FC8654BEAB6A8FA54DF09A42F111C4F01640CBADA84DAED72E70E4B3A8BCEFCF2F768D926E1FC6B75B5F10A512543B4A30B2F9B8FA4801A4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c41082809e7842dc8f9c3cfa2495e633.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67220X1RA5I

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.351201090176248
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr2wUgSvc2SfALpjsV:SbFuFyLVIg1BG+f+MqwrS0IpjLkGq
MD5:	DF0500577F797C41039C8CCF55D8ADC5
SHA1:	11B8EC61129E0A5A7F72751DA978D41AB12EC273
SHA-256:	E1CCCD1B4B4A653D343CD89F988560207A94997C444C2B6947636666D585AFA0
SHA-512:	74AB467D3F8D636B4E6EA050742A0EA58522675D72F8EF0CF91BE1AB8368FD2F3EA98269C56DDB424016801F888B83B043FD56888400A0D096DFA51D5AE8302E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=adeb91639319476d9e59b709766e0aae.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:67307zzXWIH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.433277784320755
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzHH0BEEE4deY+sjs2BI:SbFuFyLVIg1BAf+M7UJdeYTjNdQIeXD
MD5:	6B27C0F474A4C882942802057F4947AA
SHA1:	1926AECC5D98FE3941B0AEC7909BD34476F2B6AA
SHA-256:	C6F0CEBB03D3063DFCA4522C0896D78650DEA8006B409CA1370BC2CC101280DE
SHA-512:	1723DFCF2FB3D060605EE2BF1477BAA913760E8B8D4EC8A2803B5E82C7C2937743BD0149E20628374442B3A5B365A08C3CFD96A37E98F3A8F6C3817325ADD3E4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=99e2df04a6164027bda314caa48a931a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:68440DRhOrJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.427551404528036
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyObNDETVTjZcHcljX+:qgFq6g10+f+MHbRETVRmAu
MD5:	C720A7B74B065F6D05A92DE1FFC01A2F
SHA1:	9375C6F083572CFC79D10E1B854E7C3680E1E0C4
SHA-256:	37F79C5A5FBBBEA6FEF28AEB6BE773012FC466A6D6DECF179A76717704597C66
SHA-512:	03CFFEBB37D469FB34C2AB247599A7E1F47FCC24BCE5263EA9FF25F9404FBB2837E9D834727EC3BB8C8C8244EC6694172AFB3D2124A4CE1F2ADF7B4CB561C425
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f7aaf87d9e543e5b050c0eaea9faca1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:68441J8RnhL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.394908995962723
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8AT8tRfFC2WDn0h+U:SbFuFyLVIg1BG+f+M8BtRE/D0josQu
MD5:	19702B6C2B5176054DD752CB31734634
SHA1:	F365BE130CF3E2843ECE015129B58D4DC635AEEA
SHA-256:	B0D0B32DBF9B6F1FC7F7756B58A9B04B404DD6F9BFD4C0547B09228C813E39D6
SHA-512:	633C69015B88EA0E5A3F487610447E1E44996D778F9FE2EF1CE5FEE7E1C896692C96DE62E3938755BBF6114F27640CE6016546DFCE7FAB29C129EAFCC30CAD21
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6ea48c3e9a6c488282cd192de8dc8f93.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:68442w0WPvJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.424524729299895
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4HWcaDC90A7wsjs2ALl:SbFuFyLVIg1BAf+M42DC90A1jNALyAZD
MD5:	48FDE0C1BD3A60969ADF39B9F92A1CE6
SHA1:	9F177724456E0B5C589C115327ED394B84EEDE62
SHA-256:	CF725E33C8EDC5962143EBF79E9EB4FF501E13C4175B808C528F0BB98DE0F049
SHA-512:	866FBC1FB51DF5795BDAEA215BCAADB7604C9ED047EDA8F65646C0D60D89CECE3A3FF6830AE00F5344951ECFAE91E015D6E2DA36112B18172A5AE59B06EBDCC2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=23e39fa99f9f4cc6a849d658f02c47ea.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:68471Uuts2J

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.417703296911636
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsDSFJzHgMYAg2jswK:SbFuFyLVIg1BG+f+MsezHg/2jLkGq
MD5:	B97FF6B111CDB7DC09025F94F44454A0
SHA1:	05B40AE87B6181259D53F3D965E8F06C67D59BDE
SHA-256:	10252B9422E1FC9F865309D8E21BD6304657C86434DF2F0AA4075016BF90BE93
SHA-512:	E28E94E38C2706FFE260A167656B89D83BBE651EE9A8F1CBDA193D984DC527807F938EA42A23085C9D14BF73CA4C737D23F8888068227BE2B5490900950848DE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f4b07586fa2a4a23b3c89085f5f1c28e.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:68481L1MrRI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.49000792576662
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm46ccJTdi8g6qjs2BbQL:SbFuFyLVIg1BAf+M43wvgnjNdQIeXD
MD5:	5B58E7DFC85ED4255577DE48DF131DDC
SHA1:	876485AC79FA7A5F37A7A24A55A6BF36DC7C2B81
SHA-256:	06BF47B73F1B2A19236597A7EF62E7D6D411C26A7E50120D070562E82B90B5B0
SHA-512:	578AB160A39D4D1E89C42DBC29C7A5CF6756316BA5C9ABA6E0627E43E744AFB236944EDF5CFFEC8776C5643A701FBBA6B10929ED583CA276840963674BAE6CF2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=21aab23f199f4bd8b8e5874fd605947d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69556d4jEJc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.443695127183915
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsLRNttzyjZcHcljX+:qgFq6g10+f+MsvttzsmAu
MD5:	6A6AC7524E47286232104664358FA7E1
SHA1:	CBD57AB6679B32BA0D095417ADFE1274B3DA78B0
SHA-256:	ADEC36E4F0916EBB84E25256EA4619361BD48182C629D3C7B0789713FD1E61F1
SHA-512:	D2F7C46025A48718BA01FF14E607370F797AC9094054397CBE3D086B1D6426EEC08CDD66FB5D7D7A33D413772693F63F88088A92A36BC542C7BFFC972F2C642C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f0dfe087404f4e78914a08e7e746bf5f.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69557KzZJFe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4059741846364116
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm95BEx8js1HadmQXAu:SbFuFyLVIg1BG+f+MPBEx8josQu
MD5:	DA56A1E15B46DE745359DB1948530CB1
SHA1:	3A37897B42B14E9BF02FF058C58B856F5CB88745
SHA-256:	3D3E4F571E3FDF861B2B41FD8E764CBA78410B3598C741BBB05073DC0E1F2725
SHA-512:	A901ED6A8177E371CCAEFDF5A7521DC40CB76FE83F568596CFF6260F8E3826B773CE6DDD35CC9B6245F8DB6F832C01706E2496C76F7C4A01A351756F70BD4EB1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=778ba3dd784948c8b3977213323d3509.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69558jrFLvc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.414715109344898
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/CAglbOeMqjs1Had9:SbFuFyLVIg1BG+f+Mbglb9ZjosQu
MD5:	CB8D265C415AD5D5F9EC3E73AAF7CF5B
SHA1:	EA123112657402E6EAE4C360FE8C12C12110D29D
SHA-256:	D7289F54077B7739567D489EB447C766C1D4549012D00332CCF4917A9919D1BA
SHA-512:	06D146A1D86E2FAA2E818629EF4540FB07E8B1E56A7D5A7F95B9D230A787CB89CDDBFBC1665941B18F1E226D5D45A74CCFAE3D4D50015CC01A49F069CB15B83A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5dcffbd0406d4682be760b29a40bce58.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69559sMpIVe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.418994922353561
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmz+bCTRTI1eXz8js2ALl:SbFuFyLVIg1BAf+MwIFX4jNALyAZD
MD5:	4297CBF0CD8C4F574E84CD2B46695222
SHA1:	60A858AF9F280DF7BDFFC34CB73FA573707007BD
SHA-256:	3AEC9F018CB458DB348B585B62BC49CF7EB3C660C8DA6DCBCD1394EFAD3F9898
SHA-512:	9DE7C5696380A7CB467A47DC308ED1B28C8E8D440C7A59B48ECB91B9D1A632C4BE3BD6D4C6AA8579696860DB97AFD251FDC3C5CC2200313339C1F47FF224D2C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=981f9759f61d46e29f66861667fe892f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69574Ows7hf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3619009098357795
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuXC2YiTcYmU2jswkT:SbFuFyLVIg1BG+f+MuSHiQk2jLkGq
MD5:	73CB6A76034A298AA44EE1CB4A1C0457
SHA1:	DA9461A7A9D921CF243014FB0616D67AD5378D82
SHA-256:	3BD4B6F898D22C8A1B7A4A9E95B0775694B8B7BBAAC9E56C1220B1DBA557D9C8
SHA-512:	030DEF2EA359722A5CDC00EFFF0BD5B8768827F8A8456780379E0C4DC4D009332BAFCC844D09F8699A4429F913135132F097F21E8178053CAE897D9EBA443E3D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d052c8e385c043aaaf1de869fa5ae1d6.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:70677l418oe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452093233823492
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MukW0HMcETjNdQIeXD:qgFq6g1af+MJ/MlF2D
MD5:	FD9C78B4A3E569AAD679B9A6042CDE29
SHA1:	F02FBEC0F324CB3C1650CA7B58B06C52C1E0DA4A
SHA-256:	7696352AFE5D9E99E78790C19335CB15EF35B00B70D844104E5C03424873A904
SHA-512:	FD4ABD1DFAEA62F1AFB47FC99D4FAE0F5ED32E5BAAB8CD30598704077763CFC5F6D620CA690E8C344FD43BCBEE85744406875CCF279A7F42529B72D6219DD063
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=de2864d434de4b30bcfc5a5155c3f93a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:711823o7BeE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.469530010800205
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu/bqVUq4KrxsjsicN:SbFuFyLVIg1BG+f+Mu/bQrqjZcHcljX+
MD5:	2D4E67E85474D2DCA894412DD755A781
SHA1:	DF123903FED025A188F77479C96D6CE250FCF904
SHA-256:	7D113958CFD6BAB372E62350F64AC66B29A3D0C6C622373A5DCA21E46AEC61C8
SHA-512:	4E92D734205422F68871A67265561B06B7CE82EE15FF263FFF3F478F9274A7E0A47878813387BB83EC5DDFA68811EF47095406656582F4D7864E7D6885A1B6B9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4479fbafafe4b74806310ed842a5ad1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:71183vdf5CB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.406827534172235
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5RhpwXvEUdQtsh+sd:SbFuFyLVIg1BG+f+MA9LTjosQu
MD5:	D55D524C4E7B8B46FAD5F6E8AC061210
SHA1:	E666EB0B626DFEBA6E276D08B90C5A29B574B9FC
SHA-256:	DBE366D8230AD45C4E4E6C00EF39BF9CC6506E4085C3A5DCBE826F65283FF4FE
SHA-512:	CE1B1A0382961D47C0A66AE85F541CF5B738DF7A2A443D6113FA481D60E2355B92EA6E59652DC8DCD04EA6161731A70964950660D5103DE56D4C068D9FDDA244
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=32d4fa09d0f04982ac4849ea28c8536a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71184zhUQXC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3790432350199975
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmusBmSARwfUWg022jx:SbFuFyLVIg1BG+f+MugARHZN2josQu
MD5:	6B435CD9F9765752E3088E4523C31137
SHA1:	78FEEE580AC1A3D001572CD37BB88C60D6556047
SHA-256:	F900F98DF4D31DBCAA305CC98CABE3547535E2B701098B34AD013DCA9365ECA0
SHA-512:	3EFB8A662039CD7DBFB4D8BCCCF113213A662457AA8C6953030A6651187509702503BAFCE4FDC0687DA7B63EDC3FB38A0D97A9928D73D2EFF37452392FBC4A66
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=db038de12e7e48d2a82b8bbb13ef5445.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71185WovX9D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.437334043280337
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8NxXl7vdpZjNALyAZD:qgFq6g1af+M8Nx17dtIZD
MD5:	0693EBF62B6B3AB98E401C6D7CBD5037
SHA1:	50E724689CC865EC4F691C218AAA98E1858330B8
SHA-256:	AD333B67310EBBCB1B1658E71AD5AAD92FAE6F1F19FF253ED81FD20800090E24
SHA-512:	BED49F00161F9B539E417B968FF1C4DD575DF4F37D4B8D328A6A118FA22AF6DFB1FE599CB5BCB6530E071E4D4E6289D775DEFEE911104643B54AF8046619D550
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a11fc9e56b7b42daadf178079228e6a7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:712008VMzEC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.411049075828683
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyciW4kbQfjswkClr+:SbFuFyLVIg1BG+f+MycfWjLkGq
MD5:	06516D56FABD7574A39CA5F8109E5BFD
SHA1:	8BE42843FABA910ACFF99F7DD9543CD339CF755F
SHA-256:	C15A9A8415A915B2B638603FEE491A1FB98FA15F6844AC4343DE4E82D803ACB9
SHA-512:	E96308280FE32A496A00CAC62373FF6277A9E4B9400E1303742AFAA89623E702ED7C995FB19483221894F2C2EB24E8B241CB3546421A3504F8351F2BC85137A0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=81175ffa9efb4a319ff6ef0eb9762538.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:71280n8e7vF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4913511433028885
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmo2EcSkjXM4XGwYTjs2y:SbFuFyLVIg1BAf+Mo2EjbVjNdQIeXD
MD5:	9C202774AC188375AD7A98B144B98DDB
SHA1:	8C9CBB7CE819C84E47855E327A72BECA094D750B
SHA-256:	83E686FEBC3CB1CC6861998BC21010850FF3468AA7FAA43757F87EE302786070
SHA-512:	449B2CFFEAE4E146D7076FF4994AED8E082FB2BBB41AE332E93B87071E5FEB7083318F80897E649208B87C1EF0E8ACE10A96051C5EA930FCFF40FFDCD61F0033
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b4586129730c4e60826e4f86180ca798.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71326N15E7C

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.34441505702697
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7WQdjWmD0GHA+sjs4:SbFuFyLVIg1BG+f+MThjD/H8joa
MD5:	223335CAED0C54731AD71821DE32B3E4
SHA1:	F2245D184AC91D47AD0C6D8968245B291534800E
SHA-256:	31E1F62F67C0754ACA40E30BE80823296AD964BA662A5B59FC54152F4DD7615B
SHA-512:	FAE2DA1094DF273E6F98C35D625A829012291D4EF68BE7A3EF1A6387121675C56C7ED4CE6BB150952FDDF907D37DC49922EC5C660299E66F9B1830A72DB89966
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1bde58b263ef4b0c8133ab0ca3128863.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:71387FwAJ9A

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.359487003783957
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp9XgiYhAbxsjshQJT:SbFuFyLVIg1BG+f+M3XlYhAGjtWL0
MD5:	EA16219D2A7C6F7B7F28209DF43EAE84
SHA1:	C745E14DD0437A53319B181742D7724AAEF26392
SHA-256:	60DA79B30FC9DFCF53CCE4851D1F54B59C816FB8A70CE2325260AEEF395BAE58
SHA-512:	DE1203569D27E6586309025995A05839DCE4CFB87CB8713F0BD4E40BBCAC3B75F483362ACE0BF624FA5512B9698AA36D9421A5EC8AEF5414230C430688D5859E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c8bbc5f2be804136879bc33b32ebe90b.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:73188UayBwb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.449637500589629
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DmQHpD21GHjs1Ha7:SbFuFyLVIg1BG+f+M8DHIMHjosQu
MD5:	393C5D611A1A5F9A756D8EAD4EC6B3AE
SHA1:	8B07C435BCDBB0A4A4DDB2994E3AA2EEF26CC99B
SHA-256:	9C0C62892474FB874587181FCC977EEF09132E96BA4974E7CFC1BC08BC900AB4
SHA-512:	FB5F501CD846EE2FF733BA3154CCD305BB0B3FEBB2C6617C8309AF02A5660D546DD29F12CAF71EB78149A9F4CE9E4DDF450C69E9559027AC05F23154EC8851BC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6fd2f9c63b5b475b9d37105b23fcf4c7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73190M0BW49

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4721394564128385
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm78HLaHd2pKdL0ZjsV:SbFuFyLVIg1BG+f+MIHJpGQjZcHcljX+
MD5:	C81EC3D42F22BB7B4C7A546697CB0E0E
SHA1:	8B1655F50A4BFD44A577984FE21376750B6BF9C6
SHA-256:	B62FC06373CD2A4A1A221E3DE211CB117354764FB0DD0936DC48D6A745BA77BD
SHA-512:	D833D6B0928CCF1C465271C23E469D949FA3059FBAA23CAB6A01A24E09BB85225E2ECA06BB4A455E2CB50A62F04C7F540E4CB52B2AE571C0F7BFFF00D3E38CAB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1ae7b6b0a7464ac0a8450eef15238817.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:73191KYZhGd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.33287244220071
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzQIRi4R9BWsjshQJT:SbFuFyLVIg1BG+f+MEIR3rjtWL0
MD5:	5D8DD58EB23BE9DCD956DC984D2B111D
SHA1:	CD321DD9C726D78E1117F63D6320DF23B249D8F4
SHA-256:	7C572772417C25D86279DDEAFAB0C3757940A02BD3941B7E16330B5875601EBD
SHA-512:	945982A5F78C1AF6DF55C17F886E5345999AE3039C2F5A69831D2FD9E17DF6190B11F7EFAFA6204CD02E3739ECB7367F880E0440B36F102763292279F2583F22
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=92e4f703e8544145914308554989da8b.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:73192OjyDrd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.426184587680096
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsVa4GHdjdBuxsjs16:SbFuFyLVIg1BG+f+Ms842pTjosQu
MD5:	8A88B28F45AF8AA3CABDF9EC179B30A3
SHA1:	45093791A08429A6AB4978A5694B1045866FA9A5
SHA-256:	AE94BA9282294F0277F77D1F7CC3658DE1C5DC689C0F7ACF1A4EA7F835EE3D4D
SHA-512:	F1C4365BF6CCEF46FA85CFB2210DD0362F19A8BA78C7EBB8587DF4E7679878F8DC3A315F8301AB896D1A6D3D65E7AAC6F6026AEED9BA9BD7CB7C664429E0209F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f5e1f5ce7fec43649c78158711a0fdcb.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:731939lSy0d

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.396200814654266
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsGGDLGRGCyF2js1Ha:SbFuFyLVIg1BG+f+MsltCBjosQu
MD5:	00581D70B650887E6A61B8B4DEB666C5
SHA1:	2D0A50AF524926D80A74EEF8D61BA7551261562E
SHA-256:	9DD225C3535DD881209BD2336028E9D263512F979446CE1D118B1543A8D6C73E
SHA-512:	9BD9C042DBE5700CAB44DEE543C9D8F40F93A00219A2A6355F510F1AB0F5EF1BD6E5F8B672765D5532522487A185B1842B14F342E3089245D74B0A73E4FECD65
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fccf129a3c4642d79394d7931aea09ad.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73199q55YWd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3742258332156965
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/jJ/BdM3d3FzRqjsO:SbFuFyLVIg1BG+f+MV/BdMtqjtWL0
MD5:	1CB4ABD072E4F29415E4DF72A7CA7036
SHA1:	0AFEA4D918FF605702E72C17FE9674F5A98BE637
SHA-256:	2B351840B5E1822652617E05CA60B662773B1368B10035973A685786FF5BCE6A
SHA-512:	551EB9A2D28210B1C7F37D87F63F549184DDAC3146AB5A3303A655D5597A83219830B81313376ABC08D853971FECBBC958DD343044755B54A5F796C64BE2DD2E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=575cb9a3d86d45a6987afc9b041cbb19.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:73205Qmfr0b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.444157839092344
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4E9AOS7nTWNlsjs2ALl:SbFuFyLVIg1BAf+M49OSHg2jNALyAZD
MD5:	9581D3DA25C27E1A87D0BBE580A02C3F
SHA1:	1F06BC0162D8EECF0C492E5D5FC41706BD04E5E9
SHA-256:	F98934014B2C1DA37A424B428EBC1A46F67568E49F1BEFB1BBA8BE1597ADBC85
SHA-512:	A5BF386C9FE0FA78722FB83B83D03856D054DBF7D833DA90271DB020E899C9D3385D6325A755D93E5C2CFDD3C37A17F8737F6E3C29C7DC2D78BE9C96595609C8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2aa16a0867fb4d8199a7c032dc5af963.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73206Ftc9md

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.466212110849146
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBy6BUlzW8HDRUy6O:SbFuFyLVIg1BG+f+MoBy6WzWERUy6jNE
MD5:	0E4138BB0F94709399428F88E6C071D3
SHA1:	AC5C0561403177A745C9E84E585DCD9BFBEB131A
SHA-256:	FCBD1A3DFCDACAE33FEE0AF764C0FAE7E5D69ECB3D202C4AC1B4694A86E4EDD6
SHA-512:	434AC71FF99A1EE08388B3C43CFCCB3EDEAA6F0E50A56F6CEAB4F18D2B7F66FDE05C6D3C6DF32EE3A00EF6CFAFFEC3231E0D78B3B689ACAB12D8B964C2376020
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bdb763721d174c92a375984bf417ba54.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:73213UysX0b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.408391487443168
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpUjhQxqBRSpWSHvFz:SbFuFyLVIg1BG+f+Mqj03pVHv8jbVC
MD5:	8FB3472AAB6DC84298EE2ABF156BCC86
SHA1:	9B72E1DAE56A3879A22EEF4F446B4E6F20925AC4
SHA-256:	CD7E06DDE54FD7BDD926B61C616083B1917B885B17A9AFE20DF735283AD0261E
SHA-512:	60428AB6F8B6EB71126A1448629C9834B70D04C767EAA3519BAA78923E93FBA8FDA8F80A886A0C2BD69174A7A582DEF8FB407CF42D0DFBD7970702178B446E6F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c10075e6c55b47bc84d430a267c75f7b.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:73214Povmsd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.43646713581812
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DgSGy+e+GUVvC0j+:SbFuFyLVIg1BG+f+M8DXGc+pC0jLkGq
MD5:	1C1243C41476BD68DF15D8BFF53E70AB
SHA1:	B0A0E499CABB5FA4CC8B57BF82F4C8ED6BA7341F
SHA-256:	AE2CC56D94D66303CBE4763FB59C4500AB7A3503A3927BAB4A25095B03F8E958
SHA-512:	922185B2022153321A9493029A6859EB76144FC6EC755380A484041B44B31D9D6BE7E0E162C276864350D5162045B43B7B8535549DBC47788B7B772EB36919FB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6fd527567dc1494884f90194f1054c27.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:73216ih2Rxb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.463497840252718
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MstZGGAZg2jNdQIeXD:qgFq6g1af+MstZfJM2D
MD5:	5C29D8C36E979D43DD6CC058C9AA5F4A
SHA1:	98AB74DEAC6093186DBBA2A3089EEED1658FC2E2
SHA-256:	0C8207373EE39EEBCBDDA6CCF405E2E5CC229C73EBBE2EE257C036411F0E7A3F
SHA-512:	9DA6612FD9D018251175FFF2F05EB11D97A7AA4F5B0B70203CEB84762C1869A8FD2CCDF23A5384365689E8224B2B3DC27AC4EC9C62C4AA1CEB027323D661AA99
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f0f8d5332d664a8a8d412f5db68c2903.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73287XvyEUd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.32690159637032
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+cOX+yl0wsjs1Han:SbFuFyLVIg1BG+f+M+cOv0Zjoa
MD5:	6F8AF0C54407AC310D51C482750E3838
SHA1:	37A934DF7B9BD2BEA83D9D8926216D582056ED6E
SHA-256:	1A8E455109FDAA4728F064951A8FB9DA7BABF16EBFECEEDD8DFB8B90698A1296
SHA-512:	C862D741789186F8D0FE3780A33B7563EFFFEAFE3C246ABDED24A345B7FCB7368B7BBEC60F8853F89DDE341016202FF7D19AA0B863859D5994FA7E2D8D728E4C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4a63c0642b52462ea6b90e24b62ef263.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:73353Dhl5mc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3513188838196495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvMcyV8d6YEs22jshQ:SbFuFyLVIg1BG+f+MsJYE8jtWL0
MD5:	A9D1D39D01871522DD0F28C7D770EBCE
SHA1:	6261F35593C1E4544F8AF53507E599F92F23C1F1
SHA-256:	27AE92D21588E888E41CA16FF28547B274F29C489D460D9C79E3BE442E0533B6
SHA-512:	9B598AB7A3164191AFFBD69DFBB165216E00BE8E5FEFD5E957BAF6E0DC74E8594F7752D52FCFF175A1C769C11055DABAF8575141610E6F25BB2182BBB375A9F9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ebfe897d000a423383398e516bc7bd38.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:741232nxEMa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4819794429418405
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MozSO16TjZcHcljX+:qgFq6g10+f+MoDmmAu
MD5:	EB5BBEE97950314ADFDF7208A61AB6AF
SHA1:	AD3FE41C10B3A306612F49A42ABCEB435FA66FD2
SHA-256:	6808B71844291A1AD8B1798EDB1F0BE9F756C5ADB996D6B87562074748CA7CEC
SHA-512:	DEC45EBF9A81680E3B09AC52D1A2FE4322763491D4466F19158B709757717BBAE01E0A5D2DC38E38E118FD1CB7F52C904F61BEE12CD76A38D512A9978AD5365A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1834036d9c2d440f931899cbd5a92c6e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74124jmtOo8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.373014942940311
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm57xpBqqxsjs1Hadme:SbFuFyLVIg1BG+f+MuqqjosQu
MD5:	8B3789F6C6DE3DF10BB07F7C4032618E
SHA1:	FFDCC613B4BFA044AEB3D7FFC0D776B75ED284D2
SHA-256:	0C3C24869E0086390BFDE18A92CE9D0ED870996328524EDEB080F13FF449524B
SHA-512:	6375B5E4F06EE49E17F0141D5A44E1DC082B47A10D9550C21786826B896ACE12C8970103A0FB89D101A35E1349DDE9CCC9DA606DEDF9452A7F72CE90427D01D0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3ce32436fc924eafb383d0008fdafdba.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74128Ensn06

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.316711237933071
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyxQqcEnDkosjshQJT:SbFuFyLVIg1BG+f+Myx7DcjtWL0
MD5:	F0CBDE9CED5274E389FEEBCA52E31834
SHA1:	58975950841187293C13DBD9E014D15523BE8C7C
SHA-256:	ADDAF6CBAB27D344B19A975288CCC96A249B835988CD45A8D1A460013375898F
SHA-512:	BA5DADA513D13CFA5E36AD104D65D9C2408E73B984912661BFC019CA5901737CE4D3DF54A0557D577F08AC773CE4364BB3B787578F0B9FE25B456F918E31F556
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=86e1bf50560b49a684ddefd3df3150fa.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74129GYdjN6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.438683846149296
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/BDfSdcA4k2lsjs16:SbFuFyLVIg1BG+f+Mdfs22josQu
MD5:	81B0306AF430C212D67C9CF72F76C0D7
SHA1:	72F700E725B7AA4C118AB84AAEBF40CBD420F942
SHA-256:	4AA61C997C2DC43CCF0EE835EBE33A765CF7721E34971971DAE7C0F0798C2B0F
SHA-512:	9616560742965B49F7879EA34EA5C9DECD80D9F7A012E19896052CAF85B518B3453E0652DC6E66ACDD42DCC39B63408EE2661BCE0DF351793C7E9F9FAE3D8377
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=589995ff6f59478d82eed9f5d6ec8162.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74135AFaJQ6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.443173834252596
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/Wt/EAVUwsjs2ALAXaN:SbFuFyLVIg1BAf+MOtLVUjNALyAZD
MD5:	38344A7F75D5D85E885F561FE0E86E5D
SHA1:	A64E12121C3391509359CD7AE397E97881074742
SHA-256:	2FAD052ACA930301E02CCB3F09501E7566E1667A6808C2DC2BD9B249E6475B0B
SHA-512:	0D3FDDD770A070FBA1DD1A19C0FCE2F7DB6343F4B3B752407603310F3D959C9B52F35285F3585F6DE42106EC9692128696F2FB0513BC54BB4F64A93C505AA9E2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=534c875250174fa9a1a0c0dbf0ba8612.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74141WL2m68

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.374140660710357
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6eBSdATQRGWd2z0hF:SbFuFyLVIg1BG+f+M6eSdXBd5TjtWL0
MD5:	C928CBE723BB1DCD1364598E042E2EDB
SHA1:	5CA2EBA4AD19EE7D98D873687A268C7B786E924B
SHA-256:	3436DE5132AD3622E0BD0CB6738FD6078408BDC2DC81E67CC96D17A58D48D01D
SHA-512:	B363AD5DCB0B109E1C3FD4FAAECC52C1E192518C3DCB8A206E37078440D0EF5305E7344C4BB34ADB966DFC5372A9F53F4475BD499EE4A8037BF2B2707FF9907E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=08d05dbe28ec4672874c38f55a0cd971.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74142twVNv6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.429563282326491
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpIDUFT1R/WjyWMqja:SbFuFyLVIg1BG+f+MwmqymjNE
MD5:	8B8E196871ED9790996DB49EFC0FB74D
SHA1:	C9DC01262C0F2493F2BAFF33039A2CC4BDA92977
SHA-256:	2E03854EB250B67AAA15093440D0BBF87E352CE66ABCA1010264C1600D3ADEC0
SHA-512:	F3037F8F0A8582B11B31F1C0B13C43784C7415B8DDC81B3E9FF68275EADF350E8104DE36C3155F20DB26244549089DE44ED092F0261B00DD5BB747FCD1AD2F10
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c3666f1556df41208167131de4e219d4.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:74143aJwsh8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.422882369752373
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5SD2+EAS/HUvUcdVP:SbFuFyLVIg1BG+f+Mkq73PUvIjbVC
MD5:	73C89FA95A7D9BC0F1477568E2AE508B
SHA1:	EF91A932E184E955FE4BC7EC8F310442CD33C959
SHA-256:	0D8BB9DC267895DA79656D09674D7F099244EB95AEB42D97679E4349D8F477A3
SHA-512:	5098D01A7AB81AD1CB145AE536EB794CC3D0D6A0B21A1C559DE837E9CC3B37995EAA204E09D7105D64771DD267082E5976839AE6C8A4FE1A7E71ED46690ACE9B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=39fd6845c5a54f6cae7d387b1aa81986.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:74150bOWwm9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.425507260010995
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvwVE4XBUywcVvs2lsjs:SbFuFyLVIg1BAf+MoNXBUyAjNdQIeXD
MD5:	6F501374E0658C4462AAE799BBD1B96A
SHA1:	F4132270463570023470B9C38DC44DDE7DC1776B
SHA-256:	761758A835700FE4571FA62E3D39BDB9ADC986D5530821C6D7827DA73FE2E2FC
SHA-512:	45F8487FD07C8F9071C55F2C1066BD74C56070F14266F16DCD9997D0FA689D8492617D0A72A9BFE6F606A266A8F34FD9E2F5B55F9F9857568A933BEB64AD38C4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e05e650a3c934a2dab712bdbda7abe90.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74151vMJzU7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.374931196179714
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyweVedVTbdRdTGqj+:SbFuFyLVIg1BG+f+MyL4VTbdRVjLkGq
MD5:	48957CB32F08FAC30523EF7EAA4E7206
SHA1:	CBD0F364840E892CC72BF6412DD4188D21A6B8F2
SHA-256:	14540128AD9B4F5E05F2C8C16397D28D0789B2BBDAC9EB5A3BCDA3FF16C9E573
SHA-512:	19CC93252F8EF0F7DEF1BD52F361BBBE9A198EA844B069A3767C792BB7648F70AE2B9142E117594046AB630B602FB3AD35A27747CECBBE7E6808C11090115F0D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=81d837a602a741ba84e06c1f84848678.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:74152oRKc36

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.35781224737427
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9nAVbRuHeTlsjs1Ha:SbFuFyLVIg1BG+f+MqpT2joa
MD5:	AD4ADB68CCAF4903CED06D3C4218DB85
SHA1:	E09EF5518F4E8E9E1135C7B4CC7FD7A3F364D900
SHA-256:	A62CAD3D9D70C6D9A44BBEFEC81F86DA7B96698EDD1C225DD294B20114DAE442
SHA-512:	97E0A1FCA8C8BE7154EE2895E1F9A156A4013A265B9B0643A02F9A3D97CE9EDA4A6E87A155E836F69B04E6D830519C671C7CCB1CA7878F6505AABCABC21258C1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=74de92834877404bb330abc9996b9cdc.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:74955UFIho7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.373694633906601
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7bngRdKoK5Xd0hTjt:SbFuFyLVIg1BG+f+MkpKpd0ZjtWL0
MD5:	65D598CF953C40571AE73A6FF5EDD546
SHA1:	90FFF0D4E0243A6C8E6483075FC192103010BB9B
SHA-256:	BC97263DDE49DF102C320E45A1B35572368961333B0E7F1D654A85C7DF2278D4
SHA-512:	E7CB578D9B03000D5A29AECAD535E11E72935486334D84E0A6E844F7D8A7309644F28886577D0EF469D7B5B0340CE22F829A68B01173EB7B1DFC0FC27CD42E6B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1629a3ebd276486cad3d8a54513f1198.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:76081iqBzMs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402887181732787
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyGk5mOWG6RqjosQu:qgFq6g10+f+MJOWEQu
MD5:	8292C5318D8A520FE74DDFA6E5837F85
SHA1:	0B839130BEAE28254E03416B90768508D7BBCF6C
SHA-256:	E5932C183CB95FE1A572BD36EDDBE6EE813479111993F2FFA99098275873220B
SHA-512:	5660DA87212CD8535D8B4361BB026A08A58F35527FE6B51FE54FC4D6AE8F18F58E4B509BAA8280FDE852C2FBC9B0F769FF62D1FCF0BF4639F55065DD7DB09F4D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=815fde2d90504e3b90e705da8323431c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76082uZssmr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4631213310992175
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+K5ctAYZATjZcHcljX+:qgFq6g10+f+MYAYSRmAu
MD5:	CD4BEBA601E97DE653D0876158CA0DF6
SHA1:	7B90CAB0BC2C26DEA225FD48FFE50BDCAB5F659F
SHA-256:	9E468A00DFB696499E7138FA37F9F991DA3DDC46EF9E37DC9295B7693D4BEBBD
SHA-512:	DD0568F363834E42E1D9325F542D99F96EE0EBB9DFC6F79E19B2F98B5D18C2A6E6BD8C5F1671F11EB6051C53629EA0A73C1129C306DBBBC6A82C6BA789259360
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=459fc64c90a648dab99562e909e12dcd.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:76083Co6BUq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.438575465570774
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M0lkAxQDjZcHcljX+:qgFq6g10+f+MtLmAu
MD5:	53AF60E75DC14BB1F6EA32425465F229
SHA1:	9625ACECEACE2ADD323378705F79CBD7AC03030F
SHA-256:	2A75EB952F4ECD6E00A10F4C45A9A03DD6DEF5E7D6616FE3E734422E083847B5
SHA-512:	0DFA4C262CF2C42651ED39BC2CCF9B5904210541556BE5922A6F584978378B5906947DA0CC3EE57F50C06962AA71EBF50230B3CC64E04CC3B32D51B057F35B42
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1d473da1cc30404895495c9e8eefc5c4.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:76084zsRMVq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3581643969994515
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmowKIT3ADOTD1uqjsO:SbFuFyLVIg1BG+f+MowdT4OAqjtWL0
MD5:	634C8D892A7399B6523EA730099A49CD
SHA1:	32ECEFCDC8236856FD1C2D8374ACD1FC36662E86
SHA-256:	DD27F30AEFCE721B36B9937A398FD1E6933AECAD10DE25949B78BBFF9B4EF1AD
SHA-512:	C0B3681E7723B35BCBB86277A30516240CE7D8055B1522FB92B4D81D328440F8E651C70208210AC4D7890558A7145651B1B27D95DD651EC53899499FD4D8DD7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b43e4b9672ba46449289ec1126389647.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:76085ocAnCs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.469063601658155
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzUTHN2W0VuWlvs2l5:SbFuFyLVIg1BG+f+MeIW0VB0jNE
MD5:	14EC693344FB3713AD055C46BD9B12DD
SHA1:	0035FD9EDD205CC4EBB4FF77CA7646C05B3EBCF0
SHA-256:	13E736D4D4ACB80968DF2C43BFADA8C57DA0A10259345E4B41B8ACB4AB0DE0E3
SHA-512:	1C072D3707EDCF092C9C165587D8A2FA555C896DF3A94682B1725896CC7BB1A81474238939ED09428B12935EAF31BA7786CFC0996CD48BA9CDC451AAB8D48287
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9d8326571d4744b2b7208392f0782c73.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:76086X8Rm9q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.468759027256458
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7IEfQTcWSAX52rxsd:SbFuFyLVIg1BG+f+McSI9XorqjosQu
MD5:	EE6FC926689C7ED66CDD3EC9A257D818
SHA1:	93E39AE24697F1B1B743430483EACBB0D9ABB3ED
SHA-256:	924FA37EC3EB00CCDC298142AC14732772D35030AB8FC706F7733CD7D6F7124F
SHA-512:	DEB7FF103B03271E4F60A74D00E26C886AF178B51C32C68A35A4B880F8F09DF28592E38E8ECF7E3D1A7364F4208C69D44E3B74BB98FF560E4F779BD5ED4BF178
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=174b9269fa594531916d87e12af8736c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76093fP3u2s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.436259936188992
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrOUHD/BRTiMqjs2ALAQ:SbFuFyLVIg1BAf+M/jajNALyAZD
MD5:	6AD6C9BF1DFBE38D981B9BFF038C2ABD
SHA1:	00593F754315E7732A318B7EB02C26372E22FA84
SHA-256:	C0BA6B7A9DB877B2CADD10868D59B2F663B32D4C3899F0C28DDEE8F0CC9780DF
SHA-512:	FFFE87469819472A339A5DF584F4EBAC02AF6CC0A363C26B820ADCF7FA9D6F91F6E926EB655EF4E620AE22DDFB5753FC29E1B5A99542CB24D52B4D63B05E5A97
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa09c21b8bdb4ed3baf5af886924cc64.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76094bhDTRs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.380232400219542
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDXESRc6cNhph0wsh:SbFuFyLVIg1BG+f+MoDXEicPNx0ZjtWQ
MD5:	4A6AEDB1B706C4250808DAA1975B0500
SHA1:	A000EC961950D94BFA7F32CAB0C8DF9278EAD1F9
SHA-256:	BE3085831D811ED89C2B7E4DD27FF04964232500315538D6D850A7E50C03172E
SHA-512:	831D80085E70F5B8F8961F28B8FDC78C3D630635DC192EF96EE7D519BE1AFF6E8039C8A146DCA714BFE6529AA1BB3D3781EE01DA234E04196D414935E336F060
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bf4c75d87a5245b9a8be7866d95e45d2.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:76095SInLpq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.3850742060559496
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDGiWQDfOZW8XDIhi:SbFuFyLVIg1BG+f+MoDGcLhg2jNE
MD5:	45D7CD378C0AD57603EC933DB06DED52
SHA1:	B4162D4BC276C0EAA4AF3D74EB27426F4E4DCEE1
SHA-256:	103FB93C056AFCFCA175CDE13D87A3EE4906156B6521C4A80D9B7EFEC30E9943
SHA-512:	F0CC328B362DC3698FEB8B205AF6AF7CCFAD8FAD8E7B7D63DC9BF41DD671B53FEC05139FAD1B0E6952D76BB138D3138EE7B196BCF77A99B2FFEF45CE86AC8D7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bfceb3cbfee348cc912603e2aee32ff2.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:76096ekwW0t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.452373476660126
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MFtfB3hqjZcHcljX+:qgFq6g10+f+MFThkmAu
MD5:	4CF21C8CEA64F4A50007B87DF08E06D2
SHA1:	A7E2511F94190F925F53CA48D661B7B70427DD36
SHA-256:	18D99D310F46844C6419B293634014F930AA500FAD5625E90ECAA6FE3FE7F744
SHA-512:	163C70C11296B2D6BB18515E8AC25D7E9A10C9340D25EE45FFA8EF376B6556B2149973A243F12BCCA0332CEEB79ADC572C19F23C881261919639CE640BE8B1FD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=56b2e90170dc4d93904d223adbb0e375.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:760973rGZ8t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.425669365226132
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/iQ4j1RAdWEXhXHA1:SbFuFyLVIg1BG+f+MaQ4n3EXhXG2jbVC
MD5:	17DA800F8B0688DFF0540B55377CECDA
SHA1:	DC1D12D70B33BE9E6E1572100A4937F16603AB3B
SHA-256:	42A100F29A1C5A0FD081D0CFCB3C5FCDEFE8BB116C7828ADEB77E9DA1F3A6842
SHA-512:	EA67C37EFC9037DAD5A2F6E59D9B1BD2B9D1CE88D4480E1FBBDCDFD8D8002F82E0DE64C789EC141FB4CF77B7CD0E0CB3DB4045FFBB3AF59B3209E2AD15F83366
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=574e88a2b5a247fc9a4e4fb3c62772be.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:76172iYRGGu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4371352391230126
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4a7GXPx722jswkClK:SbFuFyLVIg1BG+f+M4/HjLkGq
MD5:	5276DE4A06D64088160BC32E55D8C5AD
SHA1:	3784DE87AC9DD3FD91861BD46B094D2916E87182
SHA-256:	B7606859C99B0FFD033C5299D7A2A958B466F77DCE723A309F8C4A588A5E6837
SHA-512:	2220AA33CE2F0AEA3EB8E7B4393F7A98EC42312E180FF6EB71E88EEBE615ED0144833F482A308DB33D5EA5AD7664945CCE5AC87803EC3E1FD021D56F444E0454
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=21f4a75886d441a38addd2986fbcb1c7.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:761733oqQ6r

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.48950109815804
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzYsTlY1s2lsjs2BbQIa:SbFuFyLVIg1BAf+McKYm22jNdQIeXD
MD5:	DABD96A8DAB4C776A7C8380C853A5DD2
SHA1:	3F631D5F0EE2C3FC25C4602F7657FE1E3F8321D9
SHA-256:	88AF14130A4CBE2F9CCD05D0B7D2CF9B8410AF7FDE5B7689EB68F7ED2F6D0AA7
SHA-512:	C94C4CA14BA38DCE2CDF5A3A637202AEA42622AD262B6CC1A1C0D211A1141CAD6A9B3AA99C6D69B9866E020607C9A15CABB031B2C783B99B9F5DAE9A2B0E9805
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9d82865fd56b465c892f72c20ae8febc.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:762625xtpFt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.362113353153671
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz2zwRS3AcFrTZjs16:SbFuFyLVIg1BG+f+Mz035Fpjoa
MD5:	B6C2F8029EF07BB8B33102B8260C4514
SHA1:	544D456842A4CDE404EC10BAD709D1CCE50FEA28
SHA-256:	0D4D7A486C94988A05C4BF36C198358FD23BFC94F8FA1A10C1D82EA6A3CAD4B7
SHA-512:	1CCEF74246FFB6522E5830CD04B248F0D468C7F06CB23783477DCD1FF5B821961AD919B4AA2C86A74C787AA2593C2928A6EDDC51647497A70DA29D5CDC044D72
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93479503127747e78bda919a86456979.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:785100ervhV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.358595828257154
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoAMV4NGDchITE/VnE:SbFuFyLVIg1BG+f+MoAMVvcht2jtWL0
MD5:	A536DD88A03390A07C6E4E189EC915EE
SHA1:	8EAADA6A0880927D11FC1EB690C0A54A4D271C14
SHA-256:	D53CE8545AB7F53034DBDF29D9CDAA9E98044965C6C0E7E1DA92FF4633BDCE14
SHA-512:	BE4B387153BBFC170DFB46FCD6014C0CB3B765FF125A32E55798D5F84B840C90F2D71E1654E01E327DCA79B737E073EEC11DA22ABC615B017EC3462062072211
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b3b29050811c4f9ea58ca4bc4b5dc0d6.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:78511UY2kwW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3957957275088235
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4EsycQdAjs1HadmQ9:SbFuFyLVIg1BG+f+M4EsycqAjosQu
MD5:	DA86464CB71851FA949E3765D0D2AE3C
SHA1:	4906FC0F84469B4C4875D00E5AA83252295205D2
SHA-256:	D3513AE81E8712C5F97DF0FC93AD4F2B7361C7C160EE9894B5959CDA2970A056
SHA-512:	BC88EAC239D575582B8591E99D203EE008E5BB8DA48B3A9BD78B5BD99C33E858FE269D39674A9AB11095C9B4861B576E6EE733ACDB9BAD46B7F239360B70D5E2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2215535bdefa4fa999954293eda10ef6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78512gNBc5T

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.461987067408206
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/AahqTXdSWMc7ZvsY:SbFuFyLVIg1BG+f+M4ahoXQk8jNE
MD5:	EC360010AC71B57793B123B8CAF6AE3F
SHA1:	8F3DF28D096E449693806AF4FC6971EFA86240AB
SHA-256:	5F1E07432A051BEEC5612A08B2BC1C95B73F7E7D7AC898D8D5C002F9741EE141
SHA-512:	704C4DF4C008F972829D122E3A2DC596708CB560930E2B473D3BF4BC232C3F0ED8BF7EF8CF97F458D12C098B427B73445644110D05C5F1E02693A88E5CC24EE0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5c2fcdc19de04b52b680873f565485c0.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:785130LP7QX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.463165963453578
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9g/Jj6pxFzhTjsicN:SbFuFyLVIg1BG+f+MqNu39jZcHcljX+
MD5:	B149CD32F1234F681DB35D54593BADD7
SHA1:	F369DE27C21252FE4475D4D70CCF309365FEB34A
SHA-256:	AAE52F1167382B4B98E766EEFCA13A8B2555FFABC086CA8D81418507E067E984
SHA-512:	BB44629223032368F8E77DE66E1DE5FADA43FD9B0DD31FC10B4F4F8E28BC611834E3FBA07BE3DB06CD313859770177139978C7F579128D28629917387B874C2B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=74c01ee9808e451eaa23b6840af69009.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78514a8tNDT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.408752628521936
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrhdEWvJTBt4B7QYuP:SbFuFyLVIg1BG+f+M3EwJr4BUYuqjbVC
MD5:	61AAB202C19021F30677B43068236364
SHA1:	12BA6BFC40FA2B4136ECE9947BCD0B754A709F80
SHA-256:	55F0A541464E221DE449785DFC6390BC2B9B9D841EC73ECA1B425782D51BD5FA
SHA-512:	0791494D0B8DE94D42DF65D79107079264287B7A07F24197F5054E830D7F637A4C4365D97F7FE929605893043D1B036A28040784B86A0CD39CF2E1C4B7606FCB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a1d893c08a3440fcb96d728180a4da75.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:785150tdWrX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.389109360430301
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsRDG/Uiz9xhwsjs16:SbFuFyLVIg1BG+f+MslGciz9pjosQu
MD5:	B8A571A0207D1C1612837D94ACFA9FB3
SHA1:	7F23524FAF4F8810BF5D6B2F0F3A3BF91AAE9432
SHA-256:	8030997AD976006C5A181BF3079AD905AFC5AE994F30A647A6C8A5E95513929A
SHA-512:	6EEF837D3D079DD12562D7C8C83F35A7A3DFFFDA3A7269E19DEB255E1D24CF5070817F6061A85037957C6FA576A7F3B1CE9530BCB0F74B81CB4787B115E67873
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f33fc0f41341405390f07e0b63511dbc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78516aZbHsV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.44527928875481
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MaSaF+K2jZcHcljX+:qgFq6g10+f+MW3YmAu
MD5:	8E848851ED19548F02AF50D41A4E848B
SHA1:	B2D5E5E4F7EA128DAC82BFA9F3E696580CEB9119
SHA-256:	1AE690366ABFAB75F6C8281EA54D18F91FE3510D24883AF4CEBE734F48B48422
SHA-512:	507FF467B2DE8F2D696CABF1DC99186D5685171CF97A0ADBDB1CC6AF362CAE5DA99D965939BCABF28831C084CF73CF2301171DA603C9FE96D35D8B3B212DBD6A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=34eea85b5fb44b37bf5b05744e2be4b1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78517TXkd5V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.37129503301351
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6kfs100AR4grxsjs4:SbFuFyLVIg1BG+f+M6kfsu009qjoa
MD5:	288A419BDA881D090753760677E9F378
SHA1:	F90BE332A70C2E27CC957A410ED51203880F3153
SHA-256:	B7C2340473866C0F847E89A7500E55F13A227C307DAC97DE62B238B6A72C1954
SHA-512:	89B3A9702F34F33BC26639846B8472BC4C97DFB7B9E8C46E876694DFB44E7B4DEE7595E1FDC4955688375AEA91B460A2BA156B9118680EAE0A6EB8BD402A50D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0724d06174c54928a12e0d7fde454e33.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:78518quZSqV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.383987551107288
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8SnETQ1UAfng2jshQ:SbFuFyLVIg1BG+f+M8SJTjtWL0
MD5:	3D3B3A61A0A834CA9F254FA92EFDDDC2
SHA1:	164982DF6B28E8225297B61759C854208BF0A9B2
SHA-256:	4E6DC9F7B51171C03B6E5E4F6B75FB11C1E6BCA664A7025FD770DC85361BF10E
SHA-512:	BDDE8B91BBED81F591E55B2ABBCDDAFBDC9B670FB3AFCC7C173548C513EBC935950B668AEF71F7ACF9CC246ECC53FA7FB300EAD929A58F9444EA935DC0BE66BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=627d4d8c1a684964a2987c1c2f7a395f.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:785197j2uNW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.410663222672095
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm45bqS2cABUmHg2jsc:SbFuFyLVIg1BG+f+M4YAxF2josQu
MD5:	C19D5576E0E4F0B4581E7F3ECBB05E37
SHA1:	3DC0495FD26F871FA21AB932B475B3EDD91171DE
SHA-256:	80B5AEFF3B3BE85D3CA7C5C251D9F395B313BB33A745CCF334BE6709ACF50785
SHA-512:	C027A248CEA7D70D0C502DB34DE612ECBD0DDDC9C9B9D90C735FBC4B73FD379E8A306D15300957C19786221F1E05E64717C729891BB0F2E5D79770E72BBE7576
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=21c7faa0324640e7864c9ed7284a0d09.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78525mYaFTX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.439854638580246
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoscGWEcRQ0RczUjRqj+:SbFuFyLVIg1BAf+MosXXwTqjNALyAZD
MD5:	97E72582B79F0FD277FC99487B845F2C
SHA1:	EB358BB6F91ACA5C3D8F901794CC48F2CA3B2456
SHA-256:	54F938D0C41F1A571DE344CD593590C8B9EEB12B6D84E94854D0C85BB1169AED
SHA-512:	44F0C38BA4B6B221091966039BB17045B254C7FA7218F185DD0ADAD12DC5735D5B8D854DD14F987AD6D2EEC641B8307B35EA811B3F9E53BAA5E28F850AAAEB7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b0c991b1d3a941c7987e428f9b6166c9.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78526NRYfyV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.45008274300024
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8D5XDREwcXPWIOGdx:SbFuFyLVIg1BG+f+M8pNEhWs0jNE
MD5:	D3CE3BEE86A4B3AC7DBD221C860C8BE4
SHA1:	107D596E7B840F9438A44917099826CA175A67C2
SHA-256:	35D1447826F97141D0A5A71735B4CF8164F40AAAD6CF78C4EBFCA883BD1C83AD
SHA-512:	15A3D857785E9A10D451503A76E07F5D1BED87E85DA69293DDC9B274EE79D3C85DF4416A5D203D9F1AE356211C033E883F76648835F8633572C025746EA1C554
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=648ba535171c4a4391036f5f585b31c8.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:78527WntXFT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.369728238278032
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9hUPcEITjshKJveqC:SbFuFyLVIg1BG+f+MjDTjbVC
MD5:	B944286C170394F4BBD184C2EECA733D
SHA1:	E46C1689F5F3F4CC3F8754C35D01DDC933D7B863
SHA-256:	FA1A0B60095901924D8D17A5A690C2B05E0BBEA1F7AE8CF683775657897EC134
SHA-512:	382BE88B08737BB3DE816C5B65D9BE04AC294465779204E5ABD3E191DC82AD39231F9F57C45F39E25F012A82FB8078E2CF20DE5245D40E430A734D6E6CE38A5F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=71705317e3a34d2e9dd479a2ae2e5fd8.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:78528E46GbV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.475223966151625
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzZQDRQ2lAHiAlAg2jsd:SbFuFyLVIg1BAf+MVX2/AlF2jNdQIeXD
MD5:	0BC454C30B8D5770BDA55ED299C682C7
SHA1:	50E885E41764E8C4396E220D511EB25437447964
SHA-256:	6C0E91D1143243184F686A25657B21A311DC9155B73A5672D7A9E0912533EBEA
SHA-512:	BA52A294FF709F7C7EF39BF5337DA809E49F5D821D7E7EFB12FA9CA7DD8C5190B0B45EC39760DF90CA7774846B80F53D106CDC3555FC73BE4B83F693CEA449A1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9abd73be775f45c8bbb90a5ceb920e46.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:785297qbnZT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.415749585581989
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpOHXR8N7QcR8ERv8S:SbFuFyLVIg1BG+f+M2qNUcaERv8jLkGq
MD5:	CBED625A47AB7D64EB92D1B92F4C19F8
SHA1:	61A0D482BDC92A1BADA592F7FAB09D62F91C16D5
SHA-256:	7AA61B18F3DA19C3B2E990DBF4278AABA309E883654B82CADAF37F721FA236E5
SHA-512:	E44726BDF4F61EEEF03BEE044931882A7AC07259CB845BB65FD23DE1229A014450FCAFF67EFAF27DFB568E542ACB003921F2831E8BB63A49B03B7E174DA99BC1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cd7bbc0140374c6fa75945b1df01a646.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:78639KKg8UW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.416084282775587
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7rNKmuJSLTVvA+sjx:SbFuFyLVIg1BG+f+MAcLTFATjosQu
MD5:	0E271EB443C17DF32188A8B5ABB3C2E2
SHA1:	DAD156F273DF4D381BEBCC5809DCAD8C480B377A
SHA-256:	04555BCDB75E457A2EEF096F0C2C902B03D159D4B285ACFB6B0C6AF11EED7173
SHA-512:	F6325F2D9898DBA13901CFF4E3DB873E972663CC413525EF2126C57021F8FB04C3FC55917B73A1B4FADB8D9975813113338B684039C4FB0AE6943F93ECD948F7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1e042c0822ca4b0393ef9737ef076b60.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:787300bsntU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3785475372771545
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoB7cXEKKH6USXpjsc:SbFuFyLVIg1BG+f+MoBYXEHxojosQu
MD5:	E60729BAF14A320F5471227813E64B73
SHA1:	8708D8DC8CB1214F3D8F7E8FAC83FF871FA1FB57
SHA-256:	B84B1909859892E4C132CB7385F15B432F0D284BDC9263302300871726D94B8C
SHA-512:	12381CBDF727D87B31F84A9F95230C51D874D6F53C229087AC95013F3400608A40B17DD72A65DD745AED5202C1172D73A965E3DFF869FC4316CFF0184BC9C9FB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bd1d392da2a8423b91ba636361e3c37e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78899w5z2wT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.506084597432658
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrBfdf3ETOVU02lsje:SbFuFyLVIg1BG+f+Md1c+K2jZcHcljX+
MD5:	04AD9AC6CB028EFF9A620DC6C8F7B9E5
SHA1:	F8ADD7532EFAE5B9C0F0461DA9097DF113C6C9F6
SHA-256:	5CCDEB39D8295C47BBC372E19D208ABFA6BAFC39A42DDE642BB37C37558BA4D1
SHA-512:	155F65CA6286AA19F3830F7C44387AE79891E80F7A0147745E1F71CFD079FA056256260B14B27A3AC1B666E91609C2D2A8E5AAAB08FEC1B77500D1D0F5B7A522
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a5607b2ff82143969fe9754a9d031201.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79155qazRtV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.372006957348125
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzYHoQUDQEsMqjshKe:SbFuFyLVIg1BG+f+M8HoeE8jbVC
MD5:	10A66991204D4D9B015C3BECC24DC6B4
SHA1:	B357762EADBB311C1AB422A966AE30DD36C0B244
SHA-256:	E52DB1FD5C329BE2FE46A34C2D035775ADC9966D97CE8BDDC27A20BDECB4C830
SHA-512:	B37EED11D87EB64FB4C785302D64EB010816BD4FE2AD00E889DA40497EC440E868D3A36F6704D2AEDFBC1C6DE3963B718250296A97ED631E4B98E114B9D78AFA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9d4ed8d327ed4acdb3bd41a89fdb39b8.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:79197NDLugX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.367831672773633
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm7uR+Q+wJccFXFXb:SbFuFyLVK6g7/+BG+f+MiR+nGcAmjNq
MD5:	39F1DF3D1F1CF1009BA358660033902C
SHA1:	A00D89B9EEF02ACDF25D09AA3ED0585B43AC31BA
SHA-256:	998D1396FBF79F1C1283D40A52C0AE07FDDCCBD5B93F49844DE47D208D83E94E
SHA-512:	C117481E3941FE43D34DA3F865DD9EB656C9E376642A080C940DCE35EE84442ADD907D407368733471422F3EF7B2392D81F57248C6078F0F4EB9ED80FEE194D7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=10a555be390c4f4a9250f5e015991920.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:79199YDHs6V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.442341031814561
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmuzX7vZAQHbGjTjk:SbFuFyLVI6g7/+BG+f+MuzX7vZLajNq
MD5:	554EB5CE58149D7B34C937E63FAB283C
SHA1:	570517206296386050654643B6A329B4134C6C5F
SHA-256:	0F1DBF0FA8053789088E5B05AA96959BC1A9FC1BE65DB943CE18F8ECCFAADA4A
SHA-512:	133BCD3C2067257AB57FCC09365B1DC859CA5706364DDB75BB4A5A5B59B7BE3A74D788353D6957D4DF499D7D58756F98A9C6131DE0C65D122646F1284AA0D653
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d99d2b04d136492d87bbb2587c9bfbc7.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:79230ANDptT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.501288415837653
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M1fwQsqjFQMzKaBu:qgFqo6g7/+0+f+M1fwL4Tmh
MD5:	F4F64328C38C44324B5B305EC765D053
SHA1:	9F345A9FA41B82D6764E36E744B3275740FC3F4C
SHA-256:	28A74B521A205706CFABED04F700831F00099A964DC8D0239505552EBE9B3817
SHA-512:	19C68C22263CA33333D24091A7AAA79723AA2DC01BFFF4DD5B87D13396D1DC7080DAFFF1ED4417C5807FAA949230ED3AE6B6EAD6C14260D2F2CAA4D71AD47583
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=affa5c63e7e44ffe9e838957f4887f55.IDENTIFIER=/usr/lib/gdm3/gdm-wayland-session.

/run/systemd/journal/streams/.#9:79231OTFJYW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.5295073019274295
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MyE5pU50ZjFQMzKaBu:qgFqdg7/+0+f+Mv1Tmh
MD5:	E3CE1CEEB3B65790F2D91611F4C5D853
SHA1:	8A752720B139CB75A4640C76A3DA40BBF55ED07D
SHA-256:	657A8272CDFA0087AA02062FA408105169D8DB00C0338A2139055E454E2AA1FC
SHA-512:	59166CD8881AF7BB3AC3D813BE851B954F1E929AA58C05C3C37F0AF9231894992257770911BBBD9E8EBEC7BC130823A5B4A21495F78CAC20FDEA5A526CDD0926
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=888f2ffb8d44473bb9f184c5940731a5.IDENTIFIER=/usr/lib/gdm3/gdm-wayland-session.

/run/systemd/journal/streams/.#9:799035KFGrU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.426157263641511
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzfzDA3sLERnqjswkT:SbFuFyLVIg1BG+f+MbzDS0jLkGq
MD5:	4466226B014FAF2CA79329A0AACC201C
SHA1:	E516076915361BB0F558EC9E36F26DAF2E579ABF
SHA-256:	6D522038F83063C8E56FAEA5614EF048652045DA5E0C2B62D0D5E7B08F5EB11A
SHA-512:	401F37B588BF41DF1FEA9CCDB425087416ACDB48DE3CC4FA468393FC5CC7AADB938AED13B58986ED49D5E39FDB1208D8C1A4F12CE1FA91605217DF8DA0E0FFBB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=972fab5cf269444492f3e8af8cd6d09d.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:79908UnbRxU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.445933602617389
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm55RMhRjtshg2js2BZZD:SbFuFyLVIg1BAf+MmhJtshg2jNTZD
MD5:	AD1F20CBD51877476B1EF4182FA2B83E
SHA1:	1627A7A70AD5DD47B894914EE9E7A27201F16FDD
SHA-256:	688B24C87409709C55F1DC93CD784FD7D63E05EFBEC4DE4302F53B03FAA4DDB8
SHA-512:	7CA8DCB1BAED61F186DC1C5151BA9E030BC198DB375B7EAE3F7797DA56384996F7511CFB558DEFC7194B262C1FA2EB64710367CDD0E8D07F47950514AA07D7C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3915960bd4b94b7e97f73d2154c368f8.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80004DCQB9W

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.442310361611288
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoOtsjN2jLTTIWTIL:qgFq6g10+f+MoHYEWEL
MD5:	9B5D01D6C4C2E3F64522F86429C50C39
SHA1:	DC8A85098576D6189505D9CED089A7BD7432227B
SHA-256:	F13A450D8AB787B599068AD4E359EF60B5E98842DC40431C147DF4E94862BFAE
SHA-512:	8B49F0CC71B282070229C850358F1E6D1EF97328AA5F40E86084FDD46F302703A6303EC5AD42B8EC92404C9B7F368FAFE7909A7C6AA3444AB747330A3C9884AA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7661b5b4364d4c6eab998b9bf8b930d0.IDENTIFIER=accounts-daemon.UNIT=accounts-daemon.service.

/run/systemd/seats/.#seat01ER2M2

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat01pxrOp

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat03CHRRk

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0584bmV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.957035419463244
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+ugKQ2KwshcXSv:SbFuFyLwH47Pg20ggWunQ2rNXc
MD5:	66D114877B3B4DB3BDD8A3AD4F5E7421
SHA1:	62E0CB0F51E0E3F97BE251CB917968DFF69ED344
SHA-256:	A922628916A7DDBE2BAA33F421C82250527EA3C28E429749353A1C75C0C18860
SHA-512:	5651247FA236DCF020A3C8456E4A9A74A85C5B9B3CCE94A3CF8F85FD4D66465C9F97DF7A1822E6CA4553C02BE149F3021D58DCC0C8CB6DCF37F915BD0A158187
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat065aoCN

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat09acyVq

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0JYMWWb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0XZZaW9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0iCMO6a

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ifxd4X

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0kAvZsD

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0qzHzL5

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0uXO2U3

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0x7JE8R

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0xdXtxV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0yiKYzV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0zl9Hyp

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/sessions/.#c1BX8xoX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.497319206046882
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcedVuRmUKBhcIS3xffKxHxfx2xNIByy6GBQUbfJgZUTVf2L:qgFqPumVuRZI4BCB9x2xayWzgQQL
MD5:	D257E452670A4EDC2ED84F96C3093B20
SHA1:	295B642BF11890DCB70CF8104D5368E267E0CE82
SHA-256:	C85E7CCA644AAF1F4AF87F5CEAEDBDAF2C5D19A05B30F5F0E67B68F6E92B4E18
SHA-512:	A3592A3FD2A5B8AA3A501635CA5D7BE735F5B9A4B22E728613E8D49E13522E977F76ABF4F2A40107127D26935A13AD398FC111AB94E8B0E20D975DB9FB71303A
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=0.IS_DISPLAY=1.STATE=opening.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.SCOPE_JOB=/org/freedesktop/systemd1/job/15855.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=7214.REALTIME=1735485944616685.MONOTONIC=313425480.

/run/systemd/sessions/.#c1NlzovU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.441520275266433
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcedL6vUKBhcIGjwn9xfx2xNIByy6GBQUbfJgZUTVf2L:qgFqPumW8IG0n99x2xayWzgQQL
MD5:	49DC8836E23868B2DD50D694614CAC1B
SHA1:	D28BE721E5B4A566D064EE54C3A9AA63420E5A72
SHA-256:	341A8AEC2CF183E6B544521991F757EA04E6C089921227D7468812865B739671
SHA-512:	FAF025D0E6CA65A5E4C9AD78176C16A27EF318F965006A01F82CDFBFA3F1A6C886E7B445CF6FED93B3B3C1761647C0B2F056349A476E9E3952084A5C34FF7DB8
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=0.IS_DISPLAY=1.STATE=online.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=7214.REALTIME=1735485944616685.MONOTONIC=313425480.

/run/systemd/sessions/.#c1rqFLCW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.441520275266433
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcedL6vUKBhcIGjwn9xfx2xNIByy6GBQUbfJgZUTVf2L:qgFqPumW8IG0n99x2xayWzgQQL
MD5:	49DC8836E23868B2DD50D694614CAC1B
SHA1:	D28BE721E5B4A566D064EE54C3A9AA63420E5A72
SHA-256:	341A8AEC2CF183E6B544521991F757EA04E6C089921227D7468812865B739671
SHA-512:	FAF025D0E6CA65A5E4C9AD78176C16A27EF318F965006A01F82CDFBFA3F1A6C886E7B445CF6FED93B3B3C1761647C0B2F056349A476E9E3952084A5C34FF7DB8
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=0.IS_DISPLAY=1.STATE=online.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=7214.REALTIME=1735485944616685.MONOTONIC=313425480.

/run/systemd/users/.#127ARN9qU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.304984830620894
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0IxffpWgZUTiUqrZcTu2f2thQc2pb02/g2p9rwB:qgFq30VuR8L/ibBogQizriT8thQHtPYb
MD5:	58002CA90E2DEB01F1E1C107B15EF68B
SHA1:	54E42B10FE307EE0B5FA74CBD0E0219C5EB95D1E
SHA-256:	627F829FB562E2F43EB14F3EFAC50A2D921925924E0B3D886618C89755494BDB
SHA-512:	FC3BFD9DEABB833DE8CAE378E7FF10C5C6836384DAA359DDB776A2766CCEE2251140847A062334905CE21B32D46948F2258F3976BB0CEAC2C41F5ADBE69FE070
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/15793.REALTIME=1735485944601861.MONOTONIC=313410656.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127OVYYgU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.165053933664257
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSfgZUTiUqrZcTu2f2thQc2pb02/g2p9rwB:qgFq30z1cL/ixegQizriT8thQHtPYq9M
MD5:	BF681ED367DBAD3F14B55055C4B2268A
SHA1:	7C5DF98E5C07A20BCE8BFCFE2054FABBC15721D9
SHA-256:	41A6375B6B862269AF2BCD97DC05190E5070FB697B4CC6BF5488A43CF8C4A17A
SHA-512:	769EE774BCE9D19797691D07484C4D4D22234B7C40CAEF6F9ED364F8A1F9CD5D4019BCB9E1CA8199ECF51FC95D8605FDD33D8F3DC2A90C66C88F58DFAEAC4532
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1735485944601861.MONOTONIC=313410656.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127OoqPxX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.165053933664257
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSfgZUTiUqrZcTu2f2thQc2pb02/g2p9rwB:qgFq30z1cL/ixegQizriT8thQHtPYq9M
MD5:	BF681ED367DBAD3F14B55055C4B2268A
SHA1:	7C5DF98E5C07A20BCE8BFCFE2054FABBC15721D9
SHA-256:	41A6375B6B862269AF2BCD97DC05190E5070FB697B4CC6BF5488A43CF8C4A17A
SHA-512:	769EE774BCE9D19797691D07484C4D4D22234B7C40CAEF6F9ED364F8A1F9CD5D4019BCB9E1CA8199ECF51FC95D8605FDD33D8F3DC2A90C66C88F58DFAEAC4532
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1735485944601861.MONOTONIC=313410656.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127aHJ8sY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	293
Entropy (8bit):	5.324725874320579
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0Ixffp9RfgZUTiUqrZcTu2f2thQc2pb02/g2p9M:qgFq30VuR8L/ibBn9gQizriT8thQHtP0
MD5:	5AF84954E034FCCCAA062CCAB2737E39
SHA1:	B3FF83389BCAC0A9EB8AB796BC5C9EC746311971
SHA-256:	8BA01BEE7144A7A11613CAA6087A0782918D655BBF7383874D76E9015B380837
SHA-512:	EEA89DFA6FD96DC6A5BDD9F3B02E4883FE0DAD4DEF23A87FF5E1C55EC532C783DF520040E5F10DDA0562C1E6C4B2F22041F1C50D8F44154222BED6F9AA521C93
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/15793.DISPLAY=c1.REALTIME=1735485944601861.MONOTONIC=313410656.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127mnsGaU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	4.928997328913428
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs5BuSgVuMI2sKiYiesnAv/XS12K2hwEY8mTQ2pJi22sQ2KkmD2pi:SbFuFyL3BVgVuR257iesnAi12thQc2p4
MD5:	065A3AD1A34A9903F536410ECA748105
SHA1:	21CD684DF60D569FA96EEEB66A0819EAC1B2B1A4
SHA-256:	E80554BF0FF4E32C61D4FA3054F8EFB27A26F1C37C91AE4EA94445C400693941
SHA-512:	DB3C42E893640BAEE9F0001BDE6E93ED40CC33198AC2B47328F577D3C71E2C2E986AAAFEF5BD8ADBC639B5C24ADF715D87034AE24B697331FF6FEC5962630064
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:n7v:7v
MD5:	3AC9E3DA038283776549198B57EFA2A0
SHA1:	ACD34DFCADBB345912CF931AC7128B7C55A48765
SHA-256:	5931A5498991D828F9E26015032AF3849B757E01C28D940B306673A6B8F56ABB
SHA-512:	8A14273AEEDD03521379C6594226FC316C93083C7DFE4B73CE26C0F4825069496DEB56637C206064048C2BBC2C265544A5D07D7F13E9CB3CA9BE1327B97F10F0
Malicious:	false
Preview:	7104.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:+lc1sXlXEWtl/zOil:+h+ylL
MD5:	03FB276005CEA2C44FCCAF3C38DA3526
SHA1:	61599D8A4561B13AF022ECE28C5C51C201254A45
SHA-256:	758AC8D46CA116C7825EE309D7EA7E70C6942FB0CD3AC9E1748B4A537A0F3D54
SHA-512:	8E43C8D1E59399358AA21A50F3480F79CE76957EB57E99E574E2BF8760606259682B9CC690AC39FC6937A7C48DDE37202A913005596D37195216E28FB76EBA6A
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................iqg7.......................................

/var/lib/AccountsService/users/gdm.0Y4PZ2

Download File

Process:	/usr/lib/accountsservice/accounts-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.66214589518167
Encrypted:	false
SSDEEP:	3:urzMQvNT+PzKLrAan4R8AKn:gzMQIzKLrAa4M
MD5:	542BA3FB41206AE43928AF1C5E61FEBC
SHA1:	F56F574DAF50D609526B36B5B54FDD59EA4D6A26
SHA-256:	730D9509D4EAA7266829A8F5A8CFEBA6BBDDD5873FC2BD580AD464F4A237E11A
SHA-512:	D774B8F191A5C65228D1B3CA1181701CFCD07A3D91C5571B0DDF32AD3E241C2D7BDFC0697AB97DC10441EF9CDC8AEE5B19BC34E13E5C8B0B91AD06EEF42F5AEA
Malicious:	false
Preview:	[User].XSession=.Icon=/var/lib/gdm3/.face.SystemAccount=true.

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	988
Entropy (8bit):	4.970665019302164
Encrypted:	false
SSDEEP:	12:GFfZPaV5pMKFfZPgKMKFtGKFZaF2nMqF+Avm3F+A2+VsFDF0hLad+Fc8n:qZeamZ4BYGghnoAvbA2+V4K
MD5:	32082D74A2AF3DF6F38A63B335DF5D0D
SHA1:	60B898EB028C04DCBA5B1370CED5EB45CE93FC2B
SHA-256:	B060F9CD4E5F42925BE935A9A42F34B43B4FD74647C601899FEB4DC0FE1CFEB5
SHA-512:	A8F83630A9C481C35EED75F5A7A230AF71F8DE8D4304DAA6D955684583D0A80F0CA10D27293610CD5D4555F85E91CFDD650E058D86C33BFFCB67B7D834F5DB43
Malicious:	false
Preview:	Dec 29 09:25:36 galassia systemd-logind[7138]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 29 09:25:36 galassia systemd-logind[7138]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 29 09:25:36 galassia systemd-logind[7138]: User enumeration failed: Invalid argument.Dec 29 09:25:36 galassia systemd-logind[7138]: User of session 2 not known..Dec 29 09:25:36 galassia systemd-logind[7138]: Session enumeration failed: No such file or directory.Dec 29 09:25:36 galassia systemd-logind[7138]: Watching system buttons on /dev/input/event0 (Power Button).Dec 29 09:25:36 galassia systemd-logind[7138]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 29 09:25:36 galassia systemd-logind[7138]: New seat seat0..Dec 29 09:25:44 galassia gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0).Dec 29 09:25:44 galassia systemd-logind[7138]: New session c1 of user gdm..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838256
Encrypted:	false
SSDEEP:	3:F31HlUR+B:F3eo
MD5:	F4B0FDAD50E75D2C8B82B0260D82FBE8
SHA1:	3FA585A1DDE71D1C999B21F10537E38D4BD98C2A
SHA-256:	3B8B2DC4435857C166350C7B7A4F5894C3A859BB91B479DDEE870E5B8A20BD97
SHA-512:	5CDA9DA3EC52B9005247D755E8827C693ACA5AC9D408DC16777146BE983DCB9FE65375F15296D13709DA9AA13FECBCF3336B1DB41C8EC84F1DF96D392F6E68CD
Malicious:	false
Preview:	LPKSHHRH.................:.>.DD&.f.\|..z..................................:.>.DD&.f.\|..z.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838254
Encrypted:	false
SSDEEP:	3:F31HloUUaUk1:F3YY
MD5:	416A89592079750C23B99B80A1F3028D
SHA1:	9D8CF41B7D43738C0209A476E4422ED7F1410FD0
SHA-256:	DD83F45096BF6CF06DFF9E40F8927A4D8CF9BB6BB3AE5BA5B11379B4A3D1374B
SHA-512:	45E749590D5860864715B495C19E98B91F82371D778BB97360FA82D3331B464D25517CC93E313D4C2B482EEF8DEA25A4FAA2B215E1D6394246D48AD6DD26DCCA
Malicious:	false
Preview:	LPKSHHRH..................IA)XIq...t.h...................................IA)XIq...t.h.........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	3118
Entropy (8bit):	4.743100529021799
Encrypted:	false
SSDEEP:	96:K444r44goCbMZ+CxPRlC9vijFLE65n0KM4:Kh+p
MD5:	85247EFA55E1D5AFA6A0AD013A1FACBC
SHA1:	3A099BF80D03DFFA55EFE3A9C99C6AF2B6610A56
SHA-256:	9C1EEDEAA69DCF38C1F7D8F15DA3775A9A1ACFBE0432464362133EE26245E61E
SHA-512:	CE75B3EF9AF4A78C9A641104AB4D5CA8280879671A3A24A0784329E8E9EF8DDD43152420D91E338635BC7B5D2169E9E657FE08613231E3F6799FFC6B0E1CC263
Malicious:	false
Preview:	Dec 29 09:25:35 galassia kernel: [ 303.974068] blocking signal 9: 5530 -> 3220.Dec 29 09:25:35 galassia kernel: [ 304.279716] blocking signal 9: 5530 -> 658.Dec 29 09:25:35 galassia kernel: [ 304.282129] blocking signal 9: 5530 -> 723.Dec 29 09:25:35 galassia kernel: [ 304.284256] blocking signal 9: 5530 -> 777.Dec 29 09:25:35 galassia kernel: [ 304.286910] blocking signal 9: 5530 -> 933.Dec 29 09:25:35 galassia kernel: [ 304.291864] blocking signal 9: 5530 -> 3220.Dec 29 09:25:35 galassia kernel: [ 304.631691] New task spawned: old: (tgid 7132, tid 7132), new (tgid: 7132, tid: 7133).Dec 29 09:25:35 galassia kernel: [ 304.632248] New task spawned: old: (tgid 7132, tid 7132), new (tgid: 7132, tid: 7134).Dec 29 09:25:41 galassia kernel: [ 304.635368] New task spawned: old: (tgid 7132, tid 7133), new (tgid: 7132, tid: 7135).Dec 29 09:25:41 galassia kernel: [ 310.109130] New task spawned: old: (tgid 7197, tid 7197), new (tgid: 7197, tid: 7198).Dec 29 09:25:41 galassia kernel: [

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	8541
Entropy (8bit):	5.052630235371756
Encrypted:	false
SSDEEP:	96:EiKAjRJaRi444r44kH867WJPjNZoCbTKAta+CxPRlC9YkgVZvijFLE651GCYYNf0:EhMeY9bCJPjNZKNiTNfNbNllxze
MD5:	02CA4A041C3C7DD8C290C7337A4ED5FB
SHA1:	C12C5E79F53995209B9F312B350404F8A43FE028
SHA-256:	1597393879C49EC073788E168A04567412AE5639E6457DF3034C81FD6FEC497A
SHA-512:	19734B0AE13FC5AB192D63DCF65D44A79E745ED73DA2B7283C912A1C5DED928B25EF1764A85C36346F4672D6EB14311BE93A407E9F768A5F2B2B44CCB772A0EA
Malicious:	false
Preview:	Dec 29 09:25:35 galassia systemd[1]: getty@tty2.service: Succeeded..Dec 29 09:25:35 galassia rtkit-daemon[7116]: Exiting cleanly..Dec 29 09:25:35 galassia systemd[1]: getty@tty2.service: Scheduled restart job, restart counter is at 19..Dec 29 09:25:35 galassia rtkit-daemon[7116]: Demoting known real-time threads..Dec 29 09:25:35 galassia systemd[1]: Stopped Getty on tty2..Dec 29 09:25:35 galassia rtkit-daemon[7116]: Successfully demoted thread 7104 of process 7104..Dec 29 09:25:35 galassia systemd[1]: Started Getty on tty2..Dec 29 09:25:35 galassia rtkit-daemon[7116]: Demoted 1 threads..Dec 29 09:25:35 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 29 09:25:35 galassia rtkit-daemon[7116]: Exiting watchdog thread..Dec 29 09:25:35 galassia systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 29 09:25:35 galassia rtkit-daemon[7116]: Exiting canary thread..Dec 29 09:25:35 galassia systemd[1]: dbus.service: Main process exited, code=killed

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:+lc1sXlXEWtl/zOil:+h+ylL
MD5:	03FB276005CEA2C44FCCAF3C38DA3526
SHA1:	61599D8A4561B13AF022ECE28C5C51C201254A45
SHA-256:	758AC8D46CA116C7825EE309D7EA7E70C6942FB0CD3AC9E1748B4A537A0F3D54
SHA-512:	8E43C8D1E59399358AA21A50F3480F79CE76957EB57E99E574E2BF8760606259682B9CC690AC39FC6937A7C48DDE37202A913005596D37195216E28FB76EBA6A
Malicious:	true
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................iqg7.......................................

Source: Aqua.x86_64.elf	Virustotal: Detection: 51%			Perma Link
Source: Aqua.x86_64.elf	ReversingLabs: Detection: 50%

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.216048272265166
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.x86_64.elf
File size:	71'824 bytes
MD5:	838baaa65a20330047a42081a59654fa
SHA1:	528cb4d37ca9ae231f32e6d1ab9d45b0f3b3e358
SHA256:	809cf04075f674041b0891cb94adb6169e2e9987077b64e9cde692b0e34fc892
SHA512:	4abe145e92052735d3461059922dfbb0f4df998bf654810301dcbebafeb086be1e2ad11581677b1a7b6249806fcd706df145088e4f2002b6263e011190dba27b
SSDEEP:	1536:GBEtqb9a7oY6uHhK0ygRZKbBqA36d/P57atD9kuQTGJ0OGjnV:htYQsYFwERYVqA36pPctD6TGOO+V
TLSH:	1F634A13B58190FCC29DC374476BB63AE93375BE1239F2AA37D8FA126D49E211E1E540
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@.....%.......%.................................Q.......Q............../..............Q.td....................................................H...._........H........

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	71184
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0xeb46	0x0	0x6	AX	16
.fini	PROGBITS	0x40ec46	0xec46	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x40ec60	0xec60	0x1dc5	0x0	0x2	A	32
.ctors	PROGBITS	0x511000	0x11000	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x511010	0x11010	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x511040	0x11040	0x590	0x0	0x3	WA	32
.bss	NOBITS	0x5115e0	0x115d0	0x29c8	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x115d0	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x10a25	0x10a25	6.3718	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x11000	0x511000	0x511000	0x5d0	0x2fa8	2.7250	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 16:23:11.994009018 CET	52218	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:12.134388924 CET	53	52218	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:12.135716915 CET	36973	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:12.276058912 CET	53	36973	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:13.771857977 CET	52203	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:14.013125896 CET	53	52203	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:14.014731884 CET	48042	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:14.149835110 CET	53	48042	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:15.624505997 CET	53057	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:15.759732008 CET	53	53057	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:15.762491941 CET	48108	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:15.897653103 CET	53	48108	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:17.427294970 CET	35640	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:17.562573910 CET	53	35640	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:17.573074102 CET	56865	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:17.957695961 CET	53	56865	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:19.493566036 CET	57476	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:19.636553049 CET	53	57476	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:19.638572931 CET	47315	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:19.781574965 CET	53	47315	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:21.231576920 CET	49579	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:21.374562979 CET	53	49579	8.8.8.8	192.168.2.15
Dec 29, 2024 16:23:21.380683899 CET	39204	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:23:21.516239882 CET	53	39204	8.8.8.8	192.168.2.15

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 29, 2024 16:23:21.305003881 CET	192.168.2.15	192.168.2.1	827b	(Port unreachable)	Destination Unreachable
Dec 29, 2024 16:24:41.316584110 CET	192.168.2.15	192.168.2.1	827b	(Port unreachable)	Destination Unreachable

Start time (UTC):	15:23:10
Start date (UTC):	29/12/2024
Path:	/tmp/Aqua.x86_64.elf
Arguments:	/tmp/Aqua.x86_64.elf
File size:	71824 bytes
MD5 hash:	838baaa65a20330047a42081a59654fa

Start time (UTC):	15:23:11
Start date (UTC):	29/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Start time (UTC):	15:23:12
Start date (UTC):	29/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	15:23:14
Start date (UTC):	29/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	15:23:15
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:16
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:17
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:23:18
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	15:23:20
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:26
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:27
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:29
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:30
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.x86_64.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/gdm3.pid

/run/systemd/journal/streams/.#9:65273WybNmI

/run/systemd/journal/streams/.#9:65594l1rqOG

/run/systemd/journal/streams/.#9:65596NetcFK

/run/systemd/journal/streams/.#9:65597pAXtdK

/run/systemd/journal/streams/.#9:65600HlVwNI

/run/systemd/journal/streams/.#9:65601CN1lDK

/run/systemd/journal/streams/.#9:65602QerSGK

/run/systemd/journal/streams/.#9:65618Ai5wCJ

/run/systemd/journal/streams/.#9:65619isaReI

/run/systemd/journal/streams/.#9:65637EJOhZH

/run/systemd/journal/streams/.#9:66303Qp7oh0

/run/systemd/journal/streams/.#9:66305wAcBqZ

/run/systemd/journal/streams/.#9:663060oX6fY

/run/systemd/journal/streams/.#9:66317RvqrG0

/run/systemd/journal/streams/.#9:66318FuR6QX

/run/systemd/journal/streams/.#9:6631972N90Y

/run/systemd/journal/streams/.#9:67210Mm2BZJ

/run/systemd/journal/streams/.#9:67211q5WBNI

/run/systemd/journal/streams/.#9:67212KWGYpG

/run/systemd/journal/streams/.#9:67213ccDIZH

/run/systemd/journal/streams/.#9:67220X1RA5I

/run/systemd/journal/streams/.#9:67307zzXWIH

/run/systemd/journal/streams/.#9:68440DRhOrJ

/run/systemd/journal/streams/.#9:68441J8RnhL

/run/systemd/journal/streams/.#9:68442w0WPvJ

/run/systemd/journal/streams/.#9:68471Uuts2J

/run/systemd/journal/streams/.#9:68481L1MrRI

/run/systemd/journal/streams/.#9:69556d4jEJc

Linux Analysis Report
Aqua.x86_64.elf

Start time (UTC):	15:23:31
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:23:32
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:23:33
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:23:34
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:23:37
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:38
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:45
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:46
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:47
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:23:52
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75