Edit tour

Linux Analysis Report
Aqua.i686.elf

Overview

General Information

Sample name:	Aqua.i686.elf
Analysis ID:	1582039
MD5:	5f0ad2307fb3c605bc6228ea56ed6b59
SHA1:	6fa8394a35e6cc6dc5c43622d4df5a185b66e2ac
SHA256:	8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582039
Start date and time:	2024-12-29 16:32:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.i686.elf
Detection:	MAL
Classification:	mal76.spre.troj.evad.linELF@0/249@36/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
VT rate limit hit for: raw.cloudboats.vip. [malformed]

Runtime Messages

Command:	/tmp/Aqua.i686.elf
PID:	5530
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.i686.elf (PID: 5530, Parent: 5448, MD5: 5f0ad2307fb3c605bc6228ea56ed6b59) Arguments: /tmp/Aqua.i686.elf

Aqua.i686.elf New Fork (PID: 5531, Parent: 5530)

Aqua.i686.elf New Fork (PID: 5532, Parent: 5531)

gnome-session-binary New Fork (PID: 5533, Parent: 1498)

sh (PID: 5533, Parent: 1498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5533, Parent: 1498, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5538, Parent: 1)

systemd-hostnamed (PID: 5538, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5684, Parent: 1333)

Default (PID: 5684, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5687, Parent: 1333)

Default (PID: 5687, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5698, Parent: 1333)

Default (PID: 5698, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5699, Parent: 3044)

pulseaudio (PID: 5699, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5700, Parent: 1)

dbus-daemon (PID: 5700, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5701, Parent: 1)

rsyslogd (PID: 5701, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 5707, Parent: 3210)

fusermount (PID: 5707, Parent: 3210, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5715, Parent: 1)

rtkit-daemon (PID: 5715, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5721, Parent: 1)

systemd-logind (PID: 5721, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5780, Parent: 1)

polkitd (PID: 5780, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5784, Parent: 1)

dbus-daemon (PID: 5784, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5785, Parent: 1)

rsyslogd (PID: 5785, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5786, Parent: 1)

gpu-manager (PID: 5786, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5787, Parent: 5786)

sh (PID: 5787, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5788, Parent: 5787)

grep (PID: 5788, Parent: 5787, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5792, Parent: 5786)

sh (PID: 5792, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5793, Parent: 5792)

grep (PID: 5793, Parent: 5792, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5794, Parent: 5786)

sh (PID: 5794, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5795, Parent: 5794)

grep (PID: 5795, Parent: 5794, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5796, Parent: 5786)

sh (PID: 5796, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5797, Parent: 5796)

grep (PID: 5797, Parent: 5796, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5798, Parent: 5786)

sh (PID: 5798, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5799, Parent: 5798)

grep (PID: 5799, Parent: 5798, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5800, Parent: 5786)

sh (PID: 5800, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5802, Parent: 5800)

grep (PID: 5802, Parent: 5800, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5803, Parent: 5786)

sh (PID: 5803, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5804, Parent: 5803)

grep (PID: 5804, Parent: 5803, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5805, Parent: 5786)

sh (PID: 5805, Parent: 5786, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5806, Parent: 5805)

grep (PID: 5806, Parent: 5805, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5801, Parent: 1)

agetty (PID: 5801, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5807, Parent: 1)

generate-config (PID: 5807, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5808, Parent: 5807)

pkill (PID: 5808, Parent: 5807, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5811, Parent: 1)

gdm-wait-for-drm (PID: 5811, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5815, Parent: 1)

rsyslogd (PID: 5815, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5819, Parent: 1)

journalctl (PID: 5819, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5820, Parent: 1)

systemd-journald (PID: 5820, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5823, Parent: 1)

systemd-logind (PID: 5823, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5882, Parent: 1)

agetty (PID: 5882, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5883, Parent: 1)

systemd-journald (PID: 5883, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5884, Parent: 1)

rsyslogd (PID: 5884, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5885, Parent: 1)

dbus-daemon (PID: 5885, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5889, Parent: 1)

gpu-manager (PID: 5889, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5890, Parent: 5889)

sh (PID: 5890, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5891, Parent: 5890)

grep (PID: 5891, Parent: 5890, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5892, Parent: 5889)

sh (PID: 5892, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5893, Parent: 5892)

grep (PID: 5893, Parent: 5892, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5894, Parent: 5889)

sh (PID: 5894, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5895, Parent: 5894)

grep (PID: 5895, Parent: 5894, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5896, Parent: 5889)

sh (PID: 5896, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5897, Parent: 5896)

grep (PID: 5897, Parent: 5896, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5898, Parent: 5889)

sh (PID: 5898, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5899, Parent: 5898)

grep (PID: 5899, Parent: 5898, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5900, Parent: 5889)

sh (PID: 5900, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5901, Parent: 5900)

grep (PID: 5901, Parent: 5900, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5902, Parent: 5889)

sh (PID: 5902, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5903, Parent: 5902)

grep (PID: 5903, Parent: 5902, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5904, Parent: 5889)

sh (PID: 5904, Parent: 5889, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5905, Parent: 5904)

grep (PID: 5905, Parent: 5904, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5906, Parent: 1)

rsyslogd (PID: 5906, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5907, Parent: 1)

dbus-daemon (PID: 5907, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5908, Parent: 1)

generate-config (PID: 5908, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5909, Parent: 5908)

pkill (PID: 5909, Parent: 5908, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5917, Parent: 1)

systemd-logind (PID: 5917, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5974, Parent: 1)

gdm-wait-for-drm (PID: 5974, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5978, Parent: 1)

rsyslogd (PID: 5978, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5979, Parent: 1)

dbus-daemon (PID: 5979, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5985, Parent: 1)

systemd-journald (PID: 5985, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5988, Parent: 1)

systemd-logind (PID: 5988, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6045, Parent: 1)

agetty (PID: 6045, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6046, Parent: 1)

rsyslogd (PID: 6046, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6047, Parent: 1)

dbus-daemon (PID: 6047, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6048, Parent: 1)

gpu-manager (PID: 6048, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6052, Parent: 6048)

sh (PID: 6052, Parent: 6048, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6053, Parent: 6052)

grep (PID: 6053, Parent: 6052, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6054, Parent: 1)

dbus-daemon (PID: 6054, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6055, Parent: 1)

rsyslogd (PID: 6055, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6056, Parent: 1)

generate-config (PID: 6056, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6057, Parent: 6056)

pkill (PID: 6057, Parent: 6056, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6063, Parent: 1)

gdm-wait-for-drm (PID: 6063, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6067, Parent: 1)

rsyslogd (PID: 6067, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6071, Parent: 1)

systemd-journald (PID: 6071, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6074, Parent: 1)

systemd-logind (PID: 6074, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6131, Parent: 1)

agetty (PID: 6131, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6132, Parent: 1)

dbus-daemon (PID: 6132, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6133, Parent: 1)

gpu-manager (PID: 6133, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6137, Parent: 6133)

sh (PID: 6137, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6138, Parent: 6137)

grep (PID: 6138, Parent: 6137, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6139, Parent: 6133)

sh (PID: 6139, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6140, Parent: 6139)

grep (PID: 6140, Parent: 6139, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6144, Parent: 6133)

sh (PID: 6144, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6145, Parent: 6144)

grep (PID: 6145, Parent: 6144, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6146, Parent: 6133)

sh (PID: 6146, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6147, Parent: 6146)

grep (PID: 6147, Parent: 6146, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6148, Parent: 6133)

sh (PID: 6148, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6149, Parent: 6148)

grep (PID: 6149, Parent: 6148, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6150, Parent: 6133)

sh (PID: 6150, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6151, Parent: 6150)

grep (PID: 6151, Parent: 6150, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6152, Parent: 6133)

sh (PID: 6152, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6153, Parent: 6152)

grep (PID: 6153, Parent: 6152, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6154, Parent: 6133)

sh (PID: 6154, Parent: 6133, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6155, Parent: 6154)

grep (PID: 6155, Parent: 6154, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6134, Parent: 1)

rsyslogd (PID: 6134, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6156, Parent: 1)

generate-config (PID: 6156, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6157, Parent: 6156)

pkill (PID: 6157, Parent: 6156, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6158, Parent: 1)

gdm-wait-for-drm (PID: 6158, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6162, Parent: 1)

rsyslogd (PID: 6162, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6168, Parent: 1)

systemd-journald (PID: 6168, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6171, Parent: 1)

systemd-logind (PID: 6171, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6228, Parent: 1)

agetty (PID: 6228, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6229, Parent: 1)

dbus-daemon (PID: 6229, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6230, Parent: 1)

gpu-manager (PID: 6230, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6233, Parent: 6230)

sh (PID: 6233, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6234, Parent: 6233)

grep (PID: 6234, Parent: 6233, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6238, Parent: 6230)

sh (PID: 6238, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6239, Parent: 6238)

grep (PID: 6239, Parent: 6238, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6240, Parent: 6230)

sh (PID: 6240, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6241, Parent: 6240)

grep (PID: 6241, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6242, Parent: 6230)

sh (PID: 6242, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6243, Parent: 6242)

grep (PID: 6243, Parent: 6242, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6244, Parent: 6230)

sh (PID: 6244, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6245, Parent: 6244)

grep (PID: 6245, Parent: 6244, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6246, Parent: 6230)

sh (PID: 6246, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6247, Parent: 6246)

grep (PID: 6247, Parent: 6246, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6307, Parent: 6230)

sh (PID: 6307, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6308, Parent: 6307)

grep (PID: 6308, Parent: 6307, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6309, Parent: 6230)

sh (PID: 6309, Parent: 6230, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6310, Parent: 6309)

grep (PID: 6310, Parent: 6309, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6231, Parent: 1)

rsyslogd (PID: 6231, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6232, Parent: 1)

dbus-daemon (PID: 6232, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6250, Parent: 1)

systemd-logind (PID: 6250, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6313, Parent: 1)

generate-config (PID: 6313, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6314, Parent: 6313)

pkill (PID: 6314, Parent: 6313, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6315, Parent: 1)

gdm-wait-for-drm (PID: 6315, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6319, Parent: 1)

rsyslogd (PID: 6319, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6320, Parent: 1)

dbus-daemon (PID: 6320, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6324, Parent: 1)

systemd-journald (PID: 6324, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6327, Parent: 1)

systemd-logind (PID: 6327, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6384, Parent: 1)

agetty (PID: 6384, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6385, Parent: 1)

dbus-daemon (PID: 6385, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6386, Parent: 1)

rsyslogd (PID: 6386, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6390, Parent: 1)

gpu-manager (PID: 6390, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6391, Parent: 6390)

sh (PID: 6391, Parent: 6390, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6392, Parent: 6391)

grep (PID: 6392, Parent: 6391, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6394, Parent: 6390)

sh (PID: 6394, Parent: 6390, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6395, Parent: 6394)

grep (PID: 6395, Parent: 6394, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6393, Parent: 1)

dbus-daemon (PID: 6393, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6396, Parent: 1)

generate-config (PID: 6396, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6398, Parent: 6396)

pkill (PID: 6398, Parent: 6396, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6397, Parent: 1)

rsyslogd (PID: 6397, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6404, Parent: 1)

gdm-wait-for-drm (PID: 6404, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6408, Parent: 1)

rsyslogd (PID: 6408, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6412, Parent: 1)

systemd-journald (PID: 6412, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6415, Parent: 1)

systemd-logind (PID: 6415, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6472, Parent: 1)

agetty (PID: 6472, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6473, Parent: 1)

dbus-daemon (PID: 6473, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6476, Parent: 1)

gpu-manager (PID: 6476, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6479, Parent: 6476)

sh (PID: 6479, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6480, Parent: 6479)

grep (PID: 6480, Parent: 6479, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6481, Parent: 6476)

sh (PID: 6481, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6485, Parent: 6481)

grep (PID: 6485, Parent: 6481, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6486, Parent: 6476)

sh (PID: 6486, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6487, Parent: 6486)

grep (PID: 6487, Parent: 6486, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6488, Parent: 6476)

sh (PID: 6488, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6489, Parent: 6488)

grep (PID: 6489, Parent: 6488, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6490, Parent: 6476)

sh (PID: 6490, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6491, Parent: 6490)

grep (PID: 6491, Parent: 6490, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6492, Parent: 6476)

sh (PID: 6492, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6493, Parent: 6492)

grep (PID: 6493, Parent: 6492, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6553, Parent: 6476)

sh (PID: 6553, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6554, Parent: 6553)

grep (PID: 6554, Parent: 6553, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6555, Parent: 6476)

sh (PID: 6555, Parent: 6476, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6556, Parent: 6555)

grep (PID: 6556, Parent: 6555, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6477, Parent: 1)

rsyslogd (PID: 6477, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6478, Parent: 1)

dbus-daemon (PID: 6478, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6496, Parent: 1)

systemd-logind (PID: 6496, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6559, Parent: 1)

generate-config (PID: 6559, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6560, Parent: 6559)

pkill (PID: 6560, Parent: 6559, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6561, Parent: 1)

gdm-wait-for-drm (PID: 6561, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6563, Parent: 1)

rsyslogd (PID: 6563, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6564, Parent: 1)

dbus-daemon (PID: 6564, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6571, Parent: 3044)

dbus-daemon (PID: 6571, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6572, Parent: 3044)

pulseaudio (PID: 6572, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6573, Parent: 1)

systemd-journald (PID: 6573, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6576, Parent: 1)

systemd-logind (PID: 6576, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6633, Parent: 1)

agetty (PID: 6633, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6634, Parent: 1)

rsyslogd (PID: 6634, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6638, Parent: 1)

dbus-daemon (PID: 6638, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6639, Parent: 1)

gpu-manager (PID: 6639, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6640, Parent: 6639)

sh (PID: 6640, Parent: 6639, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6641, Parent: 6640)

grep (PID: 6641, Parent: 6640, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6642, Parent: 6639)

sh (PID: 6642, Parent: 6639, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6643, Parent: 6642)

grep (PID: 6643, Parent: 6642, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6644, Parent: 6639)

sh (PID: 6644, Parent: 6639, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6645, Parent: 6644)

grep (PID: 6645, Parent: 6644, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6646, Parent: 6639)

sh (PID: 6646, Parent: 6639, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6647, Parent: 6646)

grep (PID: 6647, Parent: 6646, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6648, Parent: 3044)

pulseaudio (PID: 6648, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6649, Parent: 1)

rsyslogd (PID: 6649, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6650, Parent: 1)

dbus-daemon (PID: 6650, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6651, Parent: 1)

generate-config (PID: 6651, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6652, Parent: 6651)

pkill (PID: 6652, Parent: 6651, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6658, Parent: 1)

rtkit-daemon (PID: 6658, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6661, Parent: 1)

polkitd (PID: 6661, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6665, Parent: 1)

gdm-wait-for-drm (PID: 6665, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6668, Parent: 3044)

dbus-daemon (PID: 6668, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6672, Parent: 3044)

pulseaudio (PID: 6672, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6673, Parent: 1)

rsyslogd (PID: 6673, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6674, Parent: 1)

dbus-daemon (PID: 6674, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6677, Parent: 1)

systemd-journald (PID: 6677, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6680, Parent: 1)

systemd-logind (PID: 6680, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6737, Parent: 1)

agetty (PID: 6737, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6738, Parent: 1)

dbus-daemon (PID: 6738, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6739, Parent: 1)

rsyslogd (PID: 6739, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6740, Parent: 3044)

pulseaudio (PID: 6740, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6741, Parent: 1)

gpu-manager (PID: 6741, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6745, Parent: 6741)

sh (PID: 6745, Parent: 6741, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6746, Parent: 6745)

grep (PID: 6746, Parent: 6745, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6748, Parent: 6741)

sh (PID: 6748, Parent: 6741, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6750, Parent: 6748)

grep (PID: 6750, Parent: 6748, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6747, Parent: 1)

dbus-daemon (PID: 6747, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6749, Parent: 1)

rsyslogd (PID: 6749, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6751, Parent: 1)

generate-config (PID: 6751, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6752, Parent: 6751)

pkill (PID: 6752, Parent: 6751, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6753, Parent: 3044)

pulseaudio (PID: 6753, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6757, Parent: 1)

rtkit-daemon (PID: 6757, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6762, Parent: 1)

polkitd (PID: 6762, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6766, Parent: 1)

gdm-wait-for-drm (PID: 6766, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6769, Parent: 3044)

dbus-daemon (PID: 6769, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6773, Parent: 1)

rsyslogd (PID: 6773, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6777, Parent: 3044)

pulseaudio (PID: 6777, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6778, Parent: 1)

dbus-daemon (PID: 6778, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6779, Parent: 1)

rtkit-daemon (PID: 6779, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6782, Parent: 1)

systemd-logind (PID: 6782, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6819, Parent: 1)

polkitd (PID: 6819, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6846, Parent: 1)

systemd-journald (PID: 6846, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6847, Parent: 1)

agetty (PID: 6847, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6850, Parent: 1)

rsyslogd (PID: 6850, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6851, Parent: 1)

dbus-daemon (PID: 6851, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6855, Parent: 1)

systemd-logind (PID: 6855, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6912, Parent: 3044)

dbus-daemon (PID: 6912, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6913, Parent: 1)

gpu-manager (PID: 6913, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6917, Parent: 6913)

sh (PID: 6917, Parent: 6913, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6918, Parent: 6917)

grep (PID: 6918, Parent: 6917, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6919, Parent: 6913)

sh (PID: 6919, Parent: 6913, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6920, Parent: 6919)

grep (PID: 6920, Parent: 6919, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6924, Parent: 6913)

sh (PID: 6924, Parent: 6913, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6925, Parent: 6924)

systemd New Fork (PID: 6921, Parent: 1)

dbus-daemon (PID: 6921, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6922, Parent: 1)

rsyslogd (PID: 6922, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6923, Parent: 3044)

pulseaudio (PID: 6923, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6926, Parent: 1)

generate-config (PID: 6926, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6927, Parent: 6926)

pkill (PID: 6927, Parent: 6926, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6931, Parent: 1)

rtkit-daemon (PID: 6931, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6934, Parent: 1)

polkitd (PID: 6934, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6940, Parent: 1)

gdm-wait-for-drm (PID: 6940, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6943, Parent: 3044)

dbus-daemon (PID: 6943, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6947, Parent: 1)

rsyslogd (PID: 6947, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6951, Parent: 3044)

pulseaudio (PID: 6951, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6952, Parent: 1)

dbus-daemon (PID: 6952, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6953, Parent: 1)

rtkit-daemon (PID: 6953, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6956, Parent: 1)

systemd-logind (PID: 6956, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6982, Parent: 1)

polkitd (PID: 6982, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7019, Parent: 1)

systemd-journald (PID: 7019, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7020, Parent: 1)

agetty (PID: 7020, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7021, Parent: 1)

rsyslogd (PID: 7021, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7022, Parent: 1)

dbus-daemon (PID: 7022, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7025, Parent: 1)

systemd-logind (PID: 7025, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7082, Parent: 1)

gpu-manager (PID: 7082, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7086, Parent: 7082)

sh (PID: 7086, Parent: 7082, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7087, Parent: 7086)

grep (PID: 7087, Parent: 7086, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7090, Parent: 7082)

sh (PID: 7090, Parent: 7082, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7091, Parent: 7090)

grep (PID: 7091, Parent: 7090, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7092, Parent: 1)

dbus-daemon (PID: 7092, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7093, Parent: 1)

rsyslogd (PID: 7093, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7094, Parent: 3044)

pulseaudio (PID: 7094, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7095, Parent: 1)

generate-config (PID: 7095, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7096, Parent: 7095)

pkill (PID: 7096, Parent: 7095, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7100, Parent: 1)

rtkit-daemon (PID: 7100, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7103, Parent: 1)

polkitd (PID: 7103, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7107, Parent: 1)

gdm-wait-for-drm (PID: 7107, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7112, Parent: 3044)

dbus-daemon (PID: 7112, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7113, Parent: 1)

agetty (PID: 7113, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7114, Parent: 1)

dbus-daemon (PID: 7114, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7115, Parent: 1)

rsyslogd (PID: 7115, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7116, Parent: 3044)

pulseaudio (PID: 7116, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7117, Parent: 1)

dbus-daemon (PID: 7117, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7118, Parent: 1)

rsyslogd (PID: 7118, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7119, Parent: 3044)

pulseaudio (PID: 7119, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7123, Parent: 1)

rtkit-daemon (PID: 7123, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7126, Parent: 1)

systemd-logind (PID: 7126, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7185, Parent: 1)

polkitd (PID: 7185, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7193, Parent: 3044)

dbus-daemon (PID: 7193, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7194, Parent: 1)

gdm3 (PID: 7194, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.i686.elf	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x4d3f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
Aqua.i686.elf	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x4cf2:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
Aqua.i686.elf	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x74fd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x759d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
Aqua.i686.elf	Linux_Trojan_Mirai_3a85a418	unknown	unknown	0x47b7:$a: 01 D8 66 C1 C8 08 C1 C8 10 66 C1 C8 08 66 83 7C 24 2C FF 89
Aqua.i686.elf	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x522:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
Aqua.i686.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7a32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
Aqua.i686.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x99c3:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x4d3f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x4cf2:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x74fd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x759d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_3a85a418	unknown	unknown	0x47b7:$a: 01 D8 66 C1 C8 08 C1 C8 10 66 C1 C8 08 66 83 7C 24 2C FF 89
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x522:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7a32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5530.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x99c3:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 2 entries

String: EOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.cloudboats.vip. [malformed]

Source: global traffic	TCP traffic: 192.168.2.15:37424 -> 89.190.156.145:7733
Source: global traffic	TCP traffic: 192.168.2.15:44110 -> 193.111.248.108:33966

Source: /usr/sbin/rsyslogd (PID: 5701)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5785)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5815)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5884)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5906)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5978)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6046)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6055)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6067)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6134)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6162)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6231)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6319)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6386)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6397)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6408)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6477)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6563)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6634)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6649)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6673)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6739)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6749)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6773)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6850)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6922)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6947)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7021)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7093)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7115)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7118)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5820)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6168)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6324)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6412)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6573)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6677)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6846)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7019)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: raw.cloudboats.vip
Source: global traffic	DNS traffic detected: DNS query: raw.cloudboats.vip. [malformed]

Source: syslog.189.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1679, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5533, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 724, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 779, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 789, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1333, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1440, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3060, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5507, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5508, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5699, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5700, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5701, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5784, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5785, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5801, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 766, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1431, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3044, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5367, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5542, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5721, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5811, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5814, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5815, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5820, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5884, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5885, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5889, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5882, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5906, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5907, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5883, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5974, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5977, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5978, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5979, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6046, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6047, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6048, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6045, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6054, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6055, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5985, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5988, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6063, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6066, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6067, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6132, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6131, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6134, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6071, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6074, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6158, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6161, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6162, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6229, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6228, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6231, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6232, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6168, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6250, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6315, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6318, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6319, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6320, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6385, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6386, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6390, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6384, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6393, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6324, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6404, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6407, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6408, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6472, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6477, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6478, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6412, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6496, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6561, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6562, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6563, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6564, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6571, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6572, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6634, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6639, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6633, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6648, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6649, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6576, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6665, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6668, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6671, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6672, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6673, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6674, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6738, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6739, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6740, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6737, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6749, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6753, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6677, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6766, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6769, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6772, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6773, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6778, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6782, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6777, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6912, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6913, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6921, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6922, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6923, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6940, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6943, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6946, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6952, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6956, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6951, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7021, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7022, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7082, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7020, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7092, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7093, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7094, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7112, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7114, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7115, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7116, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1679, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5533, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 724, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 779, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 789, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1333, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1440, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3060, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5507, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5508, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5699, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5700, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5701, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5784, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5785, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5801, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 766, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 1431, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 3044, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5367, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5542, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5721, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5811, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5814, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5815, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5820, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5884, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5885, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5889, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5882, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5906, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5907, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5883, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5974, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5977, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5978, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5979, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6046, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6047, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6048, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6045, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6054, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6055, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5985, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 5988, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6063, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6066, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6067, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6132, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6131, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6134, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6071, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6074, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6158, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6161, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6162, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6229, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6228, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6231, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6232, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6168, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6250, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6315, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6318, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6319, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6320, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6385, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6386, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6390, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6384, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6393, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6324, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6404, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6407, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6408, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6472, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6477, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6478, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6412, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6496, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6561, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6562, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6563, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6564, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6571, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6572, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6634, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6639, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6633, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6648, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6649, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6576, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6665, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6668, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6671, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6672, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6673, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6674, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6738, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6739, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6740, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6737, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6749, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6753, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6677, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6766, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6769, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6772, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6773, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6778, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6782, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6777, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6912, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6913, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6921, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6922, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6923, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6940, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6943, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6946, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6952, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6956, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 6951, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7021, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7022, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7082, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7020, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7092, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7093, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7094, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7112, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7114, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7115, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5532)	SIGKILL sent: pid: 7116, result: successful	Jump to behavior

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5530.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26

Source: classification engine

Classification label: mal76.spre.troj.evad.linELF@0/249@36/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5700)	File: /proc/5700/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5707)	File: /proc/5707/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5784)	File: /proc/5784/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5885)	File: /proc/5885/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5907)	File: /proc/5907/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5979)	File: /proc/5979/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6047)	File: /proc/6047/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6054)	File: /proc/6054/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6132)	File: /proc/6132/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6229)	File: /proc/6229/mounts
Source: /usr/bin/dbus-daemon (PID: 6232)	File: /proc/6232/mounts
Source: /usr/bin/dbus-daemon (PID: 6320)	File: /proc/6320/mounts
Source: /usr/bin/dbus-daemon (PID: 6385)	File: /proc/6385/mounts
Source: /usr/bin/dbus-daemon (PID: 6393)	File: /proc/6393/mounts
Source: /usr/bin/dbus-daemon (PID: 6473)	File: /proc/6473/mounts
Source: /usr/bin/dbus-daemon (PID: 6478)	File: /proc/6478/mounts
Source: /usr/bin/dbus-daemon (PID: 6564)	File: /proc/6564/mounts
Source: /usr/bin/dbus-daemon (PID: 6571)	File: /proc/6571/mounts
Source: /usr/bin/dbus-daemon (PID: 6638)	File: /proc/6638/mounts
Source: /usr/bin/dbus-daemon (PID: 6650)	File: /proc/6650/mounts
Source: /usr/bin/dbus-daemon (PID: 6668)	File: /proc/6668/mounts
Source: /usr/bin/dbus-daemon (PID: 6674)	File: /proc/6674/mounts
Source: /usr/bin/dbus-daemon (PID: 6738)	File: /proc/6738/mounts
Source: /usr/bin/dbus-daemon (PID: 6747)	File: /proc/6747/mounts
Source: /usr/bin/dbus-daemon (PID: 6769)	File: /proc/6769/mounts
Source: /usr/bin/dbus-daemon (PID: 6778)	File: /proc/6778/mounts
Source: /usr/bin/dbus-daemon (PID: 6851)	File: /proc/6851/mounts
Source: /usr/bin/dbus-daemon (PID: 6912)	File: /proc/6912/mounts
Source: /usr/bin/dbus-daemon (PID: 6921)	File: /proc/6921/mounts
Source: /usr/bin/dbus-daemon (PID: 6943)	File: /proc/6943/mounts
Source: /usr/bin/dbus-daemon (PID: 6952)	File: /proc/6952/mounts
Source: /usr/bin/dbus-daemon (PID: 7022)	File: /proc/7022/mounts
Source: /usr/bin/dbus-daemon (PID: 7092)	File: /proc/7092/mounts
Source: /usr/bin/dbus-daemon (PID: 7112)	File: /proc/7112/mounts
Source: /usr/bin/dbus-daemon (PID: 7114)	File: /proc/7114/mounts
Source: /usr/bin/dbus-daemon (PID: 7117)	File: /proc/7117/mounts
Source: /usr/bin/dbus-daemon (PID: 7193)	File: /proc/7193/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5533)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5533)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5538)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5721)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5721)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5721)	File: /run/systemd/seats/.#seat08cxQTL	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5780)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5823)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5823)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5823)	File: /run/systemd/seats/.#seat0fMEQcv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:657812Wjp50	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65786ZCVfo1	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:657877CjZC0	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65788l7Qgd3	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65794EN5622	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65795Cb3SA1	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65796vSYBU2	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65803U2jXW3	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	File: /run/systemd/journal/streams/.#9:65884AUdkF2	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5917)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5917)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5917)	File: /run/systemd/seats/.#seat0n8elQC	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	File: /run/systemd/journal/streams/.#9:67058tM2rqK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	File: /run/systemd/journal/streams/.#9:66339xUPfrL	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	File: /run/systemd/journal/streams/.#9:66340puAOyK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	File: /run/systemd/journal/streams/.#9:66351LPRL3M	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	File: /run/systemd/journal/streams/.#9:66352IV0LzK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	File: /run/systemd/journal/streams/.#9:66353uVMkbN	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5988)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5988)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5988)	File: /run/systemd/seats/.#seat0x4J5s0	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	File: /run/systemd/journal/streams/.#9:67481k5aWig	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	File: /run/systemd/journal/streams/.#9:674823YKJvg	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	File: /run/systemd/journal/streams/.#9:67483MZWDLg	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	File: /run/systemd/journal/streams/.#9:67571JEjXah	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	File: /run/systemd/journal/streams/.#9:68677ms9fVg	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6074)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6074)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6074)	File: /run/systemd/seats/.#seat0v14SPt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69045jKzsTC
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69047TZnp9C
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69048cUUeGA
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69055O7fgtA
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69056Gl7ZfB
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69130NFSwkC
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:69227rzYooA
Source: /lib/systemd/systemd-journald (PID: 6168)	File: /run/systemd/journal/streams/.#9:68488QCR8oA
Source: /lib/systemd/systemd-logind (PID: 6171)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6171)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6171)	File: /run/systemd/seats/.#seat0V69RDN
Source: /lib/systemd/systemd-logind (PID: 6250)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6250)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6250)	File: /run/systemd/seats/.#seat0BhCvzL
Source: /lib/systemd/systemd-journald (PID: 6324)	File: /run/systemd/journal/streams/.#9:7087551vTIn
Source: /lib/systemd/systemd-journald (PID: 6324)	File: /run/systemd/journal/streams/.#9:70876V1OxPo
Source: /lib/systemd/systemd-journald (PID: 6324)	File: /run/systemd/journal/streams/.#9:70877Zm6kvo
Source: /lib/systemd/systemd-journald (PID: 6324)	File: /run/systemd/journal/streams/.#9:70883qtaYFn
Source: /lib/systemd/systemd-journald (PID: 6324)	File: /run/systemd/journal/streams/.#9:70890QJIuWn
Source: /lib/systemd/systemd-journald (PID: 6324)	File: /run/systemd/journal/streams/.#9:70891XvmdQn
Source: /lib/systemd/systemd-logind (PID: 6327)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6327)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6327)	File: /run/systemd/seats/.#seat0sutC5D
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:71430F5vmB4
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:714347JfPE3
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:71436ZZvsR3
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:71437buacv2
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:71444QiaB20
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:71526lJggW4
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:71614iRuCZ2
Source: /lib/systemd/systemd-journald (PID: 6412)	File: /run/systemd/journal/streams/.#9:70643QZxaP0
Source: /lib/systemd/systemd-logind (PID: 6415)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6415)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6415)	File: /run/systemd/seats/.#seat0F5JAuh
Source: /lib/systemd/systemd-logind (PID: 6496)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6496)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6496)	File: /run/systemd/seats/.#seat076ZnDn
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:73261V5x77c
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72450vdbZHd
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72451Eyi0Ld
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72452PauRJf
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72453QcfGIe
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72454hvvnzb
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72462K69S3c
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72463QBPPXf
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72472oX4SNd
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72473te5m2b
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72577O9BHOd
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72639Qy6XGe
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72668qMj2Jd
Source: /lib/systemd/systemd-journald (PID: 6573)	File: /run/systemd/journal/streams/.#9:72675Qsuh1c
Source: /lib/systemd/systemd-logind (PID: 6576)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6576)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6576)	File: /run/systemd/seats/.#seat05Bvsut
Source: /usr/lib/policykit-1/polkitd (PID: 6661)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74252VI6Ne5
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74254l47Bc5
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74255pfles7
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74257O84y54
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74263W1anb5
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74275wFKAS3
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74276Zq2jk5
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74277nUBK35
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74278bI7w43
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:742799vJjo4
Source: /lib/systemd/systemd-journald (PID: 6677)	File: /run/systemd/journal/streams/.#9:74318VuBQw7
Source: /lib/systemd/systemd-logind (PID: 6680)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6680)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6680)	File: /run/systemd/seats/.#seat00pb4Xk
Source: /usr/lib/policykit-1/polkitd (PID: 6762)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 6782)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6782)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6782)	File: /run/systemd/seats/.#seat0xF5pz3
Source: /usr/lib/policykit-1/polkitd (PID: 6819)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77394GF4wzR
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77395WGFnHT
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:773975GQvnS
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77398CMPpbQ
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77399QrQ6yR
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77400s6uamP
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77401rAhndR
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77402b2O05Q
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77403GYQ1OP
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77404RfUkyQ
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77411JafUyQ
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77412JNcKDS
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77413BlzSmP
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77414MA7fYQ
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77415G6r8NP
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:77416MF5VdT
Source: /lib/systemd/systemd-logind (PID: 6855)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6855)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6855)	File: /run/systemd/seats/.#seat0B4SJYv
Source: /usr/lib/policykit-1/polkitd (PID: 6934)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 6956)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6956)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6956)	File: /run/systemd/seats/.#seat09NNPYa
Source: /usr/lib/policykit-1/polkitd (PID: 6982)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79199GUqGwW
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:7920059GfnU
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79201zAkm6X
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79202JhG8fV
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79206FXankV
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79207AbTZWV
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79208gdZKzY
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79209TyPNpW
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79215bEthTV
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79216Kk1oaW
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79217LC8FQX
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:792186YG8tY
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79219X8tWNX
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79220hVgNhU
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:792428NQ7CU
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79273fIvm3U
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:792894MF9QU
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79380Ghk5hU
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79468AnVWgY
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:79520mxOQIU
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:795246cqVsW
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:80360V6IAPW
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:80446sa5DHW
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:80544WBdIhY
Source: /lib/systemd/systemd-journald (PID: 7019)	File: /run/systemd/journal/streams/.#9:80549aNQnsV
Source: /lib/systemd/systemd-logind (PID: 7025)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7025)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7025)	File: /run/systemd/seats/.#seat0KHyOFp
Source: /usr/lib/policykit-1/polkitd (PID: 7103)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7126)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7126)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7126)	File: /run/systemd/seats/.#seat0s7STB3
Source: /usr/lib/policykit-1/polkitd (PID: 7185)	Directory: /root/.cache

Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/110/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/110/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/231/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/231/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/111/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/111/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/112/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/112/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/233/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/233/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/113/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/113/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/114/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/114/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/235/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/235/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/115/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/115/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/116/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/116/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/117/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/117/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/118/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/118/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/119/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/119/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/911/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/911/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/914/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/914/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/10/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/10/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/11/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/11/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/12/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/12/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/13/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/13/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/14/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/14/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/15/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/15/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/16/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/16/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/17/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/17/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/18/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/18/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/19/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/19/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/120/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/120/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/121/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/121/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/1/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/1/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/122/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/122/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/243/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/243/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/2/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/2/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/123/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/123/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/3/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/3/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/124/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/124/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/125/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/125/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/4/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/4/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/246/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/246/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/126/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/126/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/5/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/5/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/127/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/127/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/6/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/6/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/128/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/128/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/7/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/7/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/129/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/129/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/8/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/8/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/9/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/9/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/20/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/20/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/21/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/21/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/22/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/22/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/6131/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/6131/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/23/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/23/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/24/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/24/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/25/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	File opened: /proc/25/cmdline	Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5787)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5792)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5794)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5796)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5798)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5800)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5803)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5805)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5890)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5892)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5894)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5896)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5898)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5900)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5902)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5904)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6052)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6137)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6139)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6144)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6146)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6148)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6150)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6152)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6154)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6233)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6238)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6240)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6242)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6244)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6246)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6307)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6309)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6391)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6394)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6479)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6481)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6486)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6488)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6490)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6492)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6553)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6555)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6640)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6642)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6644)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6646)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6745)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6748)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6917)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6919)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6924)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7086)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7090)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5788)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5793)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5795)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5797)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5799)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5802)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5804)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5806)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5891)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5893)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5895)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5897)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5899)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5901)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5903)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5905)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6053)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6138)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6140)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6145)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6147)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6149)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6151)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6153)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6155)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6234)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6239)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6241)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6243)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6245)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6247)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6308)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6310)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6392)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6395)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6480)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6485)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6487)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6489)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6491)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6493)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6554)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6556)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6641)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6643)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6645)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6647)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6746)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6750)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6918)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6920)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7087)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7091)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5808)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5909)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6057)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6157)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6314)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6398)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6560)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6652)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6752)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6927)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7096)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 5820)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6168)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6324)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6412)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6573)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6677)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6846)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7019)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 5801)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 5882)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6045)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6131)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6228)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6384)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6472)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6633)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6737)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 6847)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7020)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7113)	Reads version info: /etc/issue

Source: /usr/sbin/gdm3 (PID: 7194)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/sbin/gdm3 (PID: 7194)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)

Source: /usr/sbin/rsyslogd (PID: 5701)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5785)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5785)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 5786)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5815)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5884)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5906)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5906)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5978)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6046)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6055)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6055)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6067)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6133)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6134)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6134)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6162)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6230)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6231)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6231)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6319)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6386)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6397)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6397)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6408)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6476)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6477)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6477)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6563)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6634)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6649)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6649)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6739)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6749)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6749)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6773)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6850)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6922)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6922)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6947)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7021)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7093)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7093)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7118)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7118)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.i686.elf (PID: 5531)

File: /tmp/Aqua.i686.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5786)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5889)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6048)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6133)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6230)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6390)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6476)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6639)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6741)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6913)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7082)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 5808)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5909)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6057)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6157)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6314)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6398)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6560)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6648)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6652)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6752)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6753)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6777)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6923)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6927)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6951)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7094)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7096)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7119)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 5538)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5701)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5785)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5786)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5801)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5815)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5882)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5883)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5884)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5889)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5906)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5978)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5985)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6045)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6046)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6055)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6067)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6071)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6131)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6133)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6134)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6162)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6168)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6228)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6230)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6231)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6319)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6324)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6384)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6386)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6397)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6408)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6412)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6472)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6476)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6477)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6563)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6573)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6633)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6634)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6648)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6649)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6673)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6677)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6737)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6739)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6749)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6753)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6773)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6777)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6846)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6847)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6850)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6922)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6923)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6947)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6951)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7019)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7020)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7021)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7093)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7094)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7113)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7115)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7118)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7119)	Queries kernel information via 'uname':

Source: kern.log.43.dr	Binary or memory string: Dec 29 09:33:17 galassia kernel: [ 167.805322] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
Source: kern.log.43.dr	Binary or memory string: Dec 29 09:33:17 galassia kernel: [ 167.805295] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel parport_pc ppdev lp parport drm ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper mptspi scsi_transport_spi psmouse mptscsih mptbase ahci libahci vmxnet3

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 File and Directory Permissions Modification	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Indicator Removal	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.i686.elf	37%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.i686.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.cloudboats.vip	193.111.248.108	true	false		high
raw.cloudboats.vip. [malformed]	unknown	unknown	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.189.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
193.111.248.108	raw.cloudboats.vip	Russian Federation		8100	ASN-QUADRANET-GLOBALUS	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
193.111.248.108	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.cloudboats.vip	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.111.248.108

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
ASN-QUADRANET-GLOBALUS	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.111.248.108
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	193.111.248.108

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/journal/streams/.#9:657812Wjp50

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.501078725254072
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyiPlj3lAUdXsjs7LH:SbFuFyLVIg1BG+f+MyiB3fd8ji4s
MD5:	448377FFA29F2B64C82C7742E84354D7
SHA1:	B55029D212D26EFB219EC6D4ACB4206A6C9F63F7
SHA-256:	0C7D0F160CCD5F32D8BB5735A05D3C2BA2223DB2A86D3E55513D01E73196E821
SHA-512:	7B93AE73CC82B3B07907BEA4DA8C66B022833AEDCD0798F2B13FB06CEB6775EC889FACFA2207720FBAFDF0FE181C8722E12CA7EBEB248C0D600EC8EB16CB1F61
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8d1028b91bdd40c98ae48b435e1cbe5c.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:65786ZCVfo1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.505893647163841
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mobkz4ATjZcHcljX+:qgFq6g10+f+Mo4DRmAu
MD5:	8C3F68D7B322450F8CB1ADB4D886CA7C
SHA1:	5666FFD022A2D9E0A09F485157D2D5B8315C3661
SHA-256:	BE944DBFF36112B35A3FD5D373AC9C03D79B78C8625E9021497460AF3CE2D7F9
SHA-512:	B187DAF09556FAD7A1F3F61F5E0EC5A534615A0050A951F8D870D6D078B1707F3757EFD31B0C7A4879622385940C300094E38C91811A03D28E2AF84F381096CC
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b0b8f036ee66421583634899f251b515.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:657877CjZC0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422055346268147
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7ERxWKSE5xsjs1Ha7:SbFuFyLVIg1BG+f+MYHWKSE5qjosQu
MD5:	78AC8A0911F17C030F279E7D137DF9C7
SHA1:	9E32BEAFB7A2847CCCA401CE24FCEEFA0889D37E
SHA-256:	9094697C929E80478143AF8F3414A6573DA8735E4809CC54BEE7C891AE3D5E3C
SHA-512:	9E3982FE58DC0EC026561A5AEDBD51BF41FEBEBEFA8E065F9528860E005EEC8ACD9A82BB05AA29DF7B806B3812E21E437101591E49D07B59E8DC913F7D41AAB7
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=12148ec7e6b44598b339cedf531e3eba.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65788l7Qgd3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.42233564332198
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/ORQTV8rrxsjs1Ha7:SbFuFyLVIg1BG+f+MaQmrrqjosQu
MD5:	DE57FBFB7B9DA2E9F8E2A805F7417D0A
SHA1:	4478D1ED487D48E76253F338B0311526958172AB
SHA-256:	3F70EBEE441F2C9DC86FB4A642EE3F7BC93454B14E06BBD60E798057F0E2F97A
SHA-512:	DFA727DE7C09149A10E8B1CAE4026D68B751FF29F1E768BB4C902F5DF174984D5FF4B96C6ED88D248AC47340EAAA076E66B1A4C9DFA30332D8391432480B0D9D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=582659395b5d460ca8c8d035b2f6dc6c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65794EN5622

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.42384992239477
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoAlaTdkxMwavXsjs2Ax:SbFuFyLVIg1BAf+MolsfjNALyAZD
MD5:	EF969A2C329706316FCC10611CFEDF97
SHA1:	7BCB582F49485477A34D983B27112B8A82750F1F
SHA-256:	C296078E62AD89C6286279BAEB7F7EAA51E94160A989B23A29320D0C5D9B63D0
SHA-512:	73910A0796A0E53EBDDA61263B4AE2949682AC9F05880F0B3E8F5C86D8BEAF9B9970C41E602CD12328FDEE6D2ACE98165CF5D30CD75C44BF105444D3C091F809
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=be7f80eec63841099932d2360a7a6263.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65795Cb3SA1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.387181587557805
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrzlGREAsRAgrxsjsV:SbFuFyLVIg1BG+f+MvsRtwAuqjLkGq
MD5:	1CC1630DC71FEB698995E302AC50B62F
SHA1:	FB8D5450414F554BB27F33DDF7856C966C276943
SHA-256:	742D23BDBE4DA9F22FB4C2CFF71751FEE63B7200E8FA95E9ADB02FDD94DA13A8
SHA-512:	FF23BE8F32877967C2A86EE9A89D699082CEBE1E11656C73E659BA7EAEB6C86373798D25F14531D6F185DA4A72A24891AF264F57F6E384A676C23B55AE9B6130
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a2a90f2379694f9c911a79d019849533.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:65796vSYBU2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.469279499671518
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MlDoDV8RdjZcHcljX+:qgFq6g10+f+MlEDV8lmAu
MD5:	F96F1463F8812C2811F571575DD61995
SHA1:	B84AD098EB57B20BD990340CECA62AFBA7930F28
SHA-256:	C1FA82FB844671EDE07025D84CC4D73F22890B4D93B2808E4EB9FF3AF39486A9
SHA-512:	D140700B8EA0CA043EA227A036D2531F2CFFDBF8F68C15614C3284F705F19C87FE1E31E4F244DF9DF54DA3FFEF8DDE95AA255F12F85070AFD4F33474208CCD44
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e17edebc1c7743c28a32ff0c4cdb94b9.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65803U2jXW3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.433334200553191
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Mo0dJlecgrqjNdQIeXD:qgFq6g1af+Mo2Jlhuw2D
MD5:	2E383729493E4F3F26425E9E5893399A
SHA1:	CB7741FB934D75ED15EB62488461F5A25A915079
SHA-256:	E2EABF18769E596D866974A1F82FBA9B292DB09267EE025446FE4C2321AB7635
SHA-512:	DF514C2736A72086BB96E3A7E66E149158BF7728737E05ED716CF41A1ED7C51274C9848C20A2C74F85091E871A23AD74D959017281DFEE050D5F185C543B36BD
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8b00011a44b49ffa193e8b08af6fcf7.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65884AUdkF2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.408902217954221
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+O9dMS2UpElsjs1Ha:SbFuFyLVIg1BG+f+M+O9dMqE2josQu
MD5:	CB2DA7FE2114232AAD9ACB21CCEC5341
SHA1:	C34D56186006DD5DD14E0EE45D63D9657F81E442
SHA-256:	AE300B24B406F0C6DC0E7B90E8BD71706C8745779BB8EE29A88517ABFA075CA9
SHA-512:	FCD26FED2280A9EA285068F8A33CE3A4C5328EC4049A46418B7A9FDE5FFB6D7C13F851FD88B0370B06A463296247E3C1EBF0651930ACD14E1A0C0CB4199E5C48
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ec16ff08f044779b1ae8ab436abf763.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66339xUPfrL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3907455750565685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7z3XAwDdI8oSZjs16:SbFuFyLVIg1BG+f+M33Q4dI8NZjosQu
MD5:	1BC7BB874991BB63060A4650DE9A616D
SHA1:	51A469D6AB1E516830937C549FE5758B377777FB
SHA-256:	BDD5B8085D4C95328A77083551553328FB270F800777221E90F52918B41BD2FF
SHA-512:	52D4B4BB3B587337BAEBBA1FC1A37EDF49DFCB6FFE5AE438B16C4CC0A0D1BC4C202E21EE411A4722091EA501423AE5922E913E19A3BD75AD84272CB41A9DBDA4
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=176750cddcee43c18f1afb0debd9fef8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66340puAOyK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4142326674603085
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr3QSqRmeEsjs1Had9:SbFuFyLVIg1BG+f+MESqR9FjosQu
MD5:	EE4521625D055A33954892A2D4802856
SHA1:	4565AF40354DC74403DAA0D8A280AE6974FE9B8A
SHA-256:	67FF3639F4940798BF12D943DDC9F4A9B361A849683EB3E792301A63B5621C5C
SHA-512:	0F6F2321A89CD403E7CD339408B51BAFEA309D4E3A1FDF8AC401EC5EAEB8EE451B631F96A67AFA3D1A433F854B07FC5A0B7FA26F93F189476A8AC5BD1A208C21
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ac3d0551721f456f87dd3be74a4e4fa1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66351LPRL3M

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.400904901322708
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4YdRxdWhu5Xsjs2ALAQ:SbFuFyLVIg1BAf+M4qxUg8jNALyAZD
MD5:	1B5B07FF5BDC1F489995622FFD36D218
SHA1:	3C19F6104F7B3FBFC7360E2CE30B9741DAD91424
SHA-256:	E7A7CFE93F270BDDB56E9C387111096305817032C3BC4E0DF6916E6624E16A53
SHA-512:	69FE55F974A267F0685BB8697529D654D574E2AAD33DEFE73C76E93CADD0E95DA9E28792075338B6F9FFC6CCC598457EFAC9D498163DF932B153B126414C1F99
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27828339e8aa438aaa92a135b4c390d2.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66352IV0LzK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.458665849690377
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7xdGWYQAWYXWEOshTjs:SbFuFyLVIg1BAf+M/jYQbY5jNdQIeXD
MD5:	FFE4E5E719C631BDA397EC69D617B568
SHA1:	056FA1B005D5D75A5B54599FB914742355254ADE
SHA-256:	EBAB79490F2F89050C983B9C902EDAF868B1B46DE8462DED2D7265B472E78C39
SHA-512:	7598E8DFD4034933D3C35165B0A21EADCE8565644340177A76EDCA2912B0AD551F306A685EF8E765C0359BB01408EB0C9DF819D9EC2A820E3B4C50126A6F2586
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1428c9b7961a4440896da0bfa2b3add9.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66353uVMkbN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.38905831604609
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzgRh2VTVS4bg2jswK:SbFuFyLVIg1BG+f+MjZxE2jLkGq
MD5:	2D8F2DA2867323742611B4791C5F84F2
SHA1:	21671DEE4432F6F55B85E90DE1AEFDE7470F0E07
SHA-256:	8D2E2BF34FD31CCF6631A82238E70917FB2E1496990A7E81F4F5399032A157E3
SHA-512:	A6DFE7439AC18D0694E2F55EABB2286226CCF4608318324DBD8C870E2187D3539A76C0F6D0F123920CD333F432BC79A19AEB84D1F954A351EDCD0A3C13DA2352
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9f85a903dcd24d5e982607e807cc3d09.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:67058tM2rqK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.502199356649598
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm54UB8RrCHBXshTjsV:SbFuFyLVIg1BG+f+MF89oATjZcHcljX+
MD5:	BA0081B553657FD88B74D90D994F1D63
SHA1:	CFC3A25A3D53C6141DF4DE11AA9743F5DFDBDD66
SHA-256:	4144773AEED8AA702224F51BB35658DBFED33DC2BB2DDD83F53B42F188C2E8D7
SHA-512:	452CDA8EF4CC21228093AC3B11EEB40A4FB870FED11EA761F00D10F47DF7467EFB7E7BBEA4BFE87810F703FAB695B3923CA8A4218E044BD6BAFD939F50FA35F8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3f657bc21da04d0281e4ab8f43c11949.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67481k5aWig

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.485305806195747
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoxNR0kSQGBh2lsjsV:SbFuFyLVIg1BG+f+MoKT22jZcHcljX+
MD5:	54AC30AAAC98191C4C677CA227549817
SHA1:	BE19FCF96CA194A80D3CC02D118C52ED41C1BE27
SHA-256:	5A2138FECA450AF064CF71D77F6D04FA8F5E39302B83D655B28E79BBE767BB7E
SHA-512:	13F1A345DEEF919884D2D2A147CAA7B01578E203EEF0F9E0F0B1DFD09D0F684FD22A5804FC10CE4A64DD5C190E2CCBAA272BE2487497A2F5D1FA6A6A6D88C55B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b3524ee2761b4b11bba4b5af03787cdc.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:674823YKJvg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.416678258893528
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MQKBxAEVpcpAg2josQu:qgFq6g10+f+MQREVyDEQu
MD5:	82FDEC3FD3F8DAE947D5F93A17A264F4
SHA1:	C55C5F624E612E829C486BD725CE1608D850A701
SHA-256:	D8AE16E7E183B5615B37A267D7C59ACD27DC7B5FEFDD7F013B1D4F7DF448B810
SHA-512:	BEC41CA0285B2A7E209FA5D393D3604C44FFDB22B6F3930DD45A2C56B38854A090E20F7029D77B92783779D55C560F34284BFB683E94225BE1AE79439A05807F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a113f3d73d7347d998c3a5ec6859d749.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67483MZWDLg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.450638745754009
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4uG1REXBVFTcnvAglsi:SbFuFyLVIg1BAf+M4j0FFTjNALyAZD
MD5:	BA4B6C255D5321476746AD34E23863D8
SHA1:	C6B7A015AC1F1ED643F8EFD27B5D612D7CC44FFC
SHA-256:	B2C5F2F2F1F65A1E17F1CE8F37C3DDF07E45CBB004E38049C94B895CCF14E776
SHA-512:	245702F6E769FCA7CF460CBBF0F953C62991BEDBA5D562231A6A47D727B4E00FE621702C2B750467E3E6084C7B5CE4D6898C7BD4F86EF7B84BD0E49B35010B58
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2392f9bccd974cef94a2d82196f08593.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67571JEjXah

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.411049075828683
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4MzBp32GOWxs22jsV:SbFuFyLVIg1BG+f+M4Mz732tjLkGq
MD5:	1AB4641BAB4682E18141F559197427D8
SHA1:	2B38C096CFB4266DF17A0DB33B14AB507FA1B2CD
SHA-256:	7DAF1B1FA4E030194D3EAAF6417AE9F65616A110DCD92AEBDFD920CD9705B3F6
SHA-512:	6A4A2ACC205843A93022F32318136DEE5C57A9B6B8F0F3D222166C58301974883429AF4C2B3D33798766D7F6B1DB2113A7F7F8B2B3B419897AE0BE7D62AEA404
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=229e3d90bc0845f88a6f0be3812527ef.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:68488QCR8oA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.388691814910535
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6yE1Z7dUxOtTjosQu:qgFq6g10+f+MB4qotDQu
MD5:	9141035474E5C227747BD7307E9B9209
SHA1:	A33AC3C9A62B5D9919F4E124940ADB49CC51C5C8
SHA-256:	8D326A633743DF918EBF6A1397EF8A7EB4D7A337B321FF7741043B89497E01FC
SHA-512:	118695F838B1B6C3D5662988BDF0647E139C4056DF4B66114E70A98B795C3B084E413C68EF7D210FA81704C8CCD1A2709F768578B9E61E7060716C04D79452B6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=02d1ae5e4230481781b08dfffb3a7de2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:68677ms9fVg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.462441828278671
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MUXlH0RTdVYjNdQIeXD:qgFq6g1af+MZxdVa2D
MD5:	21F0432641B7CD0D8BAA6064DF5E056C
SHA1:	EB031756BC8F0D4E9FFDD2BA20D3FC139DA590E8
SHA-256:	15B700630DEB20BEB5F69E7B750DA9DA4F1D8E451ABE6B02C50E0FDCAFC9803D
SHA-512:	60E13D006D9E2F9E31ECFE8B49FEE696294D6C2B0595675E51100B559397F5182D15ED95488CCAA30765B50D8F877DBECF6063D05C5BBDC96565CC50FC81758A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5c599faeeba8462bab907b098b6bd9d3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69045jKzsTC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.435585620140264
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6FTqJS4LxZ6R8sjsV:SbFuFyLVIg1BG+f+M6p6hH+jZcHcljX+
MD5:	81652F2BE1B68035117C796BD311F4C1
SHA1:	5B440C6142C7269ED6A64E7A638A6D30FBCBB8F4
SHA-256:	DB73EEB35407C1C3833B9E2851D70B9C7BD0CE8CA14E4772C1BEB7AB1FB933A9
SHA-512:	8551CC7B79E8AAB97B8CCE4D801D035EECF40389A1A58DB9C62A1C618B6EDEE52017E2F8665C7EC3C96BA9C45397A2E774B5831D0BDA0898F77D63699F0EA1DD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=01964e8e8a7a43679e1e55e4da0e2203.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69047TZnp9C

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.451398505307504
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm96aEe+uPAXsjs1Ha7:SbFuFyLVIg1BG+f+MwZuY8josQu
MD5:	AD977A41F5302C200068D89E314C519A
SHA1:	AF1F825C0C5D3BD908A5AD3DC7C9DFE36C72A5DC
SHA-256:	06E3099959887153F31A9E3F217F224CD9C9B006499950E2132F0EC61EF3E868
SHA-512:	AF72CF0429C37EF41587D7D2A5EA36CE2AC28DCD3BB8E22830103CC4E30D2162C94C0B3441461252C25598ED97217DC30B698A941246B160519B5F8EA0BF6748
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=749fca2a6c9741889243a890f420f5d2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69048cUUeGA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417879466987668
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5dMwdGWQVXfBnhuqd:SbFuFyLVIg1BG+f+MtQFbTjosQu
MD5:	20146E7CD4BAFA991198D45A6DE928DD
SHA1:	F925604000360A534D45B8CCE258FAC6FE27220F
SHA-256:	0F147F1CAA22A17132BD7753295104DFF9DD59131E3533B2CE9214E6503CC6A5
SHA-512:	286D20FEBE1CD866F8359ACE14BE334E57EB9B422C044C14FA1CE940C53219C5DD221BB8865514A46BF5F186251DB4CC6729A34BE7712DA826968769B26B6DE8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3596fefec42344338c39355ed4288d9d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69055O7fgtA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.484397938285658
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpHqV4k4+sjsicWmIo:SbFuFyLVIg1BG+f+MlkUjZcHcljX+
MD5:	DD9375EE5CB33529F1781864C88C7E3F
SHA1:	D7185A92A28BBF5FF295E50DF8C90640B496F78C
SHA-256:	8EBF1F47AB12BF29E08969279134A56E1951E43C292C115F8FD8DF17BDCD36B8
SHA-512:	E71B5F284EEEC0E220E9D0C1D3C3724804807A2CE51D6FA18C6D862835A24BC7E464D3B701A79A5165BC3584BAA3681D366C07981B2D9E2E4FE896290657EC6F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cc5edc76af6643939399894fb13c3ebb.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69056Gl7ZfB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.417672727718282
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+MB2cRXXpGQ5XeDqS:SbFuFyLVIg1BG+f+M+MBVX8YX5jLkGq
MD5:	4609BF20CA5E323F1FF02E208443A3B4
SHA1:	9B9075D5FE98FEDD06C582B9F9811C038891EC8E
SHA-256:	CB1CE1DFF63E5B988B40A5EF7BFB5870B911BCE4A13EA0C0EEDB94D28E65B03D
SHA-512:	B66FF9DBCFF27E35D8DF7FB05431AE60134A52269F06A7D3BEF0CB02BF655844DF1CBB0E33E92456D3BC8F64ACB839696D606B9B160C45F7BC2F6ED6A16D4DC7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=429633d16939422bb0f3dc4b49728964.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:69130NFSwkC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.43024151289614
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmp1N4HfiMWBSDrqjs2Ax:SbFuFyLVIg1BAf+MFqMQqjNALyAZD
MD5:	C90B1FFB71910C39D55584E912539F70
SHA1:	D4E6086B9698831E57B2CB9416424C21C7D0CF78
SHA-256:	3D0EF1E14A5DE5775EAD1FF91BCB60CC2C2EF36FD9283E0AEBA55EBA76728B37
SHA-512:	45C311260290B8342A04D6EA606B61043662A6E7CA59E015EE8D0784B44304BDC0D942F7DDBD549D74AFE98D6DB724247F648984B4976C9DF52A7AD1D8B55AC0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c35204b613024a4b9164ca09103d7fa9.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69227rzYooA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.488246773482729
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzX2REKc3Dcs22js2BbM:SbFuFyLVIg1BAf+Mb2mLjNdQIeXD
MD5:	4F1BAC4CB4B3474D396E94379B7FEB01
SHA1:	6A5CC5F5A1C1CBB35C67C99BD1987209C634FCD2
SHA-256:	F943CAD21B010D93511B81A914AED7FD3A5525AE4A188D1805D973EB0CD2248D
SHA-512:	2EE5829709ADD2865F8DA3A9289789849D0118A8DF3B5185328BE68126A672CEFDD9C2E889EB1BCEA2B70F7BB67B9CDD0C2FFECC0285CAC0B39B2E06315E8A3E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9f4e8f9b82b3476d916a99c8c07e8d95.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70643QZxaP0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.450119942474218
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8BcH/IltDM/0ZjosQu:qgFq6g10+f+M8BcA/miQu
MD5:	07E7A93665061C6125DF6C3A7FEC26BF
SHA1:	F7059FC5A87F9013B6729EA404C89AF66E7274F6
SHA-256:	4EB4629BA54F12E42331A1A68469E0EA7820D4B6D42E23FBC83CA08FBAE94C68
SHA-512:	D40BD75BD3C33A9CF27369B117CCDA2581E535165CEDDEB40072E441348E060CE5FE53AF2C52B653D3A997142C11B9F440CAA522538F947B8EC9EAF88590ED85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d9bee6e514941a29f70cf0387cb822b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:7087551vTIn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496053660634838
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8DUMAOZjZcHcljX+:qgFq6g10+f+M8gHQmAu
MD5:	5EA0F0744392068FB8ED825C74928233
SHA1:	52CE11DE52E95D0926745431AE4BEF2EB79F8327
SHA-256:	D7C0682028AB66E6855899C7C41242983FF568AB3E0EE5C215C9AFC8B6B2D592
SHA-512:	3821BA76D7B59DC2B0A86EC8006D76125DDE92D7BD7560D0910F8162B541F8E2D455D023C6EB623B6DAC340E97901CBACAA0383476BE64FA2000AA6EF6D11FEC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f83afe4a427496ab0e29930db215caf.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70876V1OxPo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.375487046090039
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7zGFUE3Bx8QRqjs16:SbFuFyLVIg1BG+f+MUxx8Q8josQu
MD5:	178902C71148ECB76DBD45325449FF16
SHA1:	AF90D8CA440167C96E7FF5A6C9BF20FE218C8323
SHA-256:	BE22EFDE5CD5A95473C4BCD37C2DB718DA59A9EE5D5796720D2AEBBD5A25DE02
SHA-512:	F9D30B531C4882A419508F8323E6DF576AAFB4F234D4606EB152638E5A98A4CB286424DE8A79D65BC49C68BE361835C2D4CAC36FC18E863EADABBCA1F7A53781
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=140cea6195de4e7dbbdbf765ed79b49d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70877Zm6kvo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.431872688979165
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpLvcbSUxKHmqjs1Ha:SbFuFyLVIg1BG+f+MhvW3xnqjosQu
MD5:	C43F61EFA436E4C13F254A5564896F2E
SHA1:	070ED01C43EB46397CD54F0A873D60FBE4B839A9
SHA-256:	B57DB5DD5A901117C09B35553945286C0D2FD35A556D65278A01D93CD2118439
SHA-512:	10260244400FC4940537BD3C16FE08E0C7FDFC92C0DE6982A6C61E625138DD8127B56E42FA10D61726D5A1894A102FC9660A2287DA9AF0BD7C718BF7320E561B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c0031a4149a94741b92baeec56f83bf7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70883qtaYFn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.403418998321182
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M/uXER02F2jNALyAZD:qgFq6g1af+M/czIZD
MD5:	35F64ACC11DB46BA2BFB0EA54DCAB04F
SHA1:	4A1EE4AE15D9CE7F4B7B7B75C3B7E177ADF9D681
SHA-256:	BA05D478A5935D7FBB8D719F942142BA17C1462D57841BA3B026D788319352AE
SHA-512:	A46FBEE053D6A3B5EDFB1567A4EB3AF39DC37C44B076D624979473B2B36EA79A3E6FCD814A821F5C44FA16102BAA39793419E8F51B9D91F15280ED37B4C8D8C3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5f33b331e52a4788a58eddad75bdd728.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70890QJIuWn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.424293727281392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6/iIOGD6IJYTjswkT:SbFuFyLVIg1BG+f+M6ata6IKTjLkGq
MD5:	22C0BDFC3F415313351BBD5960E79CA5
SHA1:	3286146ED26979836BD4974F5E6D954ACA690E03
SHA-256:	D2D7624522FAED166EB724359356B3D2C282476CB0F8750A989097528424F1B3
SHA-512:	D774845843C6932005353D2522E73A929F1A40857082E840AD4E85D30DDCAFF2FC3AD3D83C45B1A91BA1994443CAED8756F461EB9AC355CD5C3CD06C4627F1E9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0a3d130f471846a496f7c8d589f5f115.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:70891XvmdQn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.49158298754586
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Mo7rdbceNrjNdQIeXD:qgFq6g1af+MoBcg92D
MD5:	04F2595282E4AF6DD710F41206BC8E1F
SHA1:	416B76A8628AF3A27F8F65E2F501C6AAD700B895
SHA-256:	18B19B1961DC3E43BCCF0E10B7EE83969FC751E621F4667DF46D11039EF0C832
SHA-512:	8920863AD7173EBBF848FA8146735B74FDF204A9FE169ED5840E044D15604BDDE31BBB31C88D7C5C34026BE18CD559ACFCAF74C50B786EAAB06F131B4BF7D494
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=183046dfca864e08b597fa669828b317.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71430F5vmB4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4856869563735025
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M49fRv+l52jZcHcljX+:qgFq6g10+f+M4dRm7YmAu
MD5:	24D5D1C232FE563093AFB405352C306E
SHA1:	096E2E1ED3CF688AF1AFE690EF4E0A1F5EB0043D
SHA-256:	DD49188A738BEADBBA97CFC37AC6C91083B77A39BF7F14F3BD8EEA0139B78B35
SHA-512:	744F30447F29C442559C7D4D9FE0BE302EDA88613B2E529A1223DA3E6C28052E24B4925345129EDB7232781AD8E90CAEBD45D3B286E4645DE99A2D523ECA0398
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2a6d7257cdaf4d0689566be66b9d5987.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:714347JfPE3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.363274954968441
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp1VTV1FJEua2lshgC:SbFuFyLVIg1BG+f+MNbLEuqjosQu
MD5:	7E7139AB86AFA768C01257B814D18BA6
SHA1:	B6CC74DE5AE594BB95B08397A253E0101E52937E
SHA-256:	7C5BE153DF98FC9E3BDC6B1FCD62393D48D4F4DAA54C69F89040F3D497DEC2C4
SHA-512:	0EA6A9E3B6E2D02581198ADC139FF8B96E47FB9F6F4A00C5A6B09F35A50E44EB763FFF936963F02D244BF3D05DD248F8216457922A7A45A658D63867B7C26E82
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ca90310409e94ecb9ea7613d138b81a9.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71436ZZvsR3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4305167714067295
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5Y3dBMc+ToH1iVUAc:SbFuFyLVIg1BG+f+Mm37MisUAv8josQu
MD5:	BD0F50662FB0CFD65540594E33E4443D
SHA1:	31DFC4D30CB21D3F16ACA201D3EA70542481E5BA
SHA-256:	9E0547F3A76406CFAF9A6743C3A11AC1A62F95CDC42FCA18B13B445FCB79010D
SHA-512:	E4D0F7F7564BFC43B2A54D22F394DA4F5D9C08DBE61C9BCC1CC9D0326B270372CFF568745080FF5B715559C309A02CA039DD35B464E789838D3B40514C787693
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=38e8b5c0738242b99016adb7c9601e26.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71437buacv2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.465454570108205
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6gygDBBtfE0jZcHcljX+:qgFq6g10+f+MNygdvEimAu
MD5:	34C0326FEB301D3908111073F063C024
SHA1:	E57B971CED5E87D21304742B47AA6A5B6BD5A6CE
SHA-256:	7CD249C47A50CDE4EF567103DCDD228E03ADDEF2BA377E1949C9B4C9EBAC8C2C
SHA-512:	56D2C4557607882DF236DF01ED1B30C0E1BE7F845D84EFC94A26B443BA863A9A01A2F729B94C4C41ABC1434D662A8350700AA89337C55F70F0581B3513134B5B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=02eb74ed00994fdf89ff8dabab51bf57.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:71444QiaB20

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.406134200966604
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/voHPvbKHbsvFrxsS:SbFuFyLVIg1BG+f+MCzb8jLkGq
MD5:	3A085FBEAE29E718A3B884AF1A7C7B96
SHA1:	0A4AD98BDC46FF12AC992815BE6D70BDB7DA7566
SHA-256:	9E7A6FC76E784CA44522D2FFCC29003CB123CDA0118634C0DC3005C658DE920D
SHA-512:	1699A2301E16C537775AE47E0A25F75261A5E6B971105E0EC9BB537E8F5CF4F3C54D120A11FD99C268D5664CD7D2C6729CDDE762866EB5D6CD5257A8F00405CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5ac6bbab969b47339a257b41e2b71fcb.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:71526lJggW4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4537578982875985
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuniSC1eSoF2js2ALAXA:SbFuFyLVIg1BAf+MuiYSTjNALyAZD
MD5:	EDBB691B9998F4D384172305BCB197DC
SHA1:	2C6D1F64DE39BCA236B1E5A3E3005C7311FFDD18
SHA-256:	AEAAC6DF0FA904C5F036FBE3FD8D70D940B1236D005D72523C056FB41120583B
SHA-512:	022F30E3DEC11C2B8F09F88F50FE3F337E51DBA47D08B700393262223D3D4353FF86F7541C4699049F6066BB2E0213FAC6AF5EE786B385411C47906A4C8E89D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dace668f1c2b4635ac0a9629f15b7638.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71614iRuCZ2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.403170560853662
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MsBWDJS1qSBATjNdQIeXD:qgFq6g1af+MsBWDc0So2D
MD5:	F5963AA721152193FE077E312621542A
SHA1:	9043DE2793F3AF1779B6BDAD78C622A6832A0C90
SHA-256:	719593C5E05F9F1154C77843572DE15DA5E8CA752CB6290D04299FAAF93FBA7F
SHA-512:	5C6F735067A9EB1830F2EC9EE54A23F717AD2E6A12D0DE19835F8D3D3C656DE9F1DDC3020B8D5CFA29B52CAC27B7A72F84490D45A67B8BD7A2EF97BD9618D1E1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fdb6ae57ef6b4677bdcaeefdfd27ce1e.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72450vdbZHd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.383456351798194
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5CXrnFedUjs22jshQ:SbFuFyLVIg1BG+f+M4XrFiUZ2jtWL0
MD5:	AEA1F756C9C1822DC0E5E01C2A590441
SHA1:	62C99E1ED3BD7C0BD09E55B868A212D27A20915E
SHA-256:	57AFA689FF732FAA366F2A74C83878FEDDCC1BF46222A01FC5D4AE9A2E7ED759
SHA-512:	10AFDE652CFD289F1C7703AB6076394D78EAD1188D213477503AE2915C86665FB1658B8B06B8A18E1EB774BE587CD133E24701B272A49831CD21DC5939AF7329
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c0217e70a7f48cc889d6cb1c38d5246.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:72451Eyi0Ld

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.49699368834175
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/jlUWDBUDAYSVvsje:SbFuFyLVIg1BG+f+M5KDAz0jZcHcljX+
MD5:	621EFE0631E238FF9434D7F3A67F8989
SHA1:	7B961CF78AF6139CD679C60FBBDC1FE262FB2310
SHA-256:	FF5835554B3441C699C8FEE4D15B57795AE5A9AE50DF6CD4791C1E797D7351A3
SHA-512:	8784C754CA95D616AAF7C44A22E11F882CFE2138079C0B5A48D5BD3A3AFB35B2F785104BFC05427E9858037169140F2E61ED773C3D4EAA8CE6CD30F3E6823B09
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=597ae4b021814f68b2db7fe7d83a6300.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:72452PauRJf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.412437483248226
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmymmODmcU9GahWvshJ:SbFuFyLVIg1BG+f+MyJ/6ATjosQu
MD5:	E1D12CBCA560BF699F3BEC35BB56FAC5
SHA1:	DA72EED68DF44B8C71454B02B31B8A52272642F7
SHA-256:	CEA2185675987DE2FF6CBEB4A1C735D0F5782AFA4BD5221422487B9C42ECDC59
SHA-512:	6461DF069660FF935630C78748C3D7C4FF2DDF12D13716F66DD5DDEC35F5508FB28A28D72463F969D4542DDCB658A1FE516F65B3188327E337CFEB25537DE0BD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8af8a1ac295f4bbe936eddec385e845f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:72453QcfGIe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.373609461401262
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyw4Z4RHJ61FsjshQJ:SbFuFyLVIg1BG+f+Myw6cHJKWjtWL0
MD5:	7465501DD1EED7ED51A5BE55A60A467C
SHA1:	FAF9C0AC7B6ADC0FD6CFF8860169AB8B50DB8538
SHA-256:	768CDA01A52F746DEE65A4AED7F9642F04CCEFD2B69DD382F43FCA06B6FB0365
SHA-512:	6165CACF329C71CA0582F688E40AB2518F7EC3CAFF7DDF8CD10A4A64F1BF71988C8D432FDCE0143DFC4DACA4B292CC03520606244CC7BFDD5DA3E0AB3278D4C4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8dcf6e4576a446a58792e05f3f68ff8b.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:72454hvvnzb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.444104906252785
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M5YQWQGdDRmErqjosQu:qgFq6g10+f+M59WlQC4Qu
MD5:	18B5105093A59A0CEAAAF3FFDBDBE794
SHA1:	AB63D94A32AEE85E9F3FE070326ADE26D088C42A
SHA-256:	E18B9DF7A5370A6BD6E9974F8C440EB67817F0978344CCAF2BAB3B348F214F7A
SHA-512:	5ED2FBE76D50A1042EF33D77D00291842FE8E884DC07B396AA5E0BA56DF043425AABF5DF6E7C202412961A556D4211C16532C6243E033F0C86D749B1116197A3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e68171f65b7c475c8f848d512cf756d7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:72462K69S3c

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.425475829015227
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/KTyV1cBzUEVnZAuxsi:SbFuFyLVIg1BAf+MgyTGLZRqjNALyAZD
MD5:	4B955388ED959D5E659277FE2411F32E
SHA1:	EA8FEC6FC23F726E56CC10B5F5E3BEE2FA04EDB1
SHA-256:	9D0BA49D6964935A0D9EF3FC111CD5F04BBF0CF607BE4C5078C6A95A77978B6A
SHA-512:	A7DB18304165D55266AC63886B0145110183C5EABB38875FCB9D02D5138D26F97E884C402187EA3D00130F3F901F50BBF0B005F8C2140352C7B3B69661F3E01F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=507b645dbb0b47c893c8e4ec4fa0d4c3.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72463QBPPXf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.464686212364142
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyMH6fRr3qjsjOdlJO:SbFuFyLVIg1BG+f+MyMHOIjNE
MD5:	1069056ABA6D6B700D9BCC3C5AC75C1F
SHA1:	E62125AE1C5B8C54EE70E0DE47877F14FD4A1A70
SHA-256:	D06170E037BFEC55559B1ACA48A2CD17CECF43A8F8328825E2DA9A5B8F37FC0E
SHA-512:	3E8E95ECFD0CF761A63FAF4A52454BE1A6B7608277FFBE191C7865E648A7E592B71448BCCC7B23B8FECE5A26CB96CB9879E18F2EEF83A50774782F443A9014AE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f5b37d80977403799144c41bcfd2b2d.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:72472oX4SNd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.43086028206164
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm93vHFTd2WAHRDc02z:SbFuFyLVIg1BG+f+M1Jd2lG022jbVC
MD5:	E04F892A24FC6A77479FACDD6AB3BAB0
SHA1:	57C9994EDAAC3D3B4B51B0893CE4F4133AF5115A
SHA-256:	2C9B9D08A18D51D680A471FA76BB1ACC11E8307DD0BABD04A3AAB356400EA593
SHA-512:	875B7F9E861BB93EFB46820913B14C8956F30EA6F58DC8A404693B5F803CFC83682E030C36DCB778CF6A9A24EAE3CCC671322786232239436F6A8E48FC8B7951
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7080de47bf1346f59335376bfbddd2f9.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:72473te5m2b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.432948866991874
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8DQg6DcbJBWATjLkGq:qgFq6g10+f+M8X4IJBWNT
MD5:	13636856D2CEC69451EB1989F71EF718
SHA1:	623CCB32754CEBBD50A32785BE59148667DEAE63
SHA-256:	B76D44082DD959B1879BAA46B9FD5BD619218F7907C059519328E34D8FD48AEA
SHA-512:	7F1F28CCF551C4C033343AF97C8237CB5E880B03C45CE44D6B8DCD701E5CF10D65CA55871F47AFECB92FF929E4CD05EC6DA8548679AF845E9987CBB5CF21F476
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f5cb787005c4cdf9185b04111b3bd7b.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:72577O9BHOd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.402862828312096
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M/JrLOvsMqjNdQIeXD:qgFq6g1af+M/422D
MD5:	D73F9D69A12AB8B0742E310FCF4A2C22
SHA1:	1ACD7E2B88CDA59DF6379C06A98CDF25A8A582BC
SHA-256:	37B3FB401D4061FAB4B133F1FD38E556A9C12AACD5465321A6DD82AC7ADE90A0
SHA-512:	C8C9593FB142C2A80A2359B6D54E99C630A134B838BD0B28646C74AF0CA5E6245EE194706C9E533F377C3136A9F4C0FA35A249E95CD25BEB6697B9E6583CB499
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e66a3f00d1c64d12a41bd82023d42d61.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72639Qy6XGe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.376468080784343
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7nDccRH0B0htFrsZ9:SbFuFyLVIg1BG+f+MvT0BsKZjoa
MD5:	F82EB3F8B525C05721956D9C8E947DFD
SHA1:	225B672520612970BAB7EA30120A7CFC75B7C44F
SHA-256:	5023628FB93648324CFBB073C9B1B3BC50D5D5270ED0E099D0B206ABF248BFE4
SHA-512:	6A14C8CA7C33B8BBE78051D08834084D2F7F752A0BFEE865F188539FE073496E99C854CCE7A83176D7140978A104C4752F504F60BE58CDC7C437C705F3B28E16
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=19d7f992d04f47da8d27920e85b5ac54.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:72668qMj2Jd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.386940511543158
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvjcStGXbDHDWdVwGM:SbFuFyLVIg1BG+f+MYStGLDHjjtWL0
MD5:	3067BD763B49B88994258E07518371EC
SHA1:	B7CE9D49D2514B2053C6540402BA2057E8D0B9E3
SHA-256:	26A8357BE26C06E99048CDDF5D0FBCB3D7411AEA6EE4EA2B894FB96DED114E04
SHA-512:	01758D5DB319BD3424DA830D0BBF3C82541497B0285ECAE5FBC9A13EFC1E85FA7339FFAAC869F1AF3146904952F6342F88E3EC72DC6F59DACA9C75B8691AE000
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e9795b202c4248c8a71fbf5f85eb5238.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:72675Qsuh1c

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402404739848199
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/w7DHoGBqfPqjs1Ha:SbFuFyLVIg1BG+f+MY7joXfPqjosQu
MD5:	C845C9C4844CBFFA8EE78E18268B7702
SHA1:	F6C4168B8708F0D48B555282414F1D1FDABC4B3B
SHA-256:	0DB132E52DFDA3795C9BDB2641596A6EBDFFE6621BABFB0F79C0E7E0DC2EFDBD
SHA-512:	0C8CD3EE0B6068285BC399E25E12C57FC80478CB694C0B0130D192AD500C3E34C50E1FADADF86EF6936D8174999CA9474C04A617F60935A64C9F6623E90E1AB2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=509fe0175bc1408db149f0d9b8d88439.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73261V5x77c

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.356704390342494
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpGrESplzvXsjs1Han:SbFuFyLVIg1BG+f+MsIS8joa
MD5:	D0B2E282F102480C9AFF9516A804DD54
SHA1:	7E06F9F25E5398D65F9BB577D29390564BD78F6C
SHA-256:	3D9324F0030B9A2CFEC78C497FC54CE286CBEBF7241C351AECF1869040296661
SHA-512:	A07FA72AEB30B1027D9537933EA42F9A09DD6AD91E81F34DA3C4FC0A978950159E6690CF445B31ED3ED28984DE31C0068ED9675B3F7752078E390BFE72CE4B69
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cb0c9a5022544ade8c8556d6da727d40.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:74252VI6Ne5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5011865451654
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MCEQ3dG9d2jZcHcljX+:qgFq6g10+f+MCnc9dYmAu
MD5:	D6994D1CEA0693BBBCDF4D3636120595
SHA1:	435281B74FCBCAC5B1C5842731BB6630279D0711
SHA-256:	0897B3EDFBCBD1738B64A6CF748444D4444E336375D2C8613BFC48D908852305
SHA-512:	98097AC45AE6BEF648FFB09AEBF6B375B7C475E6EBA1C8FBAA9BF70FD08EB2417FE68ABEC1FD6B8C94680EB23C469949AED9BF2EFA07E0168B00762F5A8126A2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=53753f3998c74d888aa89a4bc27450b2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74254l47Bc5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422615940375814
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoE8RwQvEVRvqjs1Ha:SbFuFyLVIg1BG+f+MoEDfAjosQu
MD5:	EED997CFA7A41AEED29BFB12AAF4562B
SHA1:	61966CB89C33550C0A4770289E1A800854FFEECC
SHA-256:	81C5873948797853264D08510EEAF0AD7FE3C62CAA1E9FF7A188DA329F9FFF1C
SHA-512:	E222A020E5D3E946DBB6D08D9331873B6DEED3D2E87D0F28654AB4330EBFB12A1E2B903CDE1114D1DA12BA9B44F43E1BF40AED76E8B39452240AF1FADEFEB50B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b2101f9bc3ba4c79b536e4a06c25ec64.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74255pfles7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.330833695550377
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrZsVT2E/pFQqATjsO:SbFuFyLVIg1BG+f+MZEBFUTjtWL0
MD5:	745EB7AB72614E7BADE86FC93E04CF89
SHA1:	838CFE53CB4B92ED08ACAF9347A351EB2A80D428
SHA-256:	BBD839D79EE7F6DDA5FC3EB553E8027DF6527A50230ED060C0E038A0762E101E
SHA-512:	78AFC3AF2A338BD2BA6490E56B89E0FB663AFF8F178078EB5DDE9FD4A57665D55C30DF9A58A7AE6E6DE0C42BA282654FF1509A664CE4C3634B00FE405B65C3C6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ae0cafdc0c0645a183aea9eb549275be.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74257O84y54

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.396389703626767
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4GA8TNcPda5qjs1Ha:SbFuFyLVIg1BG+f+M4GaPdfjosQu
MD5:	B021E918C33894CD9E63A073B1117F48
SHA1:	F39E433D7A4F4D7DDCCF8A75A631B82FD6F13D28
SHA-256:	F3B600D074EAB1B6C17FA19320E1BD3E4C7255ADE6C8965CDAA83D4F5CDE8B9A
SHA-512:	57FC9589379864B0788E4AA7C9AF0B190FD16D6A9ED1E15865E2E488751E8EB1BEDA8BAC99B4647F693B60036C274A7B07D362165EEAC7EB10BFE90E44DBD8FA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=223ea09fe11045ba94348a08eeec36f4.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74263W1anb5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.453757898287598
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M86s5K2hVv8jNALyAZD:qgFq6g1af+M8JnhV2IZD
MD5:	14EB5978CFB9D38033B688EED2FDAEDB
SHA1:	56642DBD1A11721021A067C1BD091E3D235B6003
SHA-256:	B7889D4C51AF789D0C37F8405AEF16A02A4A01F33D6E4FABA0FAAA6DD5498DCC
SHA-512:	EC0F0BBF5F104CA3B40DA4AA279BBD6A1DE0E9C06E9FCFE284F92A12B974A6A474F6989C09C49C3AB7FE02C7760110ECF7250E1BC1438E52A719CEE15C9849C4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=67e4c427a92b4cc0852f9bd25a2d7a8b.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74275wFKAS3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.35600284403899
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8GBTuNyUdEWEWUwsh:SbFuFyLVIg1BG+f+M8WaNyE/qZjtWL0
MD5:	3D39585AE151F06CFE20B91E4B371F0D
SHA1:	64BC5403DC6A0C38D999C9BC89A703A7B7A46D81
SHA-256:	580D6110B461A90C71291CDEB0D1859456CAD3EDF57E48D51DF8E11E2D0476AD
SHA-512:	58FF1F45809D7625290DB23AB8E4EA2B641E67FACDCDBBC0AA07B96EF3DB0470E305020841C8FCCCF88B20F5E09CF1FF2510457BC7A2A71CBF377C455CF67C85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6cd6e0e3428f4da18a35f717d7680cdb.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74276Zq2jk5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.430132509439519
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuodRazXGk1Ad2Rqja:SbFuFyLVIg1BG+f+MuoTaV1AdFjNE
MD5:	131B463559C9B6E3A0725E92FF0CB18F
SHA1:	DA7C259D16F67494AFECA48A6492FBAF5AFB8F99
SHA-256:	AC24E5295B16F821F65F54AABCF60F1B24CCA7D14BFBD3F80F9913B85872D345
SHA-512:	8B59DF4782475CA6B73D56A0EB1187C7AE4608BFE0911DE4D7B130949A6A2BAC5D358ACC84B8F5950BA19260327831F7903DB91A00B8C731B6285FCF57F6E03C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=db7b2b8438b840549d2d2ced9ae874f4.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:74277nUBK35

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.406974443270227
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5G2x52DTYtjshKJv4:SbFuFyLVIg1BG+f+MDx5aYtjbVC
MD5:	13E264D4D93F8BF5EF4E04CEF7618788
SHA1:	D63D5BC92B0585C38492C68AE44EBE15F475A144
SHA-256:	024917ED0EE4647C9F7EFF430178DA0D8C92AA277C1428AAB8B324A2C388B5BE
SHA-512:	1A84C86EFD5BC219DFBE0863DD5520855B021E1AA8D07FCFF384172E0FF627167B34012242F4FE878279571087EA7DA65C2BA99827F714A9F64AF6BF24A17587
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3d9e2d1e4f9c42f49902774cf656a16e.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:74278bI7w43

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.404784008578779
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7WDiXAYVcXXlsjswK:SbFuFyLVIg1BG+f+MqmVcXX2jLkGq
MD5:	0C7094603F2BD740F38042C33A9BCEED
SHA1:	B62EE2609C5A97434EFA18883BBE71B025F7D95D
SHA-256:	D4EB08F31E65D01AF14D1712D826E8C18BD34DDEA03B040CE52BCD014C148B09
SHA-512:	095E70E517FFDB1701FA041BE455D80FC444FC96BF1EC57C77EC8C4EDDB058FE991960D7E76273A2D8C137EEB0F2826F408CA813EF8CF6029BB6FA1F88BE3517
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=181f637fe2e34149a864e3e5709b17f0.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:742799vJjo4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.377607067473503
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvInY5ADCVAQqGQFswsA:SbFuFyLVIg1BAf+MLqGpjNdQIeXD
MD5:	CE04CE771EE685ED18608AF70B65528D
SHA1:	F115B7D8376A8CD3F26106DC34000586CE8B56FC
SHA-256:	57CD7A0550880A1061C509C660900FB5401B4A00B5478FA31DE79317518FF068
SHA-512:	61768097BA1D1AE4B20D3B420ECEDC7857313146B64355D0B86C72D080BF0FFFAC94A84F4EC7D61B0FBA1FF08E8BB321BCC4C623C92EDD21B806A6C1DC413DC5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ebadd43f8ece4eef8e0e1d251e33dc50.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74318VuBQw7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.353460062024572
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmusNCggRvxPHhuqjs4:SbFuFyLVIg1BG+f+MussPHZjoa
MD5:	E016244673D30F7A6256CA965A634A45
SHA1:	B553FB97E3710337AF998B81DF9EFD5BB0D98391
SHA-256:	AF479D198A01A0DF63F9903844E392F7DD3D0D895DC80D50B9E9B66DD1FA7A86
SHA-512:	92D845DDEFD83FA773260C0626967A7AC1AF6272E125FF118D9C8E176AA8DE68AC25D4DFC683E9AAB73424F9E4BCE1F9E5E7514D9AD4FCD77F108AE92DC30638
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=da1301b756094944adc53db5c6e70af4.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:77394GF4wzR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.342979540763955
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+wfFMLX0bHQn0jshQ:SbFuFyLVIg1BG+f+M+wfFuWQ0jtWL0
MD5:	D39A55BE6A852028D1CB3589AF574A0E
SHA1:	FF5B24840D53C414A35CC1A8C0AA6869344DE9A6
SHA-256:	C13A32F2A1362ED41E4589E966ECD65211A44AB45B43A443561857FF8F7026FE
SHA-512:	AD7A644083A3690B324927728AF9E918F1602CC76FBD49780FE158724A5EBD47266F7B74267E31D785CE639CB82261EFEB174CF340520594D241A895DB572963
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4d16665510544612b154cfb5b1afcc8d.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:77395WGFnHT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.453159510025381
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyZcBL4dwcXcSPH5qd:SbFuFyLVIg1BG+f+MyZcKwc3PH0josQu
MD5:	79A962E8F1DDC1699F4ED6B5F75AB1F1
SHA1:	337D1D7BEEC0D4E3E14C9E43D7AB6C9B803C844B
SHA-256:	2A56AF7815DA7B88810AC0EA6D3F78FA1F2E9FE5BE2DBF5595CB63EB372C25A8
SHA-512:	E337BD856101D7F2C5357D2349316137B275F4C6ED02AC5D21D0E92BF1AF3880283B56E5BCF827F50DB3618948042BF404F3D995A0C893FA5D4B294BBB37EABC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=858ab9417f2a48efb65809599c1612a6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:773975GQvnS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.450887832774577
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv7igbXcQv8jsjOdlE:SbFuFyLVIg1BG+f+Mzigbc68jNE
MD5:	F4B591FA31CE2131FC7F18B6E89AA894
SHA1:	A56BF73A555FEC6EAF1EC10CC3D71A65D6F087C4
SHA-256:	B908FC74E3F9450119133E409AE203F1F0107F4A1B8BD9AD52C10EFDA48FFFBE
SHA-512:	C51D9074F0B805FCE3FAB28390876E87E60F19D831E2981DD56236A28EE6D5AA341C8476EA48FC0CF3E8C818158ABF04E44CE3C885B24D2C084394C2103FED0F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e688ffa653104234a776eb8878022895.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:77398CMPpbQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.477871842453021
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyqVCgAHEMqjsicWmt:SbFuFyLVIg1BG+f+MyqV1ZjZcHcljX+
MD5:	FD098CDD2C7E6D35CFC7CB59AD4A5576
SHA1:	A68AE7D4A9DAFADFC64A937849735C4338C2ACAA
SHA-256:	EB53FB8C817C6B7B6EC5757A9666AC8D9273494EB90A9B1D79A15AC36CC9FCDD
SHA-512:	DB3AB77C53D8300E36FE6A5AC058D7529D7857FE48111F35C1402259744D38D4DCC8B8CF141C1E5E0BB63DD7D6D10EA08840E2058A53E8734B180B3DD649F27D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=80e07a6813c54757a2d82632b1e32744.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77399QrQ6yR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.42239522111769
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu/TESj3G0ck2c7MxN:SbFuFyLVIg1BG+f+MufS0n2bqjbVC
MD5:	B8551C6ECD2E0986C53DE1E7D246A319
SHA1:	F02782EB80089F19C7C652426A884BA8B228ACFD
SHA-256:	BB049F41B57B4A3C277236DD81F7563F44BC7D8CC41DD36B83D46A48E1545796
SHA-512:	74D27FD88CBAD90261D5E657DB723A79B78D31D5811D1CF802E8B62B00EC9759CFDD305A3C84CF5F5165B66312946486CDA8BAC85B6413B7B4AD406147CCE7F8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4916217d16e4b5397bc7d4b89d7459a.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:77400s6uamP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.405178063687713
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+m6uweOQ2QQvAglsd:SbFuFyLVIg1BG+f+M+jjQWvATjosQu
MD5:	1FDD158BB65A720EA4C15499D1C145EA
SHA1:	0DA215A859443DC744D29E42ED26271FC68C9D44
SHA-256:	712FE2D5D620A741FB142BC6B437AA6E107C9822B03A39B0D860BB6ED7A7B879
SHA-512:	0E3DFD811DEE071904D6F37455DE663D431E3FF407F704ED24CBE7D8E7642A5F6FF44C59164DD4B8DECEAC3575BCFCE4D508C34EB87103C2D8A6DD192E34A93A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=44ba0edb0ec744eea18f750924979f32.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77401rAhndR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.460715308312942
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuLXYUtQgvSHY+sjsV:SbFuFyLVIg1BG+f+MuL5jZcHcljX+
MD5:	40332154F92B57A47D458A88D2C3E02A
SHA1:	E6CC5BC5B34C938B39CE540CBCE9ABC87D199BDA
SHA-256:	F8453FA63A6397A0123D36F4EB222A8B8D5AB3E2D63246CDF039D48A74594D57
SHA-512:	80DA2091601CA30FE7D36C06B20B931830A833F07707F94BF68EA2B0A0F9DB37FEE3BB852897B703D7C32CD9FAD0464CFB1DB7EBBAC823B4D6C19F5E5CB0E912
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4012ece611145fdaf7c46d30da8217b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77402b2O05Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.366635855652473
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz3dDMCnesMqjs1Han:SbFuFyLVIg1BG+f+MbOyeRqjoa
MD5:	D04A6F0C361F33D5BA674162B2927233
SHA1:	856CFD5184D2F297240D41EAC48B251B9D6B1EDA
SHA-256:	D8D081A2B0D2C6D43AA60323F0C78E9C4726ED2B6B1ACFC46190914F10561D10
SHA-512:	67DBCF80D5A3D7EC78A71BCE12A7A6403F8C74EA3A1DB586FC386725C19F918B0E4E25BA9702FC2053303AA100775F3E4D08F26DE76DC6DFF74E543A2533E08D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9b705014b8324883afee381e88fc0719.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:77403GYQ1OP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.354095561104237
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoGIWHmG1Bcv3JlAvE:SbFuFyLVIg1BG+f+MoJXl3hTjosQu
MD5:	899F02A0B620E9C067BCC0904C3FA194
SHA1:	277437BCFBC6548DAE590571F74F0CE32866EEA7
SHA-256:	983806BB495E92AD0F522416A0F5C2CD7CA500A454150DB1D8CB65E23EED6706
SHA-512:	DEF4DC022055E3490C82170D8A0749E8985DD06D8498FCB022AF7EC86A94E9CAB1B6DA4D99EEAF0B3484D973B3153262FA33822BC514E18712FED9B9E373652F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bce3033b199c46d9aed4ccda27abc91e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77404RfUkyQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.352864064965677
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDiXAtxTsEgrqjshQ:SbFuFyLVIg1BG+f+MoDPtBs2jtWL0
MD5:	6A8D697739C9BA5F30E795A1D2235BF8
SHA1:	F94A41327D04D2A450B3CF2676D5A606D99945C8
SHA-256:	33EEB3450702A2B054E7CA0D89A1051B72B7454A313EC73C53D77C773E4C27FD
SHA-512:	83F25C0820371A7E8C2EB953E61AB70EE95F6201EF960B9100C5B4E72F42541A7F5974E9D3D70C08FCA46205445C70F9CE110EDD35A147F158F6A7D41D80706E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bf1e02e646854d8aae683631b7b8938f.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:77411JafUyQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.446016693975977
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm56X3VTRAqXsjs2ALAXA:SbFuFyLVIg1BAf+My3VRH8jNALyAZD
MD5:	E2EBB5A4A8E24C3A9B09F69F373C61C6
SHA1:	B17D550797F343DA204443AAF2FD0D23DA815AA8
SHA-256:	F0FDB6BB37DD6BF82AD19B8C8805FCAC7B51C0598AC4546259953B87DF12C3E4
SHA-512:	D9063644B7964234C67EE2197129AD637DB1BB6E8B3A2C3769FDA5EC07AE523D9077C213BC88544E1E894BB223E974EAD91394D4CF2FC3341772882BB49DD61D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=36122a3ff7c842f0b61210699fd43bd3.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77412JNcKDS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.417927575928448
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9HT7UaEBVhgrqjsjF:SbFuFyLVIg1BG+f+Mh7eBLuqjNE
MD5:	93E6505B54D226D6C7616A389338CC7E
SHA1:	AF056D8A43CF504ADD1EFE16A6C3E031600C84AC
SHA-256:	0B49FFB4E5C65A1F3D1EF5A18DB563FEA7E67403C7923D183AE5DFD2E0A23DCF
SHA-512:	1FC89CCA9681FDC98C26754F55B5457AEE24752BE998B7A4F57D29D9E608CA2032F9F313F94B413DB87E6AE5C1B62D2492303D04379BD151CF0189FF83BA8FD6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7220425c663c4138ac72b36ee5804a3e.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:77413BlzSmP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.377423118928063
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvZX8AGANBD2TRAYgz:SbFuFyLVIg1BG+f+MBX8NOBDsQ2jbVC
MD5:	3A68C52E8DA3BBDF6D8BFFDBD5C8DA0A
SHA1:	7094B5DBCBFD75FCE55CD3C04CC429B5E04F2966
SHA-256:	119C954ABBA7D409DF1BDE305769A7A2111CEC56E9C985702CBD9FDA78502AB7
SHA-512:	2AAABF4A9CDB392228AC7F3D5C6981008145BC213E5FAD62EE126CA565D6F6AF7DA6C0C817CF79B75381B715813A2A41A1663BD64AC19DCAADE42752D5822F42
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e04820bd5ec747e9bbe00dc1e6dae4f9.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:77414MA7fYQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.355019131515886
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5nLy/UEMnWUGfRqj+:SbFuFyLVIg1BG+f+M5G1MCf8jLkGq
MD5:	9DAA911ACE77934A35E5554725D261B9
SHA1:	2A13E1203B7F52A4D314AD468FCFC583E999D348
SHA-256:	EA36F4C51B6145822F6BF61A35847A278E12366478753FBF930B270D0BC823B2
SHA-512:	73DE36018A6766225FAC5502B90864EBBCD4FFE87C13B6650B642EF15E5DB235649665EE58D5D58187D862B157022DA6B98CAA45625AE1ECD9653B7E2491FCC5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=32906b36baae4061a95d965331393044.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:77415G6r8NP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.456663245582587
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M+gBUbrGlkZjNdQIeXD:qgFq6g1af+MfB5lkn2D
MD5:	7E14F7791BFA58888AAAC34AFCFF62CA
SHA1:	29D249C8505395B0DEB0B75FC4C17B35E4B2B8D0
SHA-256:	183E7DB0787E8B197563A8CF853EF6883ADF76E94496874560EBC2B9D2917D58
SHA-512:	5F4D43FFCE5017A078A926B3E235F0FB3B4DC07D88F7A806D91DCF2D0113467B34545C270B1EEB762A582A05F98823429DAC2ACBBDCA0C94D6D5F2CEFC31784F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48fd327ddd044184bbd15e0688fc8f62.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77416MF5VdT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.325929540766
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDMW8uzGe1Mqjs1Ha:SbFuFyLVIg1BG+f+MoDbTGe1Mqjoa
MD5:	328F0345A167D5A8015D541715046422
SHA1:	D9169489DE208AD42BDDE44D08B6FEA5F2D4B639
SHA-256:	E378895B2298B815F85E71BB238849BE52F09CC62D3921A77C998D99E714A08C
SHA-512:	AD43DA480D1ECF84305A8698D118A61B359A50899BB7924105B52BE07E4751D43DCC9FD550DC480CA99D04632C0FA76398245C8174A1AEFB168B38F7BB94C9B5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bf5c3b1a1a0c4fcc87ef1d48ac4cfb0e.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:79199GUqGwW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.364033562147113
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvHQVHrGEBeZiEn0MQ:SbFuFyLVIg1BG+f+MUrGEBO5qjtWL0
MD5:	5B6376C80C71FDB0BF5E06EE97B59B42
SHA1:	D70ACB7348FD750B8B8F6FB889E108EFDF2A7F19
SHA-256:	FB67888CBEE0472F811231A6DCF988E8BAA744FE340EB4ACAC0603209676DD38
SHA-512:	4B012BA9C5C022279DBCC99B6CB546FC09C3023A73FE3C4BBB71ABB8B3F816ED6ABBDEE8365E34CC270D9B097378175FA22ABCD303E88AEA2C366817542E1343
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e570402382be47c18d4615f10511a925.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:7920059GfnU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.446753440000691
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8E/RrJjJ1XFBKvXsd:SbFuFyLVIg1BG+f+M8iRrJtMv8josQu
MD5:	E5386D47CE11D2D5B5AFA6080534E7C5
SHA1:	D653F241D97B18839FA24C2816C9293A7CB9CF9C
SHA-256:	83F9094D57CD1D9DD8F4305E51E5F6D8FC8512BC4E85DC8F162D4933A661135D
SHA-512:	E9A5EE667150EF7F7254F10DBA6FBB948AC6EB9E758333C8BAC77C48BA99464153BB838F712B1105EE001BD9B6298C328914BF80B602BA454C6F8E8F10F4B652
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6a1ed4fdf0544c6597515462208f28dc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79201zAkm6X

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.418034462902079
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+1EE8ERNhnowXsjsx:SbFuFyLVIg1BG+f+M+1XX1h8jNE
MD5:	698F998B26DE337FFD6DE4BFCFA9F9C6
SHA1:	83521C5763917491B383619D60D921D3DF92AC1F
SHA-256:	2EC08BCD55B13DF08D7D3614E1EF42A4FA6147F0BF8D0E1C0CC97DCE1C7EDE2D
SHA-512:	2EF9711DF38A0BDCCDDD1505E2A57C56B2AADB304C4D539E633E9D2619AD1DFB9DEE20764250C3F51989D195326FF1522A5828C28169EC9462F18239E026EE85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4e67aa004a2a48239996becbfd01346b.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:79202JhG8fV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.478738336022764
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MQgyUBbhg2jZcHcljX+:qgFq6g10+f+MQgyUXRmAu
MD5:	EECD348BBDD0E91D23CFC88240048FA4
SHA1:	48140DE6FAC3BF31F670566351748BB4E839FE86
SHA-256:	92688D09D0C89BBA74BA93848796C1429C55E2052CE390BD6E0EB42F6447253B
SHA-512:	3A3D7C8415306A0E47222C19C2CE7C62AE4025068F75676F88F2D2B52A843DD5360897A811BAC9B4C4BA03555CA7C3A70B5DE1EBC5D0E0C4B3BF404255A3A610
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5f67dff43b64404abfdc7da91d562bdb.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79206FXankV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.400096835786241
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm52EzpRQGpZHRp0ws4:SbFuFyLVIg1BG+f+MZz/QIxaZjbVC
MD5:	D47E010F6F26CDD256A94F6F110D3EFA
SHA1:	BC0DD0F137306217CF85B7090F8CE72F9F5A211D
SHA-256:	DEFAF9BA7642C2A40912660AA7FCEBD2CFEB516EACD3B9B4138E80409B3DF6B8
SHA-512:	59411217E652EC72B2E72560AB935C06F8C482FD34DFA1ED4874158CA33F0A6AABB6094C5048E5125B3017C282C2C5DFBD9E89C0BE25C32BEAAAF077913D3B7F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=324eaa4326b845e489d7ae7c6b5a0ab1.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:79207AbTZWV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.440849938012613
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M9EHRoOGXevRqjosQu:qgFq6g10+f+M9EH7aQu
MD5:	BE71A65A8DE0AF0EFF33C146A638C436
SHA1:	F1559284DA9D24C5C88064692153553309FED0A3
SHA-256:	8234D8CAACFA61001DB5EB0F103C863A734AC8A728B557A52E7E8907F85D4C88
SHA-512:	4E7F8060BD842271E96544D90A500BDF3E5B6A346A8C56026B0C2E8B28399C4A4FCC7C5317504CB52EBA46CD3EE29F2314E4046E83500805890D1393E5009F59
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=76f5c7af3e5b4bcf855a2510e07fc289.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79208gdZKzY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.520835108786461
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M66EWDooRN8jZcHcljX+:qgFq6g10+f+MB+mAu
MD5:	31722F53B82CC89A21A1FE2DC974B414
SHA1:	1D54247244A6E95E118EABD96D11E05CF3BD39E8
SHA-256:	72E16F683686B14E983EF73BBC387D72A9916E860F2E82BDD29BE6E9D9CF9AD3
SHA-512:	8811C2D24152388EB2B6C6B6E902BC0EB417FC1875A78DE174B3F2D4D8362DDF105D84B88C0E358385782345DD657F4C08630789BF5F65DAE5FB6A862D021A58
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=04126c6385054d8988fffe12b3679402.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79209TyPNpW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.374620440695962
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrd1BVaY0Mxsjs1Ha7:SbFuFyLVIg1BG+f+MBLVx0MqjosQu
MD5:	1B414174FA078BAA9573F0676F7A2FEF
SHA1:	933DB71EC5A5EEDE0466F6159811958870094CDD
SHA-256:	276C1D33843FAB226D7CE8C766F31488A3FE9E98A4E0C53B59B9B70C520FE75C
SHA-512:	F61142BF318EEE8DC8C5D142A7DC3ADE423E32262A2DBF63E096A1F2AFFCED4FC64CB239A455F79402EF7C5CF66F13C9F62EFCE8000FD499F37A8934F4E9CB10
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a6dd33cea7d44de3bd1f9123924b42d1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79215bEthTV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.363502362838018
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsISQISUBw1ER7G6x2:SbFuFyLVIg1BG+f+MsISQIBw1ER7GSs/
MD5:	036B6A717C9F6A1CF98E2FEF1C3B7032
SHA1:	8A527458BC9595BBD359F116198DF82B1B66C1DE
SHA-256:	0640B4B1052D3E2ADC951DC069F8103818745AE16DB235E242718E75A4EB1C27
SHA-512:	716A0297CEC37231653703D39C3E05D991BF14BB7E7F386CF68DDE52216412DE8CDF2F93339CE2E60A7D68D9A412A1FDAF598C6ABE1BEB23A273EE8AA761B18B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f145b56a715143dfa448c9c34101ffd2.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79216Kk1oaW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4183963651198805
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmztQfQEUXUkHo0js2ALl:SbFuFyLVIg1BAf+MhUrYI0jNALyAZD
MD5:	FA47677EF0A2A3B28DDC185A500115CB
SHA1:	39CFF56F09A01F7FDD85E97145EC09D02D551CCE
SHA-256:	32AFA8B170A929AA9BB8B62DC688E3A75CE6DA6EF5C7C3D79F5BD0F42F236C78
SHA-512:	8FED18E69470413698380DE5AB7C1559B50878380ACAAECD7156A7860C648941BB190FB0B7BF6CB0B0A06309DF029FD1E8F790FAA99BC9B8E7B06AA59DD21CF7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9e8ff259da03435bb88518121b3f3ead.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79217LC8FQX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.435896919151725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8D+cuEzPYlsjsjOdy:SbFuFyLVIg1BG+f+M8D+cg2jNE
MD5:	5D1ADA6C0331D24FF856078FC57D694A
SHA1:	9AC116B7461510284A4350BBB1FC3567DA58C109
SHA-256:	CF03536671F0D0B3BA2B57994D841D751EB79F0584701FE8CF8A31A4FD117DA9
SHA-512:	E22E085B558B1610EF9D5C0A02123D6255F24196E16BDEAD3394966B025AD8B3BAD35FF5417E6B3AB940D4D6127E15326D2EF55DE9D082DACFCDD2B34B23B53D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6fdb3955c56144e78a4b680585fd600a.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:792186YG8tY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.448468284375966
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm46MveMddkBGNlsjs1:SbFuFyLVIg1BG+f+M46EfKjbVC
MD5:	A2F833691A8E40FD2023F612D2AB9110
SHA1:	0E1FE49867C1C327FF67BBC3627067234545DC76
SHA-256:	FF169BCFC8D8287D18E5117E760F90263DA0619ABC51CC0329325BD2B38FF59F
SHA-512:	4709D8DD625D711BEF6727AB7A527089063E57B00E00B843B6A6370EB75891EA541D473D3DEE83661A25F37F6A6F47A351C9FBD37812125162EB9E8EF457BB1E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=249296570d1b435388dc4df177d6c4c2.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:79219X8tWNX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.408212102435495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsZdU/cvKxUUVEO2j+:SbFuFyLVIg1BG+f+MskcNRjLkGq
MD5:	EF1CA2BF06562F543ED1699016BA0E74
SHA1:	5884DF7D90C8DDD449BB9E44FC45BDAF9515B938
SHA-256:	FBBDD370DBE8D743D3A0A01AAE02CC99D999C9F2AE03CB4784D79D9F8D3CF9BE
SHA-512:	E339039BBEC349186D417AE54993AA338AF55928CC152803B7F6A40E804CF291C59904401728774B782C5E4DDDF25C75C270C88D5FF9B8A0A6AD3CC98FEC7721
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f4c7100b38cf4ffd9c6c6c4211018438.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:79220hVgNhU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.450563925782571
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7XnfczkRAg2js2BbQIa:SbFuFyLVIg1BAf+Mb0zkRp2jNdQIeXD
MD5:	6D2D901F801AC61684F25430DBA8F90B
SHA1:	066AE491539604ED1A303E34C6BF995B746253B1
SHA-256:	56E63E0A3C9C968A4FFF90CE2C32AFEF387E3AC39B365E33D78E9C2B6C737A6A
SHA-512:	C76C8B90EF6190BFA0CEBE4C805809683425FD5B419A028F8DF2AE2DBEEB2B11DC4CD41A37C527E93A326ACF77DF0CFB89073BE4D7DF498F36E97C9224EEB22D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1eee917656ef484d9883b4dc9bf4ebde.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:792428NQ7CU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.389949992988804
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7ibGJT/EUDqXsjs16:SbFuFyLVIg1BG+f+Mz/28joa
MD5:	63615A64432D21944575A7819EB9981A
SHA1:	82D861E033C5B71DAD44109464C4C3F56362673F
SHA-256:	4883DE97F17FFFE34317913F102E28158267FEED8A12C1336DAF5C06E460AD0D
SHA-512:	B06B8B880920C6CB99B4DB714D7C1D8C98889D0D0F5B6C21D4DDC0AF2EEBE743557E1AF23CF1FD56D27A855CFC841030D49B2DF4000AC6672B934F15E86D8D55
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=19e6486562cc41ca86698706b0a2afd3.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:79273fIvm3U

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402606884678954
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm433wR7SE5u1kvAuxU:SbFuFyLVIg1BG+f+M4HwR7SyouqjosQu
MD5:	27D27BB64C64477C15F156C95B401191
SHA1:	B26713F96731079D8CCDE724838334F9223617AD
SHA-256:	90FFC2453CCB4963B72D1714D4F1F6C25694F127613972C8B6F98AF99B54F009
SHA-512:	93E2810BE6788AC7DD5380DCB1A1B6A20FCC2D993BF189AF1CAC8F57118EFABA5B915E938E5FFD1E6CBCC86B76172946A21A1ED2B6D49765ECE6A4C254288DB8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=244e7b3e54d84d929cae9c6cbc48a5ba.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:792894MF9QU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.32223414432837
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDVWdnrdEWkh+sjsO:SbFuFyLVIg1BG+f+MocxrGWkjtWL0
MD5:	D9838459B82E9EF85FD49DBA41A40D47
SHA1:	5EFB8D9281F600844F7E503F1AC0FB5BE7409B92
SHA-256:	4E40043AA5E3A97113023F39C2E017084E1FE5CA5DD95381B9ED1632B1ABBB24
SHA-512:	A64E30E41501C97067799C142D2175D0A26A6F6F0FA782E1A862762532C96B42FA93C36A2B8A7A4A1491B8FC61FB4ADD6EB64A4312DFE6253FF88EA0315719FF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8d04a6183424d2a89b924591ea68a32.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79380Ghk5hU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.388940597609821
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBFk8gYHTH/6rqjsc:SbFuFyLVIg1BG+f+MoDf1josQu
MD5:	9CFB51F208174D74DF8E931539036034
SHA1:	0A8989C6610AB17446C180393FF7C06085AFB16A
SHA-256:	0862C9465179CF54C6AB4EE3D4717E00D136E6D5015FC79D8F605EE0DF5C12C8
SHA-512:	14E828B9F0CB3DB1C95A0529898780D0543EA7FB0FA44D572001F678C803FE0FC038A9292E480A546AB4D0D51B70A6949F8C811F14A9FDCB84D464355887F25D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8fc0c50d0344561b6b680570061b5c6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79468AnVWgY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.363502362838017
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5J2G4mnxGxSglsjsO:SbFuFyLVIg1BG+f+MB4STjtWL0
MD5:	442E2370C6231935125553E12E535346
SHA1:	4A5FD9568BE738233F6FC228D20FC9B393965449
SHA-256:	98DA1ABFF3C0C41AF746663F44F43D5A1F457DD93D0FE3EEA38E77F3B0F06198
SHA-512:	5744A5EBB7B06A381E4D9160D9953F88203EEB67D1B262DC3A73C7CDD5AC979045480FF326BED27C8A6B26757A3A9A71EEF0928FBCD19B44B18988A43B359635
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=37af0209c76d470e8cdd69184ce79551.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79520mxOQIU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.444586951297956
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyGWFOYq0huqjsjOdy:SbFuFyLVIg1BG+f+MyGWgYruqjNE
MD5:	5B880060970C9C48C5CF524A65E8781B
SHA1:	08A9D10FEA0E81E7F283FD06B8611D5BFA90D70C
SHA-256:	02353C31B20ACE86F7F12C8A62D1F257CCB8FC1EC3163121CC783169BC0FBCE2
SHA-512:	FC7FAF04B121FD8083B88521879045DEF4BF86CE4A8E10E9CCD7D681EA6BFAE2AD6050FE9B3DB50363D2943AE4FE64C08FADDAA13B2A0BC5336E3EE118590739
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8193603c4789438d93d6ff5e65437789.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:795246cqVsW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.454516515760175
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+McqklVjdbjZcHcljX+:qgFq6g10+f+Mal1LmAu
MD5:	A70DB1A7B558CB5C13684A9F52893CD8
SHA1:	8D1596AFCA691CCFAAFD982A27E894E6E6A0EE20
SHA-256:	F6FC08B6851C35BA4F33727A3B0B56166DFC84BC511BCE73DE1727A2D5EEA47B
SHA-512:	AEFE27051508F84E75F8A98048770FAF4973833510A18DEE883A79722F1AD5B4F41721E6493ECCD4349B8DFE1F7033B0DF36C8B421C09FB784F2455EFBE7D944
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cbc17611c2d24d12a6b109780c052eec.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:80360V6IAPW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.42518221659145
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsHacGScX1SPGjTjs1:SbFuFyLVIg1BG+f+MsHXGvFSPGHjbVC
MD5:	780E49FC69DBFDBD6CD736EA164AAE21
SHA1:	D796ED85933A69697389E5A13685ED61AF25C200
SHA-256:	81EDDD2C15654BD8669B4FB0210950699E1357ACB2C022089D79C37819350F0F
SHA-512:	13BE79EFF9060C014DC09CF5A9BFBF545F470E5543B833781D39B4E4EE4A3AAE5B698C2BD40D0DDDD77039C41D0741970C86A72CBA2843C36277C2551F6BB0A8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fbb28ee395604393a451be585fb600c7.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:80446sa5DHW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.401540620424482
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpPEnMBhdFRN2js1Ha:SbFuFyLVIg1BG+f+M6AhdF6joa
MD5:	54FFEDE473A5F75B9C198E9C47385AD0
SHA1:	743F82C32B9EAAF53F56450B8DB94678A3860057
SHA-256:	33AC1AF7719D75976A96AA97BEF554DF523142D7350474BA61A1C258DAC7C559
SHA-512:	13EC6DF9F6E83477A8D33BC4CACC69870B02F79F70F8EA11D36EF10BB3AE1B51014C0D1DE9AD3D3FEFF03CF126180E3524D63015E07E3C07027665B42131EAC5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c832311185c54e8093b723add2869674.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:80544WBdIhY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.385761766763592
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9sqlitweP7FlsjswK:SbFuFyLVIg1BG+f+MKq0weP7F2jLkGq
MD5:	2C8FABA8C1768594B748E7C32C49E297
SHA1:	C41A8085854B71A4B8186B0179CE8AF609B7B735
SHA-256:	D0F5F87F66EB78C2F330946206A20B2D7E8DAD070E432B1C0AB0E7325787BB50
SHA-512:	863DEC24F5E913F2443E76774BF1386E3D0F2B40EA068FF2CD747E0112F04502750BD773E8BEC4E28824E14C86C922C15D85A8F53C0D5D18318CF1B182205BD1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=775583ee1de44f4ab117aeec6cf67481.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:80549aNQnsV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.378547122545944
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5QhXgdXDSd0js2BZZGu:SbFuFyLVIg1BAf+M+h6XRjNTZD
MD5:	1A1244339C3876B1E1CFD391253F8CED
SHA1:	6A28AA8C22C8CE4CB91E471D9A961AA7E4FFABDB
SHA-256:	856D86111A25ECF66DFFF7762CE4BCF6B16673C6627DACED12787C3D109C6FC0
SHA-512:	75F4C31AB899C677ADA9226BEB954F10B39A289C1E428A5A759C6E1F7EA2E2A336D9C41E800906E9D6F394616F81905B2A8CB0E06C08088BEA5382E0F3DF2956
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3104bd2b132a4a089f369adaf32b7de4.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/seats/.#seat00pb4Xk

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat05Bvsut

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat076ZnDn

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat08cxQTL

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat09NNPYa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0B4SJYv

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0BhCvzL

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0F5JAuh

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0KHyOFp

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0V69RDN

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0fMEQcv

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0n8elQC

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0s7STB3

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0sutC5D

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0v14SPt

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0x4J5s0

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0xF5pz3

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:nVn:V
MD5:	F4A176795176F96BAEB9D95941B61769
SHA1:	F9C2C15DCC87D632476B168302E14A3394F21F97
SHA-256:	3573D61E6CA4FBA8D4C3486BC715745F844F3C1E2BAEFD4F64E4FDDB17016345
SHA-512:	DAF4DE51CB2184916B00E9C72FD3BB43B0CF4418B77A93E189E793770A300A085348ED52E7B3B1F3459EB690D9C9BE8A76CAAF2C83F718E5127A68562476866C
Malicious:	false
Preview:	7119.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6670868467684749
Encrypted:	false
SSDEEP:	3:vlSsXlXEWtl/60Xl:vlv+yl
MD5:	35227DC28C1696B557F732C19C9542C4
SHA1:	D513B37EF6BFA87D67C6A6A8A33042ACD13FC8A1
SHA-256:	A3F3EE0F3E4391CAF02156C8061A0755703B35EA3E787A8009802C0FD1E13802
SHA-512:	A82376D5FE1F5CC7714F40032CBDBF4A7B822CAD3AE52602BB89BE877168FDA7E52BAAE8C08886C2BBB9EC0A2EE57711674D8E53A1E5D2C4E98F7250BAAA93B7
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN...................................................................................................................................................................................................................................................................................................Nlqg........................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	782
Entropy (8bit):	4.910344666178506
Encrypted:	false
SSDEEP:	12:sFYZPaV5pM4FYZPgKM4FCG4F6IFTnMYFxAvmhFxA2+VGFs:vZeaLZ4BBGNWdAvaA2+Vd
MD5:	7DB359967DA88182A8F79BEABF8489ED
SHA1:	729CA4CD7488D23023B247385EA3502F08148879
SHA-256:	8015E4D18F037DC755A1EB4BB2CB9863EACD26B189E97B933FE148AC4660192E
SHA-512:	4B0D1AFE8850FF30C06108CCCB84587BDFBFBCDB4F4D4C38D6FF7BFB9F6645F6930E2CDEF66F7FFAF6535A9C2D5D55C8BC232876E3647149041B9B138826B50E
Malicious:	false
Preview:	Dec 29 09:35:39 galassia systemd-logind[7126]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 29 09:35:39 galassia systemd-logind[7126]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 29 09:35:39 galassia systemd-logind[7126]: User enumeration failed: Invalid argument.Dec 29 09:35:39 galassia systemd-logind[7126]: User of session 2 not known..Dec 29 09:35:39 galassia systemd-logind[7126]: Session enumeration failed: No such file or directory.Dec 29 09:35:39 galassia systemd-logind[7126]: Watching system buttons on /dev/input/event0 (Power Button).Dec 29 09:35:39 galassia systemd-logind[7126]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 29 09:35:39 galassia systemd-logind[7126]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4595260194504922
Encrypted:	false
SSDEEP:	3:F31Hl1ol5Ool5:F3Gd
MD5:	F96D8C09A7F6FCB0ACA5AF436B3E1162
SHA1:	BBF131FD6CF6FDE0559F81BACA408A93409F3C77
SHA-256:	DDEE2D970E0713D5DCCF12F699A41CB77A0B0840465CAEF02BFEF53CD174320A
SHA-512:	6AF68AC48E16B13F93ED700704EE6988FE08A36068D35F2AE4871D4A495B3D4BC21FA6F9B3A279C81E1F6398B35532CE2BCB3061435A16EFCD725B650BAB670D
Malicious:	false
Preview:	LPKSHHRH....................j.M.rF.........................................j.M.rF.............................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31HldwUdOT1wUdOx/ll:F3GUrUA/ll
MD5:	53356F54DAA9568520503C54AEC56ED7
SHA1:	672A797C72B1F614EA6BEC7D6355C3D0663D3E15
SHA-256:	39F1990BC74669985BAE8A0B84330DF3676281000F6123E94D8CF77D58D57627
SHA-512:	1D855A1845D5BFFA224C7E5971B13EF0C2294A8E549476E258FB066378C47C4BE37E0A21F74A698F5DEFA67AF1229CBC016DA012B99D7E887C0CBB2A810A40F3
Malicious:	false
Preview:	LPKSHHRH................r....Ou......W-................................r....Ou......W-........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.764221193007792
Encrypted:	false
SSDEEP:	48:Wx1nYnUPzb4+74NHNo4yxByod9W5AKW8qklkXNOuaOXNy9Mk3v:GKlprMSZYYgN/a8N+3v
MD5:	C7EC650B158D070F6BC6BB687CF54C9B
SHA1:	D623BD3110F99EF14AABA84CD2B4159F2EC6F73D
SHA-256:	F24144ABE04A53D22EA850D1CBA5541B85A43C1F578AB2FF832A5D69210BBBFA
SHA-512:	69C142A5CB871501FB5D2B19ACC58141CEE2A0051E33ACBE9EFB1B25F2F671B7BC46D0AA34F8EF489C45E7BDB680ED23A5B8B729EA01B600C54F6C280F612161
Malicious:	false
Preview:	Dec 29 09:35:38 galassia kernel: [ 309.119690] blocking signal 9: 5532 -> 3220.Dec 29 09:35:38 galassia kernel: [ 309.517672] blocking signal 9: 5532 -> 658.Dec 29 09:35:38 galassia kernel: [ 309.521828] blocking signal 9: 5532 -> 723.Dec 29 09:35:38 galassia kernel: [ 309.527069] blocking signal 9: 5532 -> 777.Dec 29 09:35:38 galassia kernel: [ 309.532097] blocking signal 9: 5532 -> 933.Dec 29 09:35:38 galassia kernel: [ 309.540571] blocking signal 9: 5532 -> 3220.Dec 29 09:35:38 galassia kernel: [ 309.911009] New task spawned: old: (tgid 7118, tid 7118), new (tgid: 7118, tid: 7120).Dec 29 09:35:38 galassia kernel: [ 309.911557] New task spawned: old: (tgid 7118, tid 7118), new (tgid: 7118, tid: 7121).Dec 29 09:35:38 galassia kernel: [ 309.913568] New task spawned: old: (tgid 7118, tid 7120), new (tgid: 7118, tid: 7122).Dec 29 09:35:38 galassia kernel: [ 310.289879] New task spawned: old: (tgid 7123, tid 7123), new (tgid: 7123, tid: 7183).Dec 29 09:35:38 galassia kernel: [

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	9722
Entropy (8bit):	5.079603363616101
Encrypted:	false
SSDEEP:	96:YxvVRLPS0RLGPKlpyv6gS+KbDc8qTM3rZYvFfZBpQKdLLHlVPVyNoa8NEU6z3v:YPNdQEg6bDctJf5XZLHl26j2rv
MD5:	584E036B0340730A4C64B22050FABD1E
SHA1:	E41D8143F699B49C563AFC2B5F7E47C6A478E470
SHA-256:	EC0832540BF432D38E60F34DA86A724944C6945CABF038F6661FF445B668B95E
SHA-512:	4102BDA912235AB78C41A5A3AC9B4415159015E1662D8C19C02FE772D2F614FFEBFE6C36173BA4ABF0941220BD78109472AA6A6D45BD2916CBF0A6B01BC555F8
Malicious:	false
Preview:	Dec 29 09:35:37 galassia rtkit-daemon[7100]: Exiting cleanly..Dec 29 09:35:37 galassia rtkit-daemon[7100]: Demoting known real-time threads..Dec 29 09:35:37 galassia systemd[1]: getty@tty2.service: Succeeded..Dec 29 09:35:37 galassia rtkit-daemon[7100]: Warning: Failed to read start time of thread 7110: No such process.Dec 29 09:35:37 galassia systemd[1]: getty@tty2.service: Scheduled restart job, restart counter is at 21..Dec 29 09:35:37 galassia rtkit-daemon[7100]: Warning: Failed to read start time of thread 7094: No such process.Dec 29 09:35:37 galassia systemd[1]: Stopped Getty on tty2..Dec 29 09:35:37 galassia rtkit-daemon[7100]: Demoted 0 threads..Dec 29 09:35:37 galassia systemd[1]: Started Getty on tty2..Dec 29 09:35:37 galassia rtkit-daemon[7100]: Exiting canary thread..Dec 29 09:35:37 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 29 09:35:37 galassia rtkit-daemon[7100]: Exiting watchdog thread..Dec 29 09:35:37 galassia systemd[1]:

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6670868467684749
Encrypted:	false
SSDEEP:	3:vlSsXlXEWtl/60Xl:vlv+yl
MD5:	35227DC28C1696B557F732C19C9542C4
SHA1:	D513B37EF6BFA87D67C6A6A8A33042ACD13FC8A1
SHA-256:	A3F3EE0F3E4391CAF02156C8061A0755703B35EA3E787A8009802C0FD1E13802
SHA-512:	A82376D5FE1F5CC7714F40032CBDBF4A7B822CAD3AE52602BB89BE877168FDA7E52BAAE8C08886C2BBB9EC0A2EE57711674D8E53A1E5D2C4E98F7250BAAA93B7
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN...................................................................................................................................................................................................................................................................................................Nlqg........................................

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.383890333754448
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Aqua.i686.elf
File size:	67'028 bytes
MD5:	5f0ad2307fb3c605bc6228ea56ed6b59
SHA1:	6fa8394a35e6cc6dc5c43622d4df5a185b66e2ac
SHA256:	8a57e91abababa5fbcd0414e068885572aad724585355fce4246ab8bb4a4b5f0
SHA512:	ff17b06c6d359bf01d6a93cec4a48205e6f953b82e0f6e073d663acba851e6c6f4ac1a92bc59aed379d81f78bd622a2b188e7347a8d1a93afbc1fd2a976d104f
SSDEEP:	1536:R+XkIsiWIGc8k1KDVmU7tp/HOaLWZsh1RaCrZqfCxCEE3H:R+XvsidGyKDVmU7tpvOVih1RaCl+N
TLSH:	CA632A81FA87C0F5D81B09304077F33FCA32E5294171DA6EEF69EF36DA63541A216299
File Content Preview:	.ELF....................h...4...D.......4. ...(.....................................................x....(..........Q.td............................U..S............h....3...[]...$.............U......= ....t..1...................u........t...$........... .

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048168
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66628
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xe561	0x0	0x6	AX	16
.fini	PROGBITS	0x8056611	0xe611	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8056640	0xe640	0x1a45	0x0	0x2	A	32
.ctors	PROGBITS	0x805908c	0x1008c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8059094	0x10094	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80590c0	0x100c0	0x344	0x0	0x3	WA	32
.bss	NOBITS	0x8059420	0x10404	0x2560	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x10404	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x10085	0x10085	6.4105	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x1008c	0x805908c	0x805908c	0x378	0x28f4	4.1933	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 16:33:13.057622910 CET	54112	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:13.194242001 CET	53	54112	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:13.194380999 CET	53216	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:13.318200111 CET	53	53216	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:13.318348885 CET	49200	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:13.454104900 CET	53	49200	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:13.454230070 CET	34920	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:13.581374884 CET	53	34920	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:13.581520081 CET	58011	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:13.707624912 CET	53	58011	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:13.707786083 CET	32897	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:13.831572056 CET	53	32897	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.041176081 CET	35442	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.165000916 CET	53	35442	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.165118933 CET	49450	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.301242113 CET	53	49450	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.301711082 CET	59139	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.425595045 CET	53	59139	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.425714970 CET	58043	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.560815096 CET	53	58043	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.560915947 CET	38276	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.684442997 CET	53	38276	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.684679985 CET	56881	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.811618090 CET	53	56881	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.811695099 CET	50410	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:37.936697960 CET	53	50410	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:37.936978102 CET	41936	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:38.074398994 CET	53	41936	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:38.074491024 CET	36131	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:38.210251093 CET	53	36131	8.8.8.8	192.168.2.15
Dec 29, 2024 16:33:38.210436106 CET	59258	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:33:38.336769104 CET	53	59258	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:01.407720089 CET	50685	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:01.536755085 CET	53	50685	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:01.536895037 CET	41830	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:01.660830975 CET	53	41830	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:01.661042929 CET	34088	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:01.784921885 CET	53	34088	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:01.785041094 CET	42603	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:01.914411068 CET	53	42603	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:01.914561033 CET	54527	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:02.050250053 CET	53	54527	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:02.050386906 CET	49017	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:02.187575102 CET	53	49017	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:02.187731981 CET	54528	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:02.311603069 CET	53	54528	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:02.311737061 CET	50665	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:02.435417891 CET	53	50665	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:02.435564995 CET	49362	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:02.560173988 CET	53	49362	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:02.560349941 CET	49805	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:02.695149899 CET	53	49805	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:25.835524082 CET	53542	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:25.970859051 CET	53	53542	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:25.970983028 CET	36648	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.094934940 CET	53	36648	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.095092058 CET	59291	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.225071907 CET	53	59291	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.225187063 CET	45553	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.349050045 CET	53	45553	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.349150896 CET	48849	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.473267078 CET	53	48849	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.473619938 CET	51148	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.597455025 CET	53	51148	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.597573996 CET	39511	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.721666098 CET	53	39511	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.723100901 CET	36610	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.846826077 CET	53	36610	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.846929073 CET	33667	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:26.970906973 CET	53	33667	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:26.971008062 CET	56348	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:27.107728004 CET	53	56348	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.211848021 CET	35356	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:50.338478088 CET	53	35356	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.338988066 CET	40862	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:50.465570927 CET	53	40862	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.466160059 CET	58286	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:50.590363979 CET	53	58286	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.591125965 CET	41516	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:50.726522923 CET	53	41516	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.726610899 CET	51157	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:50.861836910 CET	53	51157	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.861931086 CET	42438	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:50.985469103 CET	53	42438	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:50.985551119 CET	51674	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:51.112096071 CET	53	51674	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:51.112234116 CET	58262	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:51.422765017 CET	53	58262	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:51.422915936 CET	51296	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:51.552005053 CET	53	51296	8.8.8.8	192.168.2.15
Dec 29, 2024 16:34:51.553308964 CET	54064	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:34:51.690929890 CET	53	54064	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:14.751427889 CET	58549	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:14.875257969 CET	53	58549	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:14.875379086 CET	35108	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.010307074 CET	53	35108	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.010530949 CET	39473	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.146076918 CET	53	39473	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.146192074 CET	59849	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.280760050 CET	53	59849	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.280867100 CET	34992	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.404628038 CET	53	34992	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.404727936 CET	58971	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.529491901 CET	53	58971	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.529644012 CET	57025	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.653270006 CET	53	57025	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.653383970 CET	38450	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.788876057 CET	53	38450	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.789164066 CET	33412	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:15.915625095 CET	53	33412	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:15.915728092 CET	54593	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:16.050667048 CET	53	54593	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.077653885 CET	39587	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.212585926 CET	53	39587	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.212694883 CET	59000	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.348146915 CET	53	59000	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.348263979 CET	52592	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.472228050 CET	53	52592	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.472346067 CET	32817	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.596335888 CET	53	32817	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.596483946 CET	46970	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.721692085 CET	53	46970	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.721805096 CET	49208	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.846338987 CET	53	49208	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.846431017 CET	39285	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:39.981525898 CET	53	39285	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:39.981673002 CET	55395	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:40.105735064 CET	53	55395	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:40.105874062 CET	58595	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:40.229696989 CET	53	58595	8.8.8.8	192.168.2.15
Dec 29, 2024 16:35:40.229867935 CET	37756	53	192.168.2.15	8.8.8.8
Dec 29, 2024 16:35:40.353523016 CET	53	37756	8.8.8.8	192.168.2.15

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 29, 2024 16:33:22.421500921 CET	192.168.2.15	192.168.2.1	827b	(Port unreachable)	Destination Unreachable
Dec 29, 2024 16:34:42.434297085 CET	192.168.2.15	192.168.2.1	827b	(Port unreachable)	Destination Unreachable

Start time (UTC):	15:33:11
Start date (UTC):	29/12/2024
Path:	/tmp/Aqua.i686.elf
Arguments:	/tmp/Aqua.i686.elf
File size:	67028 bytes
MD5 hash:	5f0ad2307fb3c605bc6228ea56ed6b59

Start time (UTC):	15:33:12
Start date (UTC):	29/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Start time (UTC):	15:33:13
Start date (UTC):	29/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	15:33:14
Start date (UTC):	29/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	15:33:15
Start date (UTC):	29/12/2024
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	15:33:16
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:17
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	15:33:18
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:33:23
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:19
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:20
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:27
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:28
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:29
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.i686.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:657812Wjp50

/run/systemd/journal/streams/.#9:65786ZCVfo1

/run/systemd/journal/streams/.#9:657877CjZC0

/run/systemd/journal/streams/.#9:65788l7Qgd3

/run/systemd/journal/streams/.#9:65794EN5622

/run/systemd/journal/streams/.#9:65795Cb3SA1

/run/systemd/journal/streams/.#9:65796vSYBU2

/run/systemd/journal/streams/.#9:65803U2jXW3

/run/systemd/journal/streams/.#9:65884AUdkF2

/run/systemd/journal/streams/.#9:66339xUPfrL

/run/systemd/journal/streams/.#9:66340puAOyK

/run/systemd/journal/streams/.#9:66351LPRL3M

/run/systemd/journal/streams/.#9:66352IV0LzK

/run/systemd/journal/streams/.#9:66353uVMkbN

/run/systemd/journal/streams/.#9:67058tM2rqK

/run/systemd/journal/streams/.#9:67481k5aWig

/run/systemd/journal/streams/.#9:674823YKJvg

/run/systemd/journal/streams/.#9:67483MZWDLg

/run/systemd/journal/streams/.#9:67571JEjXah

/run/systemd/journal/streams/.#9:68488QCR8oA

/run/systemd/journal/streams/.#9:68677ms9fVg

/run/systemd/journal/streams/.#9:69045jKzsTC

/run/systemd/journal/streams/.#9:69047TZnp9C

/run/systemd/journal/streams/.#9:69048cUUeGA

/run/systemd/journal/streams/.#9:69055O7fgtA

/run/systemd/journal/streams/.#9:69056Gl7ZfB

/run/systemd/journal/streams/.#9:69130NFSwkC

/run/systemd/journal/streams/.#9:69227rzYooA

/run/systemd/journal/streams/.#9:70643QZxaP0

/run/systemd/journal/streams/.#9:7087551vTIn

Linux Analysis Report
Aqua.i686.elf

Start time (UTC):	15:33:35
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:30
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:31
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:33:32
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	15:33:33
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	15:33:34
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:37
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:39
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:44
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	15:33:46
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75