Edit tour

Linux Analysis Report
qbfwdbg.elf

Overview

General Information

Sample name:	qbfwdbg.elf
Analysis ID:	1583179
MD5:	9ffc69285cf6a04f58d59b73b7c993c0
SHA1:	8b3d95ed36e9e0264f764724db27a3d7f6d2e302
SHA256:	e8647500a41bda114a197d02f36cb9521f6053b34d5056306324dbfff0c6857a
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583179
Start date and time:	2025-01-02 07:57:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	qbfwdbg.elf
Detection:	MAL
Classification:	mal88.spre.troj.evad.linELF@0/186@174/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.

Process Tree

system is lnxubuntu20

qbfwdbg.elf (PID: 5454, Parent: 5378, MD5: 9ffc69285cf6a04f58d59b73b7c993c0) Arguments: /tmp/qbfwdbg.elf

qbfwdbg.elf New Fork (PID: 5455, Parent: 5454)

gnome-session-binary New Fork (PID: 5456, Parent: 1588)

sh (PID: 5456, Parent: 1588, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5456, Parent: 1588, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

xfce4-panel New Fork (PID: 5461, Parent: 3147)

wrapper-2.0 (PID: 5461, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5462, Parent: 3147)

wrapper-2.0 (PID: 5462, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5463, Parent: 3147)

wrapper-2.0 (PID: 5463, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5464, Parent: 3147)

wrapper-2.0 (PID: 5464, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5483, Parent: 5464)

xfpm-power-backlight-helper (PID: 5483, Parent: 5464, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5465, Parent: 3147)

wrapper-2.0 (PID: 5465, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5466, Parent: 3147)

wrapper-2.0 (PID: 5466, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5482, Parent: 5481)

xfconfd (PID: 5482, Parent: 5481, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

gdm3 New Fork (PID: 5513, Parent: 1400)

Default (PID: 5513, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5514, Parent: 1400)

Default (PID: 5514, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5515, Parent: 2935)

xfce4-notifyd (PID: 5515, Parent: 2935, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

xfce4-session New Fork (PID: 5521, Parent: 2984)

xfwm4 (PID: 5521, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5

xfce4-session New Fork (PID: 5523, Parent: 2984)

xfce4-panel (PID: 5523, Parent: 2984, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2d6b1caf2-8023-452b-bd0d-d23295482740

xfce4-session New Fork (PID: 5525, Parent: 2984)

rm (PID: 5525, Parent: 2984, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /home/saturnino/.cache/sessions/Thunar-2ec7c2e14-9c4d-40f3-9704-8617ab831fb4

xfce4-session New Fork (PID: 5526, Parent: 2984)

xfdesktop (PID: 5526, Parent: 2984, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 260d40b3c-9c6a-4cb1-bbe4-3557725aa528

xfce4-session New Fork (PID: 5531, Parent: 2984)

xfwm4 (PID: 5531, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5

xfce4-session New Fork (PID: 5532, Parent: 2984)

xfce4-panel (PID: 5532, Parent: 2984, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2d6b1caf2-8023-452b-bd0d-d23295482740

xfce4-session New Fork (PID: 5533, Parent: 2984)

xfdesktop (PID: 5533, Parent: 2984, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 260d40b3c-9c6a-4cb1-bbe4-3557725aa528

dbus-daemon New Fork (PID: 5540, Parent: 5539)

xfconfd (PID: 5540, Parent: 5539, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5546, Parent: 1)

journalctl (PID: 5546, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5547, Parent: 1)

dbus-daemon (PID: 5547, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5552, Parent: 1400)

Default (PID: 5552, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5553, Parent: 1)

systemd-journald (PID: 5553, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5554, Parent: 1)

rsyslogd (PID: 5554, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5555, Parent: 2935)

pulseaudio (PID: 5555, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5561, Parent: 1)

upowerd (PID: 5561, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

gvfsd-fuse New Fork (PID: 5601, Parent: 3122)

fusermount (PID: 5601, Parent: 3122, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5614, Parent: 1)

dbus-daemon (PID: 5614, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5615, Parent: 1)

systemd-journald (PID: 5615, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5618, Parent: 2935)

pulseaudio (PID: 5618, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5619, Parent: 1)

rsyslogd (PID: 5619, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5620, Parent: 1)

upowerd (PID: 5620, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 5665, Parent: 1)

rtkit-daemon (PID: 5665, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5668, Parent: 1)

systemd-logind (PID: 5668, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5727, Parent: 1)

polkitd (PID: 5727, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5731, Parent: 1)

gpu-manager (PID: 5731, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5733, Parent: 5731)

sh (PID: 5733, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5735, Parent: 5733)

grep (PID: 5735, Parent: 5733, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5736, Parent: 5731)

sh (PID: 5736, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5737, Parent: 5736)

grep (PID: 5737, Parent: 5736, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5738, Parent: 5731)

sh (PID: 5738, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5739, Parent: 5738)

grep (PID: 5739, Parent: 5738, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5740, Parent: 5731)

sh (PID: 5740, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5741, Parent: 5740)

grep (PID: 5741, Parent: 5740, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5742, Parent: 5731)

sh (PID: 5742, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5743, Parent: 5742)

grep (PID: 5743, Parent: 5742, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5744, Parent: 5731)

sh (PID: 5744, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5745, Parent: 5744)

grep (PID: 5745, Parent: 5744, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5746, Parent: 5731)

sh (PID: 5746, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5747, Parent: 5746)

grep (PID: 5747, Parent: 5746, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5749, Parent: 5731)

sh (PID: 5749, Parent: 5731, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5750, Parent: 5749)

grep (PID: 5750, Parent: 5749, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5732, Parent: 1)

agetty (PID: 5732, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5754, Parent: 2935)

dbus-daemon (PID: 5754, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5755, Parent: 1)

generate-config (PID: 5755, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5756, Parent: 5755)

pkill (PID: 5756, Parent: 5755, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5757, Parent: 1)

gdm-wait-for-drm (PID: 5757, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5762, Parent: 1)

systemd-journald (PID: 5762, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5763, Parent: 1)

dbus-daemon (PID: 5763, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5768, Parent: 1)

systemd-logind (PID: 5768, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5778, Parent: 2935)

pulseaudio (PID: 5778, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5779, Parent: 1)

rsyslogd (PID: 5779, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5828, Parent: 1)

upowerd (PID: 5828, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 5867, Parent: 1)

gpu-manager (PID: 5867, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5871, Parent: 5867)

sh (PID: 5871, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5872, Parent: 5871)

grep (PID: 5872, Parent: 5871, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5873, Parent: 5867)

sh (PID: 5873, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5874, Parent: 5873)

grep (PID: 5874, Parent: 5873, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5875, Parent: 5867)

sh (PID: 5875, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5876, Parent: 5875)

grep (PID: 5876, Parent: 5875, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5879, Parent: 5867)

sh (PID: 5879, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5880, Parent: 5879)

grep (PID: 5880, Parent: 5879, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5885, Parent: 5867)

sh (PID: 5885, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5886, Parent: 5885)

grep (PID: 5886, Parent: 5885, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5890, Parent: 5867)

sh (PID: 5890, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5891, Parent: 5890)

grep (PID: 5891, Parent: 5890, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5892, Parent: 5867)

sh (PID: 5892, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5893, Parent: 5892)

grep (PID: 5893, Parent: 5892, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5894, Parent: 5867)

sh (PID: 5894, Parent: 5867, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5895, Parent: 5894)

grep (PID: 5895, Parent: 5894, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5878, Parent: 1)

rtkit-daemon (PID: 5878, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5884, Parent: 1)

polkitd (PID: 5884, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5898, Parent: 1)

generate-config (PID: 5898, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5899, Parent: 5898)

pkill (PID: 5899, Parent: 5898, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5902, Parent: 2935)

dbus-daemon (PID: 5902, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5903, Parent: 1)

gdm-wait-for-drm (PID: 5903, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5908, Parent: 1)

systemd-journald (PID: 5908, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5913, Parent: 1)

systemd-logind (PID: 5913, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5970, Parent: 2935)

pulseaudio (PID: 5970, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5971, Parent: 1)

rsyslogd (PID: 5971, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5972, Parent: 1)

upowerd (PID: 5972, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6013, Parent: 1)

dbus-daemon (PID: 6013, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6015, Parent: 1)

gpu-manager (PID: 6015, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6016, Parent: 6015)

sh (PID: 6016, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6017, Parent: 6016)

grep (PID: 6017, Parent: 6016, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6018, Parent: 6015)

sh (PID: 6018, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6019, Parent: 6018)

grep (PID: 6019, Parent: 6018, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6020, Parent: 6015)

sh (PID: 6020, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6021, Parent: 6020)

grep (PID: 6021, Parent: 6020, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6022, Parent: 6015)

sh (PID: 6022, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6023, Parent: 6022)

grep (PID: 6023, Parent: 6022, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6026, Parent: 6015)

sh (PID: 6026, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6027, Parent: 6026)

grep (PID: 6027, Parent: 6026, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6031, Parent: 6015)

sh (PID: 6031, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6033, Parent: 6031)

grep (PID: 6033, Parent: 6031, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6039, Parent: 6015)

sh (PID: 6039, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6040, Parent: 6039)

grep (PID: 6040, Parent: 6039, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6041, Parent: 6015)

sh (PID: 6041, Parent: 6015, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6042, Parent: 6041)

grep (PID: 6042, Parent: 6041, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6025, Parent: 1)

rtkit-daemon (PID: 6025, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6032, Parent: 1)

polkitd (PID: 6032, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6043, Parent: 1)

generate-config (PID: 6043, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6044, Parent: 6043)

pkill (PID: 6044, Parent: 6043, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6047, Parent: 2935)

dbus-daemon (PID: 6047, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6050, Parent: 1)

gdm-wait-for-drm (PID: 6050, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6053, Parent: 1)

systemd-journald (PID: 6053, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6058, Parent: 1)

dbus-daemon (PID: 6058, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6059, Parent: 1)

systemd-logind (PID: 6059, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6116, Parent: 1)

rsyslogd (PID: 6116, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6117, Parent: 1)

upowerd (PID: 6117, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6129, Parent: 2935)

pulseaudio (PID: 6129, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6160, Parent: 1)

gpu-manager (PID: 6160, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6161, Parent: 6160)

sh (PID: 6161, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6162, Parent: 6161)

grep (PID: 6162, Parent: 6161, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6163, Parent: 6160)

sh (PID: 6163, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6164, Parent: 6163)

grep (PID: 6164, Parent: 6163, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6165, Parent: 6160)

sh (PID: 6165, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6166, Parent: 6165)

grep (PID: 6166, Parent: 6165, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6171, Parent: 6160)

sh (PID: 6171, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6172, Parent: 6171)

grep (PID: 6172, Parent: 6171, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6177, Parent: 6160)

sh (PID: 6177, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6178, Parent: 6177)

grep (PID: 6178, Parent: 6177, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6182, Parent: 6160)

sh (PID: 6182, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6183, Parent: 6182)

grep (PID: 6183, Parent: 6182, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6184, Parent: 6160)

sh (PID: 6184, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6185, Parent: 6184)

grep (PID: 6185, Parent: 6184, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6186, Parent: 6160)

sh (PID: 6186, Parent: 6160, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6187, Parent: 6186)

grep (PID: 6187, Parent: 6186, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6168, Parent: 1)

rtkit-daemon (PID: 6168, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6176, Parent: 1)

polkitd (PID: 6176, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6188, Parent: 1)

generate-config (PID: 6188, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6189, Parent: 6188)

pkill (PID: 6189, Parent: 6188, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6192, Parent: 2935)

dbus-daemon (PID: 6192, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6195, Parent: 1)

gdm-wait-for-drm (PID: 6195, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6198, Parent: 1)

systemd-journald (PID: 6198, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6203, Parent: 1)

systemd-logind (PID: 6203, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6260, Parent: 1)

rsyslogd (PID: 6260, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6261, Parent: 1)

upowerd (PID: 6261, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6299, Parent: 2935)

pulseaudio (PID: 6299, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6301, Parent: 1)

dbus-daemon (PID: 6301, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6307, Parent: 1)

gpu-manager (PID: 6307, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6308, Parent: 6307)

sh (PID: 6308, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6309, Parent: 6308)

grep (PID: 6309, Parent: 6308, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6310, Parent: 6307)

sh (PID: 6310, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6311, Parent: 6310)

grep (PID: 6311, Parent: 6310, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6312, Parent: 6307)

sh (PID: 6312, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6313, Parent: 6312)

grep (PID: 6313, Parent: 6312, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6314, Parent: 6307)

sh (PID: 6314, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6315, Parent: 6314)

grep (PID: 6315, Parent: 6314, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6318, Parent: 6307)

sh (PID: 6318, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6319, Parent: 6318)

grep (PID: 6319, Parent: 6318, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6324, Parent: 6307)

sh (PID: 6324, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6325, Parent: 6324)

grep (PID: 6325, Parent: 6324, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6329, Parent: 6307)

sh (PID: 6329, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6330, Parent: 6329)

grep (PID: 6330, Parent: 6329, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6331, Parent: 6307)

sh (PID: 6331, Parent: 6307, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6332, Parent: 6331)

grep (PID: 6332, Parent: 6331, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6317, Parent: 1)

rtkit-daemon (PID: 6317, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6323, Parent: 1)

polkitd (PID: 6323, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6334, Parent: 1)

generate-config (PID: 6334, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6335, Parent: 6334)

pkill (PID: 6335, Parent: 6334, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6339, Parent: 1)

gdm-wait-for-drm (PID: 6339, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6342, Parent: 1)

systemd-journald (PID: 6342, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6347, Parent: 1)

systemd-logind (PID: 6347, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6351, Parent: 1)

dbus-daemon (PID: 6351, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6407, Parent: 1)

rsyslogd (PID: 6407, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6408, Parent: 1)

upowerd (PID: 6408, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6450, Parent: 1)

gpu-manager (PID: 6450, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6451, Parent: 6450)

sh (PID: 6451, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6452, Parent: 6451)

grep (PID: 6452, Parent: 6451, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6453, Parent: 6450)

sh (PID: 6453, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6454, Parent: 6453)

grep (PID: 6454, Parent: 6453, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6456, Parent: 6450)

sh (PID: 6456, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6457, Parent: 6456)

grep (PID: 6457, Parent: 6456, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6459, Parent: 6450)

sh (PID: 6459, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6460, Parent: 6459)

grep (PID: 6460, Parent: 6459, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6461, Parent: 6450)

sh (PID: 6461, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6462, Parent: 6461)

grep (PID: 6462, Parent: 6461, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6463, Parent: 6450)

sh (PID: 6463, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6464, Parent: 6463)

grep (PID: 6464, Parent: 6463, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6465, Parent: 6450)

sh (PID: 6465, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6466, Parent: 6465)

grep (PID: 6466, Parent: 6465, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6467, Parent: 6450)

sh (PID: 6467, Parent: 6450, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6468, Parent: 6467)

grep (PID: 6468, Parent: 6467, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6469, Parent: 1)

generate-config (PID: 6469, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6470, Parent: 6469)

pkill (PID: 6470, Parent: 6469, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6473, Parent: 1)

gdm-wait-for-drm (PID: 6473, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6478, Parent: 1)

systemd-journald (PID: 6478, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6483, Parent: 1)

systemd-logind (PID: 6483, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6540, Parent: 1)

rsyslogd (PID: 6540, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6541, Parent: 1)

upowerd (PID: 6541, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6583, Parent: 1)

dbus-daemon (PID: 6583, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6584, Parent: 1)

gpu-manager (PID: 6584, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6585, Parent: 6584)

sh (PID: 6585, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6586, Parent: 6585)

grep (PID: 6586, Parent: 6585, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6587, Parent: 6584)

sh (PID: 6587, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6588, Parent: 6587)

grep (PID: 6588, Parent: 6587, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6589, Parent: 6584)

sh (PID: 6589, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6590, Parent: 6589)

grep (PID: 6590, Parent: 6589, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6591, Parent: 6584)

sh (PID: 6591, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6592, Parent: 6591)

grep (PID: 6592, Parent: 6591, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6594, Parent: 6584)

sh (PID: 6594, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6595, Parent: 6594)

grep (PID: 6595, Parent: 6594, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6596, Parent: 6584)

sh (PID: 6596, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6598, Parent: 6596)

grep (PID: 6598, Parent: 6596, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6599, Parent: 6584)

sh (PID: 6599, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6600, Parent: 6599)

grep (PID: 6600, Parent: 6599, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6601, Parent: 6584)

sh (PID: 6601, Parent: 6584, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6602, Parent: 6601)

grep (PID: 6602, Parent: 6601, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6605, Parent: 1)

generate-config (PID: 6605, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6606, Parent: 6605)

pkill (PID: 6606, Parent: 6605, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6607, Parent: 1)

gdm-wait-for-drm (PID: 6607, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6612, Parent: 1)

systemd-journald (PID: 6612, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6617, Parent: 1)

dbus-daemon (PID: 6617, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6618, Parent: 1)

systemd-logind (PID: 6618, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6675, Parent: 1)

rsyslogd (PID: 6675, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6676, Parent: 1)

upowerd (PID: 6676, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6718, Parent: 1)

gpu-manager (PID: 6718, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6719, Parent: 6718)

sh (PID: 6719, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6720, Parent: 6719)

grep (PID: 6720, Parent: 6719, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6721, Parent: 6718)

sh (PID: 6721, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6722, Parent: 6721)

grep (PID: 6722, Parent: 6721, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6724, Parent: 6718)

sh (PID: 6724, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6725, Parent: 6724)

grep (PID: 6725, Parent: 6724, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6727, Parent: 6718)

sh (PID: 6727, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6728, Parent: 6727)

grep (PID: 6728, Parent: 6727, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6729, Parent: 6718)

sh (PID: 6729, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6730, Parent: 6729)

grep (PID: 6730, Parent: 6729, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6731, Parent: 6718)

sh (PID: 6731, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6732, Parent: 6731)

grep (PID: 6732, Parent: 6731, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6735, Parent: 6718)

sh (PID: 6735, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6736, Parent: 6735)

grep (PID: 6736, Parent: 6735, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6737, Parent: 6718)

sh (PID: 6737, Parent: 6718, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6738, Parent: 6737)

grep (PID: 6738, Parent: 6737, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6739, Parent: 1)

generate-config (PID: 6739, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6740, Parent: 6739)

pkill (PID: 6740, Parent: 6739, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6741, Parent: 1)

gdm-wait-for-drm (PID: 6741, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6746, Parent: 1)

systemd-journald (PID: 6746, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6751, Parent: 1)

systemd-logind (PID: 6751, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6808, Parent: 1)

rsyslogd (PID: 6808, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6809, Parent: 1)

upowerd (PID: 6809, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6850, Parent: 1)

dbus-daemon (PID: 6850, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6852, Parent: 1)

gpu-manager (PID: 6852, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6853, Parent: 6852)

sh (PID: 6853, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6854, Parent: 6853)

grep (PID: 6854, Parent: 6853, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6855, Parent: 6852)

sh (PID: 6855, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6856, Parent: 6855)

grep (PID: 6856, Parent: 6855, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6857, Parent: 6852)

sh (PID: 6857, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6858, Parent: 6857)

grep (PID: 6858, Parent: 6857, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6859, Parent: 6852)

sh (PID: 6859, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6860, Parent: 6859)

grep (PID: 6860, Parent: 6859, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6862, Parent: 6852)

sh (PID: 6862, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6863, Parent: 6862)

grep (PID: 6863, Parent: 6862, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6867, Parent: 6852)

sh (PID: 6867, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6868, Parent: 6867)

grep (PID: 6868, Parent: 6867, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6869, Parent: 6852)

sh (PID: 6869, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6870, Parent: 6869)

grep (PID: 6870, Parent: 6869, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6871, Parent: 6852)

sh (PID: 6871, Parent: 6852, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6872, Parent: 6871)

grep (PID: 6872, Parent: 6871, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6873, Parent: 1)

generate-config (PID: 6873, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6874, Parent: 6873)

pkill (PID: 6874, Parent: 6873, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6875, Parent: 1)

gdm-wait-for-drm (PID: 6875, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6880, Parent: 1)

systemd-journald (PID: 6880, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6885, Parent: 1)

dbus-daemon (PID: 6885, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6886, Parent: 1)

systemd-logind (PID: 6886, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6942, Parent: 1)

rsyslogd (PID: 6942, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6943, Parent: 1)

upowerd (PID: 6943, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6986, Parent: 1)

gpu-manager (PID: 6986, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6987, Parent: 6986)

sh (PID: 6987, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6988, Parent: 6987)

grep (PID: 6988, Parent: 6987, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6992, Parent: 6986)

sh (PID: 6992, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6994, Parent: 6992)

grep (PID: 6994, Parent: 6992, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6995, Parent: 6986)

sh (PID: 6995, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6996, Parent: 6995)

grep (PID: 6996, Parent: 6995, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6997, Parent: 6986)

sh (PID: 6997, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6998, Parent: 6997)

grep (PID: 6998, Parent: 6997, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6999, Parent: 6986)

sh (PID: 6999, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7000, Parent: 6999)

grep (PID: 7000, Parent: 6999, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7001, Parent: 6986)

sh (PID: 7001, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7002, Parent: 7001)

grep (PID: 7002, Parent: 7001, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7003, Parent: 6986)

sh (PID: 7003, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7004, Parent: 7003)

grep (PID: 7004, Parent: 7003, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7005, Parent: 6986)

sh (PID: 7005, Parent: 6986, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7006, Parent: 7005)

grep (PID: 7006, Parent: 7005, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7007, Parent: 1)

generate-config (PID: 7007, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7008, Parent: 7007)

pkill (PID: 7008, Parent: 7007, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7009, Parent: 1)

gdm-wait-for-drm (PID: 7009, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
qbfwdbg.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
qbfwdbg.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1c4f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c50c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c55c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c584:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c598:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c5ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c5c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c5d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c5e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c5fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c610:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c624:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c638:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c64c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c660:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c674:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c688:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
qbfwdbg.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x1214c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
qbfwdbg.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x129c3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
qbfwdbg.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xeae6:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xecd8:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
qbfwdbg.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x166ca:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
qbfwdbg.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x1b606:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
qbfwdbg.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x12583:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
qbfwdbg.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x19d7a:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
qbfwdbg.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x1284e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
qbfwdbg.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x19f73:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
qbfwdbg.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x38a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
qbfwdbg.elf	Linux_Trojan_Mirai_449937aa	unknown	unknown	0x1dece:$a: 00 00 5B 72 65 73 6F 6C 76 5D 20 46 6F 75 6E 64 20 49 50 20
qbfwdbg.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x48d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
qbfwdbg.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x6fd2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 10 entries

String: AEOF/proc//proc/%s/cmdlinewgetcurlftpechokillbashrebootshutdownhaltpoweroff/fd/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/usr/lib/openssh/sftp-server/home//lib/systemd//usr/lib/systemd/system/system/bin//gm/bin//home/process//home/helper/home/davinci/z/bin//mnt/mtd//tmp/sqfs//usr/libexec//usr/sbin//z/zbin//usr/bin/tmp/var/mnt/root/boot/home/dev/media/opt/../(deleted)dbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Source: global traffic	TCP traffic: 192.168.2.13:51280 -> 178.215.238.112:33966
Source: global traffic	TCP traffic: 192.168.2.13:44732 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5554)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5619)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5779)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 5971)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6116)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6260)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6407)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6540)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6675)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6808)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6942)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5615)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5762)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 5908)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6053)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6198)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6342)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6478)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6612)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6746)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6880)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic

DNS traffic detected: DNS query: fingwi.cardiacpure.ru

Source: syslog.76.dr, syslog.566.dr, syslog.193.dr, syslog.515.dr, syslog.368.dr, syslog.310.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5456, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3208, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 780, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1563, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1563, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2984, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3134, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3134, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3146, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3147, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3147, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3153, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3153, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3158, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3158, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3183, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3203, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3203, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3220, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5439, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5439, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5462, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5463, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5464, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5465, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5482, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5521, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5521, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5523, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5523, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5526, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5526, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 914, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1444, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1804, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1832, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1969, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2964, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3225, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3246, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3315, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3336, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3342, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3375, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3448, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3634, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3816, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5295, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5532, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5533, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5547, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5553, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5554, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5555, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5561, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5614, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5615, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5618, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5619, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5620, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5665, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5668, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5727, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5754, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5757, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5762, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5763, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5768, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5778, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5779, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5828, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5878, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5884, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5902, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5903, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5908, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5913, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5970, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5971, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5972, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6013, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6025, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6032, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6047, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6050, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6053, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6058, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6059, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6117, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6129, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6168, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6176, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6192, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6195, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6198, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6203, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6261, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6299, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6301, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6317, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6323, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6342, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6347, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6351, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6407, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6408, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6478, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6483, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6540, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6541, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6583, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6607, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6612, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6617, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6618, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6676, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6746, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6751, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6875, result: successful	Jump to behavior

Source: xfce4-panel.xml.new.31.dr

OLE indicator, VBA macros: true

Source: xfce4-panel.xml.new.31.dr

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5456, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3208, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 780, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1563, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1563, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2984, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3134, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3134, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3146, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3147, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3147, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3153, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3153, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3158, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3158, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3183, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3203, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3203, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3220, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5439, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5439, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5462, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5463, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5464, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5465, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5482, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5521, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5521, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5523, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5523, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5526, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5526, result: no such process	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 914, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1444, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1804, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1832, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 1969, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2964, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3225, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3246, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3315, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3336, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3342, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3375, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3448, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3634, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 3816, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5295, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5532, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5533, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5547, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5553, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5554, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5555, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5561, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5614, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5615, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5618, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5619, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5620, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5665, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5668, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5727, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5754, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5757, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5762, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5763, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5768, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5778, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5779, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5828, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5878, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5884, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5902, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5903, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5908, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5913, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5970, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5971, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 5972, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6013, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6025, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6032, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6047, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6050, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6053, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6058, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6059, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6117, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6129, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6168, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6176, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6192, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6195, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6198, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6203, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6261, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6299, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6301, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6317, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6323, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6342, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6347, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6351, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6407, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6408, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6478, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6483, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6540, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6541, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6583, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6607, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6612, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6617, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6618, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6676, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6746, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6751, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/qbfwdbg.elf (PID: 5455)	SIGKILL sent: pid: 6875, result: successful	Jump to behavior

Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa reference_sample = 6f27766534445cffb097c7c52db1fca53b2210c1b10b75594f77c34dc8b994fe, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = cf2c6b86830099f039b41aeaafbffedfb8294a1124c499e99a11f48a06cd1dfd, id = 449937aa-682a-4906-89ab-80d7127e461e, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: qbfwdbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16

Source: classification engine

Classification label: mal88.spre.troj.evad.linELF@0/186@174/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5547)	File: /proc/5547/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5601)	File: /proc/5601/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5614)	File: /proc/5614/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5754)	File: /proc/5754/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5763)	File: /proc/5763/mounts
Source: /usr/bin/dbus-daemon (PID: 5902)	File: /proc/5902/mounts
Source: /usr/bin/dbus-daemon (PID: 6013)	File: /proc/6013/mounts
Source: /usr/bin/dbus-daemon (PID: 6047)	File: /proc/6047/mounts
Source: /usr/bin/dbus-daemon (PID: 6058)	File: /proc/6058/mounts
Source: /usr/bin/dbus-daemon (PID: 6192)	File: /proc/6192/mounts
Source: /usr/bin/dbus-daemon (PID: 6301)	File: /proc/6301/mounts
Source: /usr/bin/dbus-daemon (PID: 6351)	File: /proc/6351/mounts
Source: /usr/bin/dbus-daemon (PID: 6583)	File: /proc/6583/mounts
Source: /usr/bin/dbus-daemon (PID: 6617)	File: /proc/6617/mounts
Source: /usr/bin/dbus-daemon (PID: 6850)	File: /proc/6850/mounts
Source: /usr/bin/dbus-daemon (PID: 6885)	File: /proc/6885/mounts

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5482)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5482)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5482)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5482)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5515)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5515)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5515)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5515)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5521)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5531)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5532)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5533)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5540)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5540)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5540)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5540)	Directory: /home/saturnino/.config	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:656225LpGHO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65623vuwYBO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65624yM1BDN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65625MLIx9N	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65626W4qtSN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:656338SO34M	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:656347q4dRM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65635bkOWYM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:656367j0HlK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65645rULCgO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65646opyPcL	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65647Mq2qNN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65648oS0iFK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	File: /run/systemd/journal/streams/.#9:65764yT7cTN	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5620)	Directory: <invalid fd (12)>/..	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5620)	Directory: <invalid fd (11)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5668)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5668)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5668)	File: /run/systemd/seats/.#seat0BY1RIK	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5668)	File: /run/systemd/inhibit/.#1do0EOM	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5727)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66287ViPYuR
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66288aYyKXR
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66295MPauLS
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66296nGn7zT
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:6629752fBTU
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66298mx3iyV
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66299Z4UJWU
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66300CkOKQU
Source: /lib/systemd/systemd-journald (PID: 5762)	File: /run/systemd/journal/streams/.#9:66420Vpr9rR
Source: /lib/systemd/systemd-logind (PID: 5768)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 5768)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 5768)	File: /run/systemd/seats/.#seat042Rpsk
Source: /lib/systemd/systemd-logind (PID: 5768)	File: /run/systemd/inhibit/.#1qEJg6m
Source: /lib/systemd/systemd-logind (PID: 5768)	File: /run/systemd/inhibit/.#1nEQAPj
Source: /usr/lib/upower/upowerd (PID: 5828)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 5828)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 5884)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67965c3cEeX
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67966iuTovW
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67967hPW7WV
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67968NfJIVV
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67975YmUkxX
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67976ykqgXX
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67977lhkrfU
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:67978n4mvbW
Source: /lib/systemd/systemd-journald (PID: 5908)	File: /run/systemd/journal/streams/.#9:68098uULAIU
Source: /lib/systemd/systemd-logind (PID: 5913)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 5913)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 5913)	File: /run/systemd/seats/.#seat0tSF9Hi
Source: /lib/systemd/systemd-logind (PID: 5913)	File: /run/systemd/inhibit/.#145aT6k
Source: /lib/systemd/systemd-logind (PID: 5913)	File: /run/systemd/inhibit/.#17efEtj
Source: /usr/lib/upower/upowerd (PID: 5972)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 5972)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69202vWh2ST
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69210DvAyuS
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69211i1deST
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69212lLywCR
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69213grG8LR
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69214IB015U
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69215mfp8aV
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:69216kWnIhS
Source: /lib/systemd/systemd-journald (PID: 6053)	File: /run/systemd/journal/streams/.#9:692248e3yzT
Source: /lib/systemd/systemd-logind (PID: 6059)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6059)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6059)	File: /run/systemd/seats/.#seat0A9qHim
Source: /lib/systemd/systemd-logind (PID: 6059)	File: /run/systemd/inhibit/.#18QY1nn
Source: /lib/systemd/systemd-logind (PID: 6059)	File: /run/systemd/inhibit/.#1vOQswm
Source: /usr/lib/upower/upowerd (PID: 6117)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6117)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6176)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:701881PEdAQ
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:70189HlcURR
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:70190rCWAqT
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:70191RnbVUR
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:7019881yTER
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:70201EyCeMQ
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:70203OXTIuR
Source: /lib/systemd/systemd-journald (PID: 6198)	File: /run/systemd/journal/streams/.#9:703060NNsJR
Source: /lib/systemd/systemd-logind (PID: 6203)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6203)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6203)	File: /run/systemd/seats/.#seat0eawzSd
Source: /lib/systemd/systemd-logind (PID: 6203)	File: /run/systemd/inhibit/.#1MES1me
Source: /lib/systemd/systemd-logind (PID: 6203)	File: /run/systemd/inhibit/.#1p44quf
Source: /usr/lib/upower/upowerd (PID: 6261)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6261)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6323)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6342)	File: /run/systemd/journal/streams/.#9:704936rOgJL
Source: /lib/systemd/systemd-journald (PID: 6342)	File: /run/systemd/journal/streams/.#9:70494yDyr3K
Source: /lib/systemd/systemd-journald (PID: 6342)	File: /run/systemd/journal/streams/.#9:70495W08xYM
Source: /lib/systemd/systemd-journald (PID: 6342)	File: /run/systemd/journal/streams/.#9:70509dtBgGJ
Source: /lib/systemd/systemd-journald (PID: 6342)	File: /run/systemd/journal/streams/.#9:705950EUDJI
Source: /lib/systemd/systemd-logind (PID: 6347)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6347)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6347)	File: /run/systemd/seats/.#seat02wLM09
Source: /lib/systemd/systemd-logind (PID: 6347)	File: /run/systemd/inhibit/.#1WGMTN7
Source: /lib/systemd/systemd-logind (PID: 6347)	File: /run/systemd/inhibit/.#1lGrZua
Source: /usr/lib/upower/upowerd (PID: 6408)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6408)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6478)	File: /run/systemd/journal/streams/.#9:72706awnQy1
Source: /lib/systemd/systemd-journald (PID: 6478)	File: /run/systemd/journal/streams/.#9:72715n9nRq1
Source: /lib/systemd/systemd-journald (PID: 6478)	File: /run/systemd/journal/streams/.#9:72723GLZUh1
Source: /lib/systemd/systemd-journald (PID: 6478)	File: /run/systemd/journal/streams/.#9:72730VgKZR3
Source: /lib/systemd/systemd-journald (PID: 6478)	File: /run/systemd/journal/streams/.#9:72738YkHkU0
Source: /lib/systemd/systemd-logind (PID: 6483)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6483)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6483)	File: /run/systemd/seats/.#seat0BHXZbp
Source: /lib/systemd/systemd-logind (PID: 6483)	File: /run/systemd/inhibit/.#1P7epJq
Source: /lib/systemd/systemd-logind (PID: 6483)	File: /run/systemd/inhibit/.#15gsFLp
Source: /usr/lib/upower/upowerd (PID: 6541)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6541)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6612)	File: /run/systemd/journal/streams/.#9:73275cj1iL8
Source: /lib/systemd/systemd-journald (PID: 6612)	File: /run/systemd/journal/streams/.#9:73282hrvxT9
Source: /lib/systemd/systemd-journald (PID: 6612)	File: /run/systemd/journal/streams/.#9:73290J1e6e8
Source: /lib/systemd/systemd-journald (PID: 6612)	File: /run/systemd/journal/streams/.#9:73291TaSJ79
Source: /lib/systemd/systemd-journald (PID: 6612)	File: /run/systemd/journal/streams/.#9:73292m0uxB9
Source: /lib/systemd/systemd-logind (PID: 6618)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6618)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6618)	File: /run/systemd/seats/.#seat0GxWHLD
Source: /lib/systemd/systemd-logind (PID: 6618)	File: /run/systemd/inhibit/.#1snBoIC
Source: /lib/systemd/systemd-logind (PID: 6618)	File: /run/systemd/inhibit/.#121GhaE
Source: /usr/lib/upower/upowerd (PID: 6676)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6676)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6746)	File: /run/systemd/journal/streams/.#9:74123KIuqKi
Source: /lib/systemd/systemd-journald (PID: 6746)	File: /run/systemd/journal/streams/.#9:74124FeGOHk
Source: /lib/systemd/systemd-journald (PID: 6746)	File: /run/systemd/journal/streams/.#9:74132CaR3fj
Source: /lib/systemd/systemd-journald (PID: 6746)	File: /run/systemd/journal/streams/.#9:74139OWe5Ti
Source: /lib/systemd/systemd-journald (PID: 6746)	File: /run/systemd/journal/streams/.#9:742205fVFwi
Source: /lib/systemd/systemd-logind (PID: 6751)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6751)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6751)	File: /run/systemd/seats/.#seat0HdLiBE
Source: /lib/systemd/systemd-logind (PID: 6751)	File: /run/systemd/inhibit/.#105C2BG
Source: /lib/systemd/systemd-logind (PID: 6751)	File: /run/systemd/inhibit/.#1ZriQGG
Source: /usr/lib/upower/upowerd (PID: 6809)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6809)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6880)	File: /run/systemd/journal/streams/.#9:74597W3sQCs
Source: /lib/systemd/systemd-journald (PID: 6880)	File: /run/systemd/journal/streams/.#9:74604UEE8Vp
Source: /lib/systemd/systemd-journald (PID: 6880)	File: /run/systemd/journal/streams/.#9:74612EnVAqq
Source: /lib/systemd/systemd-journald (PID: 6880)	File: /run/systemd/journal/streams/.#9:74613bCJqCp
Source: /lib/systemd/systemd-journald (PID: 6880)	File: /run/systemd/journal/streams/.#9:746946KZJzr
Source: /lib/systemd/systemd-logind (PID: 6886)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6886)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6886)	File: /run/systemd/seats/.#seat0vhY05S
Source: /lib/systemd/systemd-logind (PID: 6886)	File: /run/systemd/inhibit/.#1NcoS1T
Source: /lib/systemd/systemd-logind (PID: 6886)	File: /run/systemd/inhibit/.#1AwBmzT
Source: /usr/lib/upower/upowerd (PID: 6943)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6943)	Directory: <invalid fd (11)>/..

Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6198/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6198/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6198/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6198/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6198/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6198/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6299/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6203/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6301/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6323/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6260/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/660/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/6317/cgroup
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/comm
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/cmdline
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/status
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/attr/current
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/sessionid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/loginuid
Source: /lib/systemd/systemd-journald (PID: 6198)	File opened: /proc/2935/cgroup
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/comm
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/cmdline
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/status
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/attr/current
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/sessionid
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/loginuid
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6483/cgroup
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/comm
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/cmdline
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/status
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/attr/current
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/sessionid
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/loginuid
Source: /lib/systemd/systemd-journald (PID: 6478)	File opened: /proc/6540/cgroup

Source: /usr/bin/gpu-manager (PID: 5733)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5736)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5738)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5740)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5742)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5744)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5746)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5749)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5871)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5873)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5875)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5879)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5885)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5890)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5892)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5894)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6016)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6018)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6020)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6022)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6026)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6031)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6039)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6041)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6161)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6163)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6165)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6171)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6177)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6182)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6184)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6186)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6308)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6310)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6312)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6314)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6318)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6324)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6329)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6331)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6451)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6453)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6456)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6459)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6461)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6463)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6465)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6467)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6585)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6587)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6589)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6591)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6594)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6596)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6599)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6601)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6719)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6721)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6724)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6727)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6729)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6731)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6735)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6737)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6853)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6855)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6857)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6859)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6862)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6867)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6869)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6871)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6987)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6992)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6995)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6997)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6999)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7001)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7003)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7005)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5735)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5737)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5739)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5741)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5743)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5745)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5747)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5750)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5872)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5874)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5876)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5880)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5886)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5891)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5893)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5895)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6017)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6019)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6021)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6023)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6027)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6033)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6040)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6042)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6162)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6164)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6166)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6172)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6178)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6183)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6185)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6187)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6309)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6311)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6313)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6315)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6319)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6325)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6330)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6332)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6452)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6454)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6457)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6460)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6462)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6464)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6466)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6468)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6586)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6588)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6590)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6592)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6595)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6598)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6600)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6602)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6720)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6722)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6725)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6728)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6730)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6732)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6736)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6738)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6854)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6856)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6858)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6860)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6863)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6868)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6870)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6872)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6988)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6994)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6996)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6998)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7000)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7002)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7004)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7006)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5756)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5899)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6044)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6189)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6335)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6470)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6606)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6740)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6874)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7008)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /usr/bin/xfce4-session (PID: 5525)

Rm executable: /usr/bin/rm -> rm -f /home/saturnino/.cache/sessions/Thunar-2ec7c2e14-9c4d-40f3-9704-8617ab831fb4

Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 5615)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5762)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 5908)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6053)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6198)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6342)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6478)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6612)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6746)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6880)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 5732)

Reads version info: /etc/issue

Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 5554)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5619)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5619)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5731)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5779)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5779)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5867)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5971)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5971)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6015)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6116)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6116)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6160)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6260)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6260)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6307)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6407)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6407)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6450)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6540)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6540)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6584)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6675)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6675)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6718)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6808)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6808)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6852)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6942)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6942)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 6986)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/qbfwdbg.elf (PID: 5454)

File: /tmp/qbfwdbg.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5731)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5867)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6015)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6160)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6307)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6450)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6584)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6718)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6852)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6986)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pulseaudio (PID: 5618)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5756)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5778)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 5899)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 5970)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6044)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6129)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6189)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6299)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6335)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6470)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6606)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6740)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6874)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7008)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5461)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5462)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5463)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5464)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5465)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5466)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5515)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5521)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5523)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5531)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5532)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5533)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5554)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5615)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5618)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5619)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5731)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5732)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5762)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 5778)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 5779)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 5867)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 5908)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 5970)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 5971)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6015)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6053)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6116)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6129)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6160)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6198)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6260)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6299)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6307)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6342)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6407)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6450)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6478)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6540)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6584)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6612)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6675)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6718)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6746)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6808)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6852)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6880)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6942)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6986)	Queries kernel information via 'uname':

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match

File source: qbfwdbg.elf, type: SAMPLE

Remote Access Functionality

Yara detected Mirai

Source: Yara match

File source: qbfwdbg.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	3 Scripting	Valid Accounts	Windows Management Instrumentation	3 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label
qbfwdbg.elf	55%	ReversingLabs	Linux.Backdoor.Mirai
qbfwdbg.elf	100%	Avira	EXP/ELF.Mirai.Z.A
qbfwdbg.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fingwi.cardiacpure.ru	178.215.238.112	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.76.dr, syslog.566.dr, syslog.193.dr, syslog.515.dr, syslog.368.dr, syslog.310.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
178.215.238.112	fingwi.cardiacpure.ru	Germany		10753	LVLT-10753US	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
178.215.238.112	wlw68k.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	nvebfe64.elf	Get hash	malicious	Mirai	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	rjnven64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
LVLT-10753US	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	ngwa5.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	nvebfe64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	rjnven64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	fnkea7.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wkb86.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	njvwa4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	kqibeps.elf	Get hash	malicious	Mirai	Browse	178.215.238.153

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/home/saturnino/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml.new

Download File

Process:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	5128
Entropy (8bit):	4.457618060812407
Encrypted:	false
SSDEEP:	96:R14GBdYLSNUH+ZAFQrSRR6dn0tWlTDFwIfM/vfzPpjT9I3jZ/qeH2Wg:74GnYLSNUH+ZAyrSRRYn0taTDKIfMPzv
MD5:	2A2A7C34B585CDAE5E123F3C5100C253
SHA1:	E814B1B1531B25581DB76CB813C85E53E1390BA4
SHA-256:	BCA18B654D038B69B25ACDF84CFF99BF521A1B54F482F1DE2B54CE13AC219A04
SHA-512:	CEC7A3A7A6AD6C2A6D101A3BF6D89A01EBDCEB0121AA3DE1CEA024268410B39E4E9188382439C7C3FD734C66764B66B13F1D277700B00A2FCB35CB67E31996DD
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<channel name="xfce4-panel" version="1.0">. <property name="configver" type="int" value="2"/>. <property name="panels" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <property name="panel-1" type="empty">. <property name="position" type="string" value="p=6;x=0;y=0"/>. <property name="length" type="uint" value="100"/>. <property name="position-locked" type="bool" value="true"/>. <property name="icon-size" type="uint" value="16"/>. <property name="size" type="uint" value="26"/>. <property name="plugin-ids" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <value type="int" value="3"/>. <value type="int" value="4"/>. <value type="int" value="5"/>. <value type="int" value="6"/>. <value type="int" value="7"/>. <value type="int" value="8"/>. <value type="int" value="9"/>. <value type="in

/run/systemd/inhibit/.#105C2BG

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifReIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfgApLHK7wR9n
MD5:	36F097B11E0EE0B81C1F7A1091D5481A
SHA1:	28E91D5CD137C88B21381A9F6850807ACE65F4B3
SHA-256:	109EA7A0F0E5EFCAEBE9BC266DAAAC4D8B338F5E09D7FBD19744359BD3981B33
SHA-512:	25CF56AA1A7DD50A8B56DD3ECA1314444EC5B61D7F31ED4657D2553222D17A5B589465E21917BA1A19B0F421C876BD48129FBBF1E91D8D646EE7836D63A1C3B4
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6676.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#121GhaE

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifReIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfgApLHK7wR9n
MD5:	36F097B11E0EE0B81C1F7A1091D5481A
SHA1:	28E91D5CD137C88B21381A9F6850807ACE65F4B3
SHA-256:	109EA7A0F0E5EFCAEBE9BC266DAAAC4D8B338F5E09D7FBD19744359BD3981B33
SHA-512:	25CF56AA1A7DD50A8B56DD3ECA1314444EC5B61D7F31ED4657D2553222D17A5B589465E21917BA1A19B0F421C876BD48129FBBF1E91D8D646EE7836D63A1C3B4
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6676.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#145aT6k

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifY+jw1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfY+jAApLHK7wR9n
MD5:	82578E75C9234CB8F3009FB0D85E3BA6
SHA1:	9D16523E7E2E67AB80C6A33843339CE35BD8F41D
SHA-256:	9644701DA70E9DA74D2B953E2EC779A01D1D01299AB8CA454C52ADE253382103
SHA-512:	336A2166B94432D5E2A78B77E93FD8036CA4B80682D1D67847871C957FE64457DFCD82121CE93D0D8F23841E5007A70DCFD21302C49A7802FECE47BECD784AFA
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5828.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#15gsFLp

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if7YAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf73ApLHK7wR9n
MD5:	E1B1606B85A4F896A136605F78E66628
SHA1:	A8EF8ABDBE7D9B4BBA9C8A62F86FB485C99DA617
SHA-256:	BAB8F125A98C3C185F6A1A22D6943F2D224CCE7F57685FF1C930282320427CD3
SHA-512:	2939645751812D82537E9A57498B3E7A16773C5AC54C7A079176CCC5C3214333E6A151A1A757BD24FA89917F8DDAB534F5A534726C8A6AA03F08F7FFE9536A78
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6541.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#17efEtj

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifmvytqYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApff1AApLHK7wR9n
MD5:	536BCE777962458D43E25DF698CFAED9
SHA1:	48FFBA4B8916FAC10C45EB10BF4BFE63A0EFFF39
SHA-256:	CB06F395D1BA271719328BB8C6C4125EAB468012A680786D67F77DADA98EF30F
SHA-512:	F6101E77A2320CD8286BEAC6060257473683CCAA09EA6CB8F220A7E3C4DCAE30324FED368BDF2C84ED65909A9993927A09B1DEF17F0C58CC5C34067B5B6D2BBF
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5972.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#18QY1nn

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifmvytqYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApff1AApLHK7wR9n
MD5:	536BCE777962458D43E25DF698CFAED9
SHA1:	48FFBA4B8916FAC10C45EB10BF4BFE63A0EFFF39
SHA-256:	CB06F395D1BA271719328BB8C6C4125EAB468012A680786D67F77DADA98EF30F
SHA-512:	F6101E77A2320CD8286BEAC6060257473683CCAA09EA6CB8F220A7E3C4DCAE30324FED368BDF2C84ED65909A9993927A09B1DEF17F0C58CC5C34067B5B6D2BBF
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5972.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1AwBmzT

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if/vV3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf/vV3ApLHK7wR9n
MD5:	69BAE8F8B3641DE3CDACFCDA104E3596
SHA1:	BC12D904D40579AF77E402DE19423893290B156F
SHA-256:	E8E5D2A2D8B7ABEDD7653D8B415FA1F65C60F5B75A0BD49B31F50D15C46DACAE
SHA-512:	DD07886D66714313B9E64A46A821C6851CD83660EAF1B4105D381C4E826BBA46E572A0DD7C14C5BA600E348931E543B931D1A0720D6F880FFA21AF68173BAAFF
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6943.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1MES1me

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifMWq3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfP0ApLHK7wR9n
MD5:	D8F39C44AD8E00FBAC9A47FC9A5C4751
SHA1:	453FB3889E4E458299887461E24D9E7BB125A713
SHA-256:	F30735DC4CAA95E2B3197D0CF07B9ABCD4BCEA70039ABB0195E3440A53547DC6
SHA-512:	61225FD54E96BA667E549D2F8D282932D98745E5AA9C43016B629142A928CE3F4E1068330D86CF3658361EBF8B28F8165A39A36E7897DFB76F58F9671411B676
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6117.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1NcoS1T

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifGd1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfG3ApLHK7wR9n
MD5:	FF1AF9D307341F966C9605DFEF65058F
SHA1:	0C258E4EF4D613AF14745E543EDEE0EB58DD8BAC
SHA-256:	116CE133A74E350AAB4496E503F1CE20D8B316F97813969B8601FFDC811DF7D4
SHA-512:	662E6AE337F1D1BF7642294635F6A6B29E2EFCC05EC0DE1DCE1EED1B15C66AFD64F06890FC4F1119CC6C8F52A23AB93618138A1EF9F782338D3116F5AE9A26D3
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6809.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1P7epJq

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifNqw1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfYAApLHK7wR9n
MD5:	940BEACB9EE5D20AA48670AB8729F85E
SHA1:	E2912E8AAA2E4A8DCDEF8D625CC728671E88D162
SHA-256:	D112A58B36FB019C100FE699C4CE5173279115F7AFF0BBC5131D3522344D7233
SHA-512:	B0B57855DC3054172F3A4FC5BFE11AFC197AAC62BF3B8DDD844FF8D5C6FF2EDD06241B8379D438CA5EBA372699931C69B9013A9A024C1772D4F8C604F1053690
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6408.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1WGMTN7

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifXjAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfEApLHK7wR9n
MD5:	250837E516A1881068AF500F1DC93258
SHA1:	4DA5F468C5A3FC9301D2065E5F5450262E1D10A7
SHA-256:	2F2E3843A308C387BD8320103E3DAB7FCF179FC5F152A560CD19D5044CE2EBDA
SHA-512:	AA84829361D51C6A5D6008A028F0C0C95A6993189BF3682F36458F847EED7B8B6093A5B64F08A3A40966BF8AD349F2E59978B9B7916CF192589B5E083FD4D094
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6261.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1ZriQGG

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifGd1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfG3ApLHK7wR9n
MD5:	FF1AF9D307341F966C9605DFEF65058F
SHA1:	0C258E4EF4D613AF14745E543EDEE0EB58DD8BAC
SHA-256:	116CE133A74E350AAB4496E503F1CE20D8B316F97813969B8601FFDC811DF7D4
SHA-512:	662E6AE337F1D1BF7642294635F6A6B29E2EFCC05EC0DE1DCE1EED1B15C66AFD64F06890FC4F1119CC6C8F52A23AB93618138A1EF9F782338D3116F5AE9A26D3
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6809.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1do0EOM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifwW0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfwW0ApLHK7wR9n
MD5:	251BD7A53CB5024618477F64C8486CAE
SHA1:	7B57C579EC22B0BFE1B78D1FB6B36E19CB0BD65C
SHA-256:	4B4268094D7A147B7A0D38FE478A483E039A2FC94D20AB57F733965288B817C4
SHA-512:	A29B1CB77954C9C8B09FB5683D0353079885AF4B59E171E0CEFF9821C3DE8C1A4C12116F4B235BE22E0CAB68AC6E2DEB8EA60D1EE0E3611E04F1BEDA32584BD2
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5620.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1lGrZua

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifNqw1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfYAApLHK7wR9n
MD5:	940BEACB9EE5D20AA48670AB8729F85E
SHA1:	E2912E8AAA2E4A8DCDEF8D625CC728671E88D162
SHA-256:	D112A58B36FB019C100FE699C4CE5173279115F7AFF0BBC5131D3522344D7233
SHA-512:	B0B57855DC3054172F3A4FC5BFE11AFC197AAC62BF3B8DDD844FF8D5C6FF2EDD06241B8379D438CA5EBA372699931C69B9013A9A024C1772D4F8C604F1053690
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6408.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1nEQAPj

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifY+jw1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfY+jAApLHK7wR9n
MD5:	82578E75C9234CB8F3009FB0D85E3BA6
SHA1:	9D16523E7E2E67AB80C6A33843339CE35BD8F41D
SHA-256:	9644701DA70E9DA74D2B953E2EC779A01D1D01299AB8CA454C52ADE253382103
SHA-512:	336A2166B94432D5E2A78B77E93FD8036CA4B80682D1D67847871C957FE64457DFCD82121CE93D0D8F23841E5007A70DCFD21302C49A7802FECE47BECD784AFA
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5828.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1p44quf

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifXjAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfEApLHK7wR9n
MD5:	250837E516A1881068AF500F1DC93258
SHA1:	4DA5F468C5A3FC9301D2065E5F5450262E1D10A7
SHA-256:	2F2E3843A308C387BD8320103E3DAB7FCF179FC5F152A560CD19D5044CE2EBDA
SHA-512:	AA84829361D51C6A5D6008A028F0C0C95A6993189BF3682F36458F847EED7B8B6093A5B64F08A3A40966BF8AD349F2E59978B9B7916CF192589B5E083FD4D094
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6261.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1qEJg6m

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifwW0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfwW0ApLHK7wR9n
MD5:	251BD7A53CB5024618477F64C8486CAE
SHA1:	7B57C579EC22B0BFE1B78D1FB6B36E19CB0BD65C
SHA-256:	4B4268094D7A147B7A0D38FE478A483E039A2FC94D20AB57F733965288B817C4
SHA-512:	A29B1CB77954C9C8B09FB5683D0353079885AF4B59E171E0CEFF9821C3DE8C1A4C12116F4B235BE22E0CAB68AC6E2DEB8EA60D1EE0E3611E04F1BEDA32584BD2
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5620.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1snBoIC

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if7YAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf73ApLHK7wR9n
MD5:	E1B1606B85A4F896A136605F78E66628
SHA1:	A8EF8ABDBE7D9B4BBA9C8A62F86FB485C99DA617
SHA-256:	BAB8F125A98C3C185F6A1A22D6943F2D224CCE7F57685FF1C930282320427CD3
SHA-512:	2939645751812D82537E9A57498B3E7A16773C5AC54C7A079176CCC5C3214333E6A151A1A757BD24FA89917F8DDAB534F5A534726C8A6AA03F08F7FFE9536A78
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6541.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1vOQswm

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifMWq3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfP0ApLHK7wR9n
MD5:	D8F39C44AD8E00FBAC9A47FC9A5C4751
SHA1:	453FB3889E4E458299887461E24D9E7BB125A713
SHA-256:	F30735DC4CAA95E2B3197D0CF07B9ABCD4BCEA70039ABB0195E3440A53547DC6
SHA-512:	61225FD54E96BA667E549D2F8D282932D98745E5AA9C43016B629142A928CE3F4E1068330D86CF3658361EBF8B28F8165A39A36E7897DFB76F58F9671411B676
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6117.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/journal/streams/.#9:656225LpGHO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.494308433754848
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyiBD0bRMQ7WvAuqjq:SbFuFyLVIg1BG+f+MyiDe7nuqji4s
MD5:	D95210ED3C08359023D80DBEABD91944
SHA1:	453BB250E48D6FAA6B31C3D248EA0AB8D11D54D7
SHA-256:	414759C1EAA59F5314CE6B9FB47057612B5D85442AA87CACBEEFBB48F926E828
SHA-512:	9D3A8B2C1EE7244A7696DF178F8B6B7B4D0CDBB27E475451944E840DD5A123E9FC15BD94C3DFBCF8F3427CB1D9B1EEE595F41C6A5AFB9F07440BF17924B5A4AB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8afced032ac3428eb5e734809504fe5e.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:65623vuwYBO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417879466987668
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmynKncH1QHHc7Mxsjx:SbFuFyLVIg1BG+f+MyvQc7MqjosQu
MD5:	AE76FBA1A933E8BF76018D685906F266
SHA1:	32ED3A30C2CB89A7CC319FCDC20573323F6EC177
SHA-256:	948FC918BCFE144C06D9F72682854F689A88497E231BDF05379D5683B666B242
SHA-512:	53415FA45C4B3138F2AAD8DEB67E0E335D0A009C886463E691A0E4E164176FE3F6F0C6184549A6CA230D6364F39B4A398AA216B7410D263613BBDF3017945F67
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=84d5bf62d2bb47b099b7c5ecde553b9a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65624yM1BDN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.373249485183553
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5/EUQ4HJUF3zY+sjt:SbFuFyLVIg1BG+f+MFE14pUl0jtWL0
MD5:	0903F88DF970F583F632C0AF4F05FC37
SHA1:	6B67668299BA5AD2BBBFBF934C4CB94E700B85F3
SHA-256:	F707FD06D52BF1D3F1099CF15E02E67DED3BC69A74A6013997D05DC8A2F93B29
SHA-512:	7677A2FEB465FE564E235DD32E48EC41A06F39B43E94CD5224BF10881D5497207FED3D22B803ECA6D91CA76F8212EB02AC63970D21422B6034875B1F2F842923
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3617a13913f54827b9d5618b51dc185a.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:65625MLIx9N

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.450372477183591
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo5FezTDSWeTVDnHqa:SbFuFyLVIg1BG+f+Mo/ezTDlSnKjfGt
MD5:	43FB6D90545A75BD5968409C9E813699
SHA1:	53B78610E9127137EA4847ED3A4A3AAC46F886D0
SHA-256:	2F6BAA587EAE247856183F95AC87385669791A6DC245543096BD5D0F9C1D0A6D
SHA-512:	D12539347B79A4D0C4E7D4C1DBE05C159E840B553914DF965E5BE740ADCC8858C1D50930C5A4079A9C0DFEDFB260A68730354F9E95BEC9363ED62A2E363D617B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b06551f041c24b17bf7389682c1b57bd.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:65626W4qtSN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.429504452285092
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MY8q0W5xPBuqjosQu:qgFq6g10+f+Mi5xRQu
MD5:	B27D8C40574EB2EF5AD12B3B328C2490
SHA1:	8AA35E144B7F9D367308F7B3A55D5481E4640211
SHA-256:	060969BE1F012A49988CAEF2BE125DA14B64E8E8282C2D6B07314C9CEDC91B11
SHA-512:	8B01D7E9CB12A69E2534E418FC24D94F0A3204F6CBBAB4C5C1FC81A4B0D065249C0619B8E9A0A9A070DC1E4C627F02F301C3B75BECDF2061D27BE1C1F924E001
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3da8af2ce48d48d9a1330ef65db47925.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:656338SO34M

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.397296455128781
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9tRUMkyAdrxsjskGt:SbFuFyLVIg1BG+f+MaMkyAd2jfGt
MD5:	F4C96507023704FD835DE958F098ADBC
SHA1:	4BA0121073BF47ACA23D7ACF112CE76CADEFBC94
SHA-256:	9A7A086B344FD8248D49C90EE7F1047BE2B199F2FEB0EBFF74F37B33A25A90AA
SHA-512:	185BBD2B64D9D048F3AE7A8DD85D2E77E20FB45789D6714E667C383508F90BB1BE1ECD9BCF28379702D61B8722794878BC0836A1EF8C237D0303FE2B4A34488E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7e94c7444dbb4174bf22727516075eb2.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:656347q4dRM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.31856416594596
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpARfWPgf4hDnTJrxm:SbFuFyLVIg1BG+f+MKRmbhDnTJrqjtWQ
MD5:	ED83C6B114BBE015EE0A23D2D8173361
SHA1:	ACCA6C8E9AE0A7538E0655C21CB7CF223FE6FF8F
SHA-256:	B34879A3D333051C9BFCF22D1277392ADB972A03D5AEDE4B8D817294729DAE54
SHA-512:	E944A4914DC57F7DD9E6DE2FCFDBEA36B2F9B2509316C3CD49EEABCD21ED1F0559BD37928C7C7424FF3169F71CEB2ADE746AEACAACA59999EEA38C4B01BAB4C0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cc24a323f7e24cc29de8c904cc4d6c41.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:65635bkOWYM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.4164209650057975
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+ECoiRqjsjOdlJO:SbFuFyLVIg1BG+f+M+ECoRjNE
MD5:	FDC5CFC5848D80DD83E52F90DE514236
SHA1:	0E2360F9752B3C6CB8355B0D50A021D3F36E24BA
SHA-256:	F28F4699EDFF6C464B038242F1149F5FFE5DF09AE7C4C0D5CA2761FDA7711CA7
SHA-512:	93657F27B4731BBB4B40847A6B90D99778017D0E404314D4133556187F16A8629A4B314BECF557BD3E521853D5C50BF8372CF7FB380E6DE0A8118078A27F53C2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=49fbbeff944e45f7bdc807b98d040058.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:656367j0HlK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4671561478107495
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4Hi4wzDHWBl2jZcHcljX+:qgFq6g10+f+M4HwzDHW7YmAu
MD5:	A5831F3FC3689B5670EB4B8386895872
SHA1:	D22B827ED72124E4D4AC5DD266CA143C828686E5
SHA-256:	CC8FA062A9499C3470B90980B9A6C6C5DFD445FF1CF71B71B1B34342BB21EAA8
SHA-512:	60467C74F5398D82241AE5696811E7638C9E83E1ECC3F2DEBACF711397067048BFED116A8FD18FD442965EB9113E16B5E8ED79B16D0B0FE5DBB108E817086539
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2b961df25da24d809d106efb7dff8fff.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65645rULCgO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.380697263036506
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/hBcDQRUdHp1BGt69:SbFuFyLVIg1BG+f+MEMREHpLGt68jbVC
MD5:	B0B4ECF1C3F90E802F5A51D131799AE7
SHA1:	C8A5C5A92E837DEDEE28F38D0EE815C42105FBEC
SHA-256:	6EBFF4CC9A94855E28A891B4A20DDF7CAA06E5CA64035E329B660A45D9A99CF6
SHA-512:	CCD71C2FDD95A1C5B8ADD7752DF3F8E88A66A066208F96BCB0B474E0E43E3A78707F7CA23AC31E44ED06B7DEBB73CD88C750EC63B555F7BA4D8761D72B3F9C5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5ccbd9c1bac5418bab4882146dc21acb.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:65646opyPcL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.339242009256138
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr54TXdEx7Nr8Flsjx:SbFuFyLVIg1BG+f+MW5edjoa
MD5:	793A4135DB55457B4FD7DFB03E03E51B
SHA1:	1382F78A8F1775BDB82F0418DF33C4788E485894
SHA-256:	8A917736752A0E36616022A5CF7755F3922137B92181C47F5132B13532DA5DEF
SHA-512:	E8C77B242BA8D22DA5F417DCE1FEAD3A17F63FFA9CEB055408C67BA49F11B918689DFA856BBEF42CF2BE4739C6DB7D32903FC87BE3B2056B7575A5862329F0DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a55aca4628a14454811ecd5513d62f50.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:65647Mq2qNN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.454356455521278
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpfDURKMnps2lsjs2ALl:SbFuFyLVIg1BAf+MR6KMCZjNALyAZD
MD5:	3795BF634625206D2BFDDD44C090A9EB
SHA1:	053980AB32CB0A8B3CDCDAB168EA2588A2ADDF33
SHA-256:	51B56804A53F7F789481992707252FBBCE648646BB45A01777ECAD11E4F8BE4B
SHA-512:	E1505453953E12BFB01690E83807243342727E18AF8F65015EE2859A8F9FE08431FF97115D2F4E3B017585D88036915F64E425C0AD4B1DE2E70EF0377F19FCBD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cdafe77f18624ecf84f7b8d52e559093.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65648oS0iFK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.421657926868813
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MolbWQA1USUbRd2rqjLkGq:qgFq6g10+f+MolWUfv2rbT
MD5:	52CA1B2916A74575B163079BEB3DD885
SHA1:	CC92B049EDA68EBB3A239A6A591C7513977F563B
SHA-256:	16805E4981833F95FC2BEA84A859EE151B3EEF7D2AFF96DBA1B817EDCA3D0C2D
SHA-512:	4BBC579FEC95388CAACA60C15BFD0C8F40AC8D11742E42D8A0B9FE28739076DF2083B2E2A838B04043987037B1D8AF34D0529E2A801A5EF083C355FD7AEDBFE1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b1db9ee6235e4659829ec728c674bc47.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:65764yT7cTN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4765671836878935
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm57wXDBSqBSFBj8js2BI:SbFuFyLVIg1BAf+MOdS6MIjNdQIeXD
MD5:	66D2CF9F94029B5422DF40F2A371AD04
SHA1:	9E781FBC844DF435BB876D2F85E8F87829B21246
SHA-256:	070C0E9896A38FEB2C1276F79B8E7FFDBBE221A893DE7FCC4C1F56C0763929B4
SHA-512:	ECC8E98D629D77DDB37A2FC1D11BF5051E4263CFCD0E18A9C7A80C5FC53165B988491F9EA4BC8F645FF46D08306F1313413B4A522034BAF901DDEACB620722B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3cc2fdd5a9e241bf80d7c9bcd72426d6.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66287ViPYuR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.425186321900642
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8TB2wXuRmWM2josQu:qgFq6g10+f+M8TBewEQu
MD5:	2E68664AFFE2FF17E1745BBB4EF15ED3
SHA1:	3480368F75143FFA7E794849171573239A432827
SHA-256:	0184607F22DA72E01F6487A0635EC541390D9796EA7CDD19C9E7855356554F14
SHA-512:	528E7F92BFCF3596043472A3768D269C16086465472957F3A5F73C8C4E9C79766ECD9579016948145FD72C18092817C441DC5DA9FAD9348DE56D8BA5806C79C1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=55461c8ff6e64522ab4d53a1208c530b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66288aYyKXR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496920154204581
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MO1v8TR3k9jZcHcljX+:qgFq6g10+f+MkETNomAu
MD5:	936A4F0D265573828014DDBF34BED077
SHA1:	71BAC77B135560A14220011EEB2FB494B60FA3CE
SHA-256:	CC9D66D8E477B060E29FA18296BC493121E35495974660653C10CACA95193510
SHA-512:	EDB24376A7EC85B118BBB3FC5B4B7B864E4960F10CEC45E488869185469A482D36F119EE585B44244B77CD90F8334D4F2129BD4846396F79E932742A3F64077F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=96c7caf3836f46aab64cc4b850af8459.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66295MPauLS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.303465360296512
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6nQzoAXW0BQGTjshQ:SbFuFyLVIg1BG+f+M6soAXjJjtWL0
MD5:	895DD2743525749C480A4651CF006A27
SHA1:	7F91EF8362CE3C7FD3EECE35F085406A66E8223E
SHA-256:	9D263F2F487D3BCA7F598491EA9B85F5A68BBBAEF6688FD22B466E7D9D37EE87
SHA-512:	EB05767661E5140747C9A18E0E06739BE8851FDFE9DC9842ABEE22FFA52D30A2FBE067F4DC560E16B5CF2B2F3F15E073097416578C94E88FC6359F52B2CCD219
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0715a580e9e740ae8033e16d659191b4.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:66296nGn7zT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.390269285602327
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8h6c37kdAv8jskGp/:SbFuFyLVIg1BG+f+M8p7UK8jfGt
MD5:	C0B82290EACBE603EA7F04CB0B69FC95
SHA1:	C5FC69A03C42BACF607DB24411A7C5545D5C9CF2
SHA-256:	62F5489734DDBAD2A7960A76450FD6BA4AE6C5936B22E68D76B25E4FC2B70033
SHA-512:	8A820BC1A5AB9080ED53562EC30B375F053B1603EA147B70675C4BF9DCCA0B08E4716B6DFE2EFE9CC50008D54D261D3FB195FF7C411ACAE9CBD28BC386BC5666
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60e2dbe9c82748bba7571c9efea7ba8e.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:6629752fBTU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.431057189718315
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7QAfxKxdnevswsjsx:SbFuFyLVIg1BG+f+MEAfwxdne0jNE
MD5:	03CACE264E5E83FC35A9FF38B8413EF9
SHA1:	305ABC8EB715D275407877FA261332C297DE183D
SHA-256:	4A130E34160DF5D77BBEA05F4D1A7D62BAB31B5C86BC7024F81E3CFE52E3B6F8
SHA-512:	04780DBB93B1FFC15FF8B3CA19FE50A2239DFE974765DA906B00D2167DAAFF8F9EDBDB8DF1E624C8B25FBF1AD6245EE366905D073BF0FC88CDF5421D7016F772
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1cb93e66f96147a19f135cb1c8c4dacc.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:66298mx3iyV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.366737125828827
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6CEW3AtSXLhTjbVC:qgFq6g10+f+Mn+tKVM
MD5:	52342C6BD1DF5F2231E57F71FC0746C5
SHA1:	BEEB824E3FDC350C652B2BAEA43F76C324AD1886
SHA-256:	C61CD4F93D474D834D9B43B3920B32B4DA1B32A1156AB3D164B602277B6B58F4
SHA-512:	823F492ED6AF4B77DD98F15F1E0E28D9E74D3CD258631173B4F1F918D7AF265922C7D0D448DB478135F3A0E4530B8DD0EB1374EA3345428537296DE1CB7EE1EF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0c0a7b8631b24c64bd00841cd6ae7ce1.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:66299Z4UJWU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.450163195896344
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpmkHq4GdvQcqQR/Xsj+:SbFuFyLVIg1BAf+MTKqcqQRkjNALyAZD
MD5:	8B8EB1D380A4BE9A8A14859E141E4658
SHA1:	EEB0A17EA4B7F352DDDBF45D24CE6DDC561B2F2C
SHA-256:	871EDBBB5861980C0820D15DA06759ACDF54AED104E41AFF78E10C3746551BC1
SHA-512:	D6DFDA8FA8F9CFF8632329C73837E273885F2E80AAAAB5AD1780AB1F8FFA4679DCEEB57A261C537C4F607001C8413FE7804FE425511840BB5B0E3F14350F677A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cfe272bd9a184ebc8f7e59a10a645682.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66300CkOKQU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.379283260549633
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5xGURkQARORmDW0wQ:SbFuFyLVIg1BG+f+MvdkQPmDW0Zjoa
MD5:	66BA75670B1AFF0D9633CFE9668CF8BA
SHA1:	CA1D4664D38D2918111422FED24424FFF6DF8C95
SHA-256:	A9DBAB311107D99D01D157085479A336F781FE747E6F925194BBBA2EC0338183
SHA-512:	FA017363B5D5E54525BE0D310460091E4DB3DC55A6E5ACF5977BE4CF84CA263985116EB065B7078C228F6F5145219FBBF053088DDB11BA992FCECDB8FAC150CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3088fc1e3b2a46d7bad45e4f72def263.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:66420Vpr9rR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.489150226493835
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8xepqf0eEwxsjs2BbQL:SbFuFyLVIg1BAf+M80pqfVjqjNdQIeXD
MD5:	804CF6231F4636D77F5234A86F1058B6
SHA1:	2007B24449468689132216019847352FE238BC8C
SHA-256:	45FE85926B7F3E26E9698205A617B3E33E5C9EEB36B0691FFD5CAB803FBFFE1F
SHA-512:	76D5F462991B49690D0D23E4ACEE39691477EC1539CE1CD767A09EC93EE8B110162FB306AA5687DE7008016C3E6C6EFD7B8C9F4B254FD034E8F52AACE6ECB6B9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=69ed127facbc4e4b954f888748896941.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67965c3cEeX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4266849109582935
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu5ANA0lHxEYTjZcHcljX+:qgFq6g10+f+MLA0dxlRmAu
MD5:	41F2692BB2E0E38AC6D09B868E2052B2
SHA1:	0A5BB3C7514CA8192486449369E1BED49B7E9E13
SHA-256:	49A229520DAD98E009AD16D180C1D488270E216B1204FE33C27236A0A8583659
SHA-512:	3959D6A491609FC73BDFB5D0D6C4813C11D10E0B2F4F565B6AC28E0D7C82DDCAE7B3B315C9FB8CB052CA7792B707F49BD979BF3D248B4EEC374C40226E25EB60
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d19928134b114ead812beb22d7abb9ea.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67966iuTovW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.403370174630422
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+WaH37TGsjskGp/:SbFuFyLVIg1BG+f+M+/rjfGt
MD5:	98D99D70BA43804B90456B3A94C2D840
SHA1:	C5F1C14C84B0B782F4F13FA4DFBC0E06B15C6D96
SHA-256:	5237595A35D405D052F4C4FCAB7E8FF0A59EBAD0AB2BE43F658BAC512D424FB0
SHA-512:	8D0A06ADDBE2447C7855BF7AD8C9DE3A4F2280259579C0E83A0F374D73595E1D172EB7BEC7758B0CE7280C2FC48EA4AD2E69F7758821BA2AEA4FED2D2D714893
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=442a0fcd69324be6961d52066e717263.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:67967hPW7WV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.398110008724595
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpVOlljNrqjshQJWL0:SbFuFyLVIg1BG+f+MWlj5qjtWL0
MD5:	E43D64C8AC452B99129B1FC27D7F9774
SHA1:	0F3CB19B239B7CA299D77F5AB5FAE5FA2EDE3182
SHA-256:	1E13252518C2F8A95390A487FAC541D62A623BAB9038591CB161075A70F673C3
SHA-512:	805DBEEE868F7CAB3F1470DF9F8A7F23459B08DD51A3A28BA688CCAD33A2D720F772CEF9303546B6F35AD4F4FE361810DE712929580F84A12B745BEE1A2A245A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c9fcff9d735c44b69cbc32c3e717d855.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:67968NfJIVV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.407546300381787
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrzoNGt4BjGS02rqjx:SbFuFyLVIg1BG+f+MwNU4BjG2rqjosQu
MD5:	2BFC3BBE79F66A2EE625911D38710BDF
SHA1:	B33843C3ACB8BA6FC22D7CDDD70B79904F9D09DE
SHA-256:	6530A7B871CC89FED8FCDF567A60A52CD99B07FC4D7BBB8FDC8FD161100D23DC
SHA-512:	B56E5118435B8FE02A56550E8B0CA6DCBC23093E5974CA5456568F8DB84971288145D82219D926009F24A828A55C6C60898C5F077CAB597486D21FA1D3674E32
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aed675d966ef4ca197f36ab8adc30567.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67975YmUkxX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.37570805982306
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmur4HWTDUVDZjdAaji:SbFuFyLVIg1BG+f+MuKDfASjNE
MD5:	EBE38A543895FE6AB2ACFEC135BE772C
SHA1:	51B02D662A14A5A1EAE0FBF09E8A5E7B85D088D7
SHA-256:	5DF6812C598E6B88D64A85F4BA87583C7AEAA73C465119772B610F6A16B4E733
SHA-512:	1D81A0C33F73DE32B2E18F84E3605828B4605ABACD8058F21353309986994F799FB0E3ABA4D9A16DA7E401A83689966AD1032AF7BEC8F5ADF15C2D8DA2CA0815
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=df30a1ec57384f16adafdf6ec1ae7807.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:67976ykqgXX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.429681867816829
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpzddzJWTjshTjshKe:SbFuFyLVIg1BG+f+MjVZjbVC
MD5:	E57F66B9C8E6FA7DF29A7A6D4ADBE620
SHA1:	5213E109108AA02DD6C199E2B7DC13F787841421
SHA-256:	ABAA6E56961FE509FB7373866D98BA148C9FC0BD807D8DF5130F2B3082D08976
SHA-512:	801D2EAC305947209FAEDF539A41CE65FB7DACED23435E2BB89AD99D4AD0D9B677B18D1261CEE41F5877F12745C6CA020CF4370D1A770B9504BA39566CA6CAFF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ce38832971fa4151bee34c866b970366.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:67977lhkrfU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.454522807444321
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M+ngcFz+hTjNALyAZD:qgFq6g1af+MqpFqFIZD
MD5:	9AB8E8522256F651981DB7F97D8C645E
SHA1:	449E0C561D1AAF5A6ADE5619FE2080CD3C80629D
SHA-256:	760370D40CE5E668622E9105E0A2BC5070315FD93812388497521743FCB8F9E1
SHA-512:	12C4A70CB0B5768DEC8CC1A313CFA9EEDE8386B078D2414D3F9DD54A7B191D8F92C2355CFAD0CC824466B0C8ED20BDB1FD25FB3711215B4A1D8DC73CDB5015B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4a727fbd5bed49398b0e02db608761d9.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67978n4mvbW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.346358294800828
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzYzWys1DQayWrqjs4:SbFuFyLVIg1BG+f+M0zy1WWrqjoa
MD5:	1BC53E743BE6AD9BFD2DDEBDE59025B1
SHA1:	8D592F1A4D6F9805473E0D296045ECE422598DC8
SHA-256:	4B3519F359253A616F1D1B4E9B7FB959B2B56730AD1D978A375EFCDE0F6424A7
SHA-512:	FA245647ACC7900116D6CB2DC057348C844A6C6290616FA8AA85B712B61052DFD829605BC36AE5302DC912ADB990DB2A2E32BBBA95FDE6984ECC6E116D0A51D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9782e35f35da4f6ea16d9af5a373e305.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:68098uULAIU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.369813658473017
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuzENBRaEczc+TWtsjsd:SbFuFyLVIg1BAf+MuzugcChjNdQIeXD
MD5:	3FC452E38033F4ED9572E014191C47F7
SHA1:	C97D27DA46CB58E9592BF749A66A419BA9A0538A
SHA-256:	F7BC2E9FCAEC5363B20FF9FA8556DD8BA6CFF3F980D93B78CFD3454B919DBACD
SHA-512:	2ECCE3BCCA3825B045DF173A384AF2B673BC2F516E7AB0CD51ED8C989AA0F939650068D005ACD738E912DA975805C42BC0813B76E7831C17DBC20FEE30E20D29
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=de0ca3a4d41e4b4aa9db1e901292131a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69202vWh2ST

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.393428288298681
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvlbnRuEmLwsjs1Ha7:SbFuFyLVIg1BG+f+MtrRupFjosQu
MD5:	625B62436C4C9CEC991B102E5ADA0C44
SHA1:	A7DEF164E88CCFEAB6762EAF7E0B4791EFAB528E
SHA-256:	D510D020828B08D86B85EA941AB36B106559D3A7B50745CF5C43FE2CFED738CD
SHA-512:	4F1F585CA5759FF9F9E5EE11494E2CEE8233E78252B9A4F090D299A9D5B9EA7B1EB2BB74AF50544326E5AF7E5B6423D3C1EF9BBA80D6CFDC02CD6961DF19F3AF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e080db8b954d4271bdeac9d3af5dfb7b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69210DvAyuS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.452827410615171
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MeN/JBRTIVb+TjZcHcljX+:qgFq6g10+f+MeV9I4RmAu
MD5:	0CD6ED684EF07E7112775DB532BF4520
SHA1:	08B6CE24AD6BDD5052A35A26E26C36E01ED6C29B
SHA-256:	224815F4923DB6BE40076D29A7E3F082E34376074D82277A7A920C9BE24416F2
SHA-512:	0F179CF3200472E4E44D15BD26C7F4AAA10F1FEE0996C3DCE1BF3C4D179C5A7BC24453C857E8A626D994A7A64F1A601EE553FBFBF65145D05E10480DABB22A87
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=392b07e3fe4e441d862ff0c0adda4b02.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69211i1deST

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.418225694423675
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/hWuRXyQXAEED0Mqa:SbFuFyLVIg1BG+f+MZxyCAEE4jfGt
MD5:	EC00699F5FE14F11CAB488892A66AA9A
SHA1:	EA7DD301B304679811E848F2B3D8D924506792FA
SHA-256:	FC13FF1C2EAFF3E1906ED3760C8BB69BFC672F93BADAC579FA242676308ACB9E
SHA-512:	3FC5620183B7A30EF5B82443ED29E68B4656294994F9B6170605B75FF5CB758E4D4F853FCDF5D081F6385E0551B82C8553C9D51907AEAFBEFB56249234A4C6D2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5b07e63f52714420be529ee268cbdbaf.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:69212lLywCR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.35934960192777
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+3hdpTgGyhTqg2jsO:SbFuFyLVIg1BG+f+M+b9sejtWL0
MD5:	E5534646C1B05976B4E6277A22C9C20F
SHA1:	314B585F0829DE29E7A78785EAEA06B899D87048
SHA-256:	CB54BE62A5A8C7419D44683E7BA0236DA44885E8F6CC9A57A5374C2022DC49F8
SHA-512:	1126E4E2590B8D47BAA4122E134D4FB0EAE87E0C0AAF4B94ABAFF4B897BC5C623133F1A71801FF8286AE3DB37F8785A3EBC9614024B11131EC376366855048B0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4684778ace14484397bcda49be2f87ef.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:69213grG8LR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.414432726381396
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoD1bYcck6EDWCETl5:SbFuFyLVIg1BG+f+MoD156EWqjNE
MD5:	1ED5B0B230E3ED8B874417354B02C59A
SHA1:	4CA2DCC81611C9338D436C6E4A5C128418C8F169
SHA-256:	07B41213B209977DA186DF7CFDDBFCCCEB8D01159FC42FA9D861D421E6261E73
SHA-512:	C1F4E1CDA6EA04ADC2955536DE1915539C1452EEF22BC66096BEBB55A240262595B1987700A0AA70E9A734104AAE04B9281B59B82F5DBFAFCFCD08D9A0279128
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bf4579a55bed40bb999049af3ea1c63c.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:69214IB015U

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.37879307022888
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoH0mWOHBWSTASRqj0:SbFuFyLVIg1BG+f+MoHUOHBVTAS8jbVC
MD5:	C06889EDEAD6499C5A49ACCCE1AD83CB
SHA1:	20F620030F63DA6E61EF392116517C5CAB907355
SHA-256:	914CAE7BB9029C4783B90338A29AEC4C6A136D5447830419952E9BFB7FA5E421
SHA-512:	506A4152D2B66B8D1A36B635F56B263E83E38C1DAAF5CA91FE7626909C718D76AE30EEE8DE10675DB3D5E4E6E5262D9DD1DAC8EA2F3357223BC312AE0E72ABDC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bb0aaeef38304b31bd375ce28046aca6.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:69215mfp8aV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.462972509876786
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrNjCKa0XXkJkwsjs2Ax:SbFuFyLVIg1BAf+MpC4EKZjNALyAZD
MD5:	B3729E18EA5D290ADB6609615EAD18F8
SHA1:	5A6A727D169E5C7D3C904212782B994FED3A7BF2
SHA-256:	7454D9B8EE2033D18300104BD8704DA59F7D2D5B20F19A654934F4E6706365AA
SHA-512:	98E81349FFBF116020D5048907ECC9E4C2D441E73EAFD99CF1776CFF3043CD908FB93B30F6708AA46523BA9ED1C06B1C70A0A8E89D4E583C5CEE0CA55E9618B9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=af497829ec404f50b67db472290551c2.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69216kWnIhS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3621133531536715
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9e+/c4n+v8js1Han:SbFuFyLVIg1BG+f+Mwonrjoa
MD5:	187BE98C23538E278821AC18CFE6ED8D
SHA1:	75796718BF8EFA810D9F1D9776E97B47EDD5D013
SHA-256:	5FB013C88EE5C6C2A0456E16F8AD3BF0726B9A0BB9A1675395F3795C3B2E92DA
SHA-512:	F56F2E867CD304DA3AC64959E67420470DEC7AAF17EF9965E08A1C6E1E0D557223590FA72D1F8C26E0E7CE44E1E33BBE529244CEF27049EFDF4B3F34533972D9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7918016549e84042bed07fdd93a3d027.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:692248e3yzT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.453558875762429
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MaWUIxuw9MqjNdQIeXD:qgFq6g1af+MaT63p2D
MD5:	0171A8192523C075A42E213F8E0B552F
SHA1:	7CFB13B0BB337575399AF654B61D76D92F6473F0
SHA-256:	E441E187685750E554CCB48AC842EC1152866E0D010DD1DB499F0DBA095E9D99
SHA-512:	5117AA9708676B3E8A0541C607D05950267890033DDEDFFF18D2DF4A0DFADBFFDEF7292451639C6E24E4744BA806196C12AAE0CFE8BF08F2DDE2041782B76006
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=78731cf4d71b4e4eb5250f210c2ff4f1.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:701881PEdAQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4857183658104445
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8rrDlsrkQDjZcHcljX+:qgFq6g10+f+M8jmLmAu
MD5:	6E6ACFE6F6A46A6464D117B8C4D12E9B
SHA1:	9DF70018C0D342D124C8F658438B4C0F5B7DBF66
SHA-256:	B1BE7AC39C62F19F74EC4F5B27510776A9226A7DFA662532FCF44304C29E5062
SHA-512:	994F688EED6AF5BD94996C1095A96EB142080ACE56139D2312A617297D2DCC63614C046BDCA46CDF069A8189E58BBC5BB4706C7533B56B78258C55B8C4E953EC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=64c9158434fc4df2a38c839f0d34bd5c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70189HlcURR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.415517613633705
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBbZcHOCVTHRxsjsf:SbFuFyLVIg1BG+f+MoBdcHfVTxqjfGt
MD5:	6D8BAD46E0EF3AD7885C301BCF977630
SHA1:	77A4F5763F5974D9865907A5E64BF1A36885E19C
SHA-256:	F3E679FC9D9E0346F7D7218528ECC19B5D12A7001AED823BE3FAA890098E2207
SHA-512:	3C6291C026C2AC9E6E6D5B3E32645607585FE01ECAEE494F9D4F3D07225D323394D02F322BF245824AE617C6B680FA8392A55B4A359AACDE3ED10EE5BB361846
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bd620d9899ba4a43bf52062c8c2c38c3.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:70190rCWAqT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.376439615527005
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuJDBogeDLN22jshQJ:SbFuFyLVIg1BG+f+MuNegeV22jtWL0
MD5:	CA445BC0216CBD404E52BF3F55922F6D
SHA1:	5AAC19827CF9BDCD03A1CA6E5CE9D72B151EF883
SHA-256:	92C0BA6E2C5438C97328EE234115C618C013D0E1C1E92A652CD25DFBEA71D206
SHA-512:	A42DEE3D6667DE7B612DA6E7D5976C7979B1EFC63792B626E51DB3D8D8B90F0AD26A962003065594386FDD61A512D42706A8BFDAD79EAC4AD2670E23FBD6D56B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=df0bfd282d834c278f6b15a1bff88b49.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:70191RnbVUR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.452488179168291
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9fSQWHpFL4kfXR0Zd:SbFuFyLVIg1BG+f+MhjAL4C0josQu
MD5:	47F7AB984A67686D5F0B9093FA81E513
SHA1:	BEA588B0419EEBC4094890CF827BFE8267B55D0B
SHA-256:	32A648C2FCEACBAD683133254B0673DF99ECDD3D6A316568596766D1319AD7E7
SHA-512:	F2FA97DFA952DC10B37736ED519F93C50419EC64ADC458E237CC59FCF7537BE5E42654C7C3C56A08EF26A7E0E157AC20CF47B14DFDBF8C8DD5B399A192B9589E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7995b375cd22475192288fe8ba843124.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:7019881yTER

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.422304965222462
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+XKXRdDiAJjRuqjNE:qgFq6g10+f+MjCArVE
MD5:	105D7678B9EB8188C81235DCD3C457F5
SHA1:	9019416F8AF04CF4904632A2A4FFB33E7DA6C54F
SHA-256:	4D6A5870217DE4E6C9550D642C8EEB11AF46107334CDB84972FB1D5B823510FA
SHA-512:	09C3386DE07214AD3C9813C7A627C111E265D8EBFC88B2D696D8BC49BE7E65B41C64BBFCA215736B633E34FD5AC3009C0FBAE4EBF83F8E3F69B9F6B5A35D97C8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=43c2eb0ba16248febe46161a4371ec25.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:70201EyCeMQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.393126928434764
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoehsqE7CS/F4ZFrq4:SbFuFyLVIg1BG+f+MoSYi2jbVC
MD5:	D360DD09910260EC4B3E1FAEB5B6BB12
SHA1:	8C729819BCB601B4121ECB73DFC9E08D1EFF7A76
SHA-256:	DEA67016C075627DA579BB5AEDE03C6447228AEBB9811C1C5F9AF94A5B7D4931
SHA-512:	78D6F8F1A6C358F56392DD29ECC6C4DA7FE7C977FEDCD69E90E96ADB4E07D8134A3C696B6BCD2EC946E6AEF81E4833ADBDBC83BC6FE384CC6AE47AAC1EE78656
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b36b770c0ea0420f9767cd4fbbcdf8dd.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:70203OXTIuR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.397612898564643
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M/CM+ElPMqjNALyAZD:qgFq6g1af+M/CNEPnIZD
MD5:	E8D4ADCADB1191C07CD5D3C165E85898
SHA1:	CE4713D2B4CD62D7B68750E5C43F10B9CF78A09D
SHA-256:	2BA2776D385AEEEBB3B9331DE026CB6E481C0B0E7A6A8A0EF0F7AB3BEE953671
SHA-512:	8EB5EFE43F066A251E6A3FCD273743A19451252A935E961DB92DD329487D0279F69A8CA4018ED696FD45906CE635773AEF506D9AE237049004119FB8E5A2C226
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ea1714cad5b44901a07ba6020ee67297.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:703060NNsJR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.421654610758356
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6Bf4LlEW22jNdQIeXD:qgFq6g1af+MifTXM2D
MD5:	591A08E01B20E144E20E48D3E42F9B75
SHA1:	229D4FEC7A7A14AF86A347AB1B54449CE250F16E
SHA-256:	05FE4F683EF2B0ECF07366A21CA634F2336656D6EECC127F8A8A155FC572A4F9
SHA-512:	65C9DC370E1CE2387F7F446F212D4A293DDFDCEE3D5AEE97EE2B2C635FC14A7478371AE81B7EDC501367B1AACF122A269430B323E13AFE2D5B80076B1D259838
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00ff088ac3aa4588a41bd191a7108f24.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:704936rOgJL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4987680498215825
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MYGleU6UHjZcHcljX+:qgFq6g10+f+MYGv6cmAu
MD5:	EC4C237B8A6E067EB560091334BAA146
SHA1:	D9EA6D124D5F3329289C41C27AD5B4097384A66A
SHA-256:	5DBB92219EC016F0D186E038EFBFDE5433EEB198CB0DCF9E60717A15287B60B6
SHA-512:	5BB0605D2089B6DAC7859459CB42761A0DC21579DFFD2E1432FA02911B41C0F1F254636AEC5380E664C6D82EEE8409E453BA3B9AD2228BE38086FA0867ACCD67
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=56dbf74c7b9f49ecb8b98a2a058d505b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70494yDyr3K

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4567289548135935
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4VcaQVBuQ8K2rqjsc:SbFuFyLVIg1BG+f+M428K22josQu
MD5:	FDA414F34149FD66946DB855A8A12A5F
SHA1:	3B6A6055AA3085EFCBDFAA0C6254AE7B2B5462D7
SHA-256:	8450A69FC8FC418B29DEFD59851229CAF8BF12F62EDD07DF36E957E8B96E15ED
SHA-512:	A98957D84652B36614559FBEA653085817ABB70D737FC1E97A3CE035A99E28E1348FF3ECFB01AAD84BA84944B23AC0F81A7682E10A34AA0675030A07C5E5956F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=28292f35056a4ff7962925a034958c8f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70495W08xYM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.393126928434765
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+VrRcYRiKRUF2jske:SbFuFyLVIg1BG+f+M+VW8iKU8jfGt
MD5:	B2A7976C9438C499553D749EF26FF0DD
SHA1:	2417785747082FD911C63BD3531514A2984608CC
SHA-256:	83B7D3D0C9C1BE164358D5AAA3900DF2F1A17E54820843FF7EE2C22179BEC26F
SHA-512:	39EA85231D722CE698C9EC73EEDC705BE3F2F8EA3303D5A8DD8A091464B575E11C937EF83418D9B4CC89752A1CCA6114D4C7C7CAF689387C18826C04CFF0DE72
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=47f1f1faf66f4f9dae14ebc13408753d.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:70509dtBgGJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.419946022068894
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4oMnRSJKU+XD0js2ALl:SbFuFyLVIg1BAf+M4o0RSUIjNALyAZD
MD5:	B6C9C821EC34D2705887E6CDDAE7010C
SHA1:	0CB047B64178B3105B60294F9811F08B81E1BB51
SHA-256:	FBA7F04B79E39A5DAF7EBE116B0A48ADE0B5D96C73B12C4622392BCBF9BDB718
SHA-512:	2FCFC18F34206824B8C5C1A5EA9BFFB9420074B91BDD189B49E1BA15871D5C2BB94BC7FB482343DC4C9BCB7C44202B946EAD1B76751D24CAAD0069799B4EC057
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=23380a5a78fd447abb38f310c0b74a2f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:705950EUDJI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.490679534534753
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm85EFhGhcXjDRWFAuxsA:SbFuFyLVIg1BAf+M8r7mTjNdQIeXD
MD5:	5F4490629264D86E1297AFAE9F5C9BF5
SHA1:	27193E059BF6C45E1553B7BD4F53D90801E267CF
SHA-256:	191C33052D7F641EF3F3DB829C8489F4BF7E03A77386EF6C3FE7ED400BB5EA62
SHA-512:	236FA4960478E09215CC2065487A12A350F4DBA1108444E2CBAED3452F198A62904DE3EB190F31AB7F3D6A1FDC9B520E9AA69FA8748AB6285E0D6743E544C6C6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=68c5537a58394bc49ddaf3b842bff430.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72706awnQy1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.452859570411992
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Myh4XGWEpEAI/9jZcHcljX+:qgFq6g10+f+MPiwmAu
MD5:	4E37FDAA74579C8FC403FDFB7272A146
SHA1:	410E242882735BA592656907ABCCEB318582DA53
SHA-256:	5A66993AC13941E0DBE001F3462321458A818BF4BE4A4B7F1F3DD23FC1D2083C
SHA-512:	A4C5370386BD55CFB37C103021A7EF20B821AEEEFBADAD50F8399DA1EE492AAF542D42D5B95266FC1F16B08BA624E05A497165E4E59005D1364A2203A3F558CA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8e741d14e2c34b7b85c0d5aae2a45e09.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:72715n9nRq1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.387666365123722
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5qGAz2WwAPQ0jskGt:SbFuFyLVIg1BG+f+MBAzxwAPQ0jfGt
MD5:	7FB7C3AEE86EBE026F9850BBCB978D0B
SHA1:	16598946B3025DE4AE0BE6E50646DC3F8C003DDD
SHA-256:	ED60A4D90DDDA8E15DE5AA7995A49CA1D42D464A0375492E027EB02009FC1E49
SHA-512:	31767468528DFD9D2EFAE9342BAA000F232DFFC956C7B47E2AF3F7A6600E5A43830C79B11D0F6478003D0F536F1EED9238AF25EE07FEAC7BCD83C8CBAF3B0D27
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3f74e9e1423e44f9b39de3a6c384467f.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:72723GLZUh1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.414434812291065
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6lyZA771gWG2Y2lsd:SbFuFyLVIg1BG+f+M6I+7K22josQu
MD5:	FD562444391464F40A7EA6D3EEAFB329
SHA1:	13E5AAD52AC4A77B18F08F12414E116D6024E50D
SHA-256:	528DE9E9659E11099992CB4751427C6210EB7DDC747BCE0D2F65E1C408476476
SHA-512:	CBC82CCC41AE3BFF99A5A7E9EC95FD22D0546714BF42D18E016BAE3F7F7FBBEB642028FF10695B81BA7F9394A79BD683F4EFF526E10B903F5EE3729D240280E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=091bfc801ee04454abdf53183cff0162.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:72730VgKZR3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.449977005337735
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8nWQP857ZjNALyAZD:qgFq6g1af+M8n/QIZD
MD5:	03943FE5B8BCB503844D8A8394C72114
SHA1:	FC791F8169FE989CDA9A01EF20B456CC592547AB
SHA-256:	F87BE1D9A97E266BE8C8E33EE33543B5F232E96F1D5CF18AFCBD6A4922AA217F
SHA-512:	E438AC9194058EFD1E989F2A561AB6C86D99A034A91EA0D3E71AAB6A4AB76CFE8CD3D1CD34876068722FB20E38F8C4AFE3BA3D6F07BBA8A590E5EE2571924CB9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6e7452f525534658bc90cf900339eb3a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72738YkHkU0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.489150226493836
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm77QrQGHRTlqDDvsjs2y:SbFuFyLVIg1BAf+MLQRxljNdQIeXD
MD5:	1C75B51A102F8F93054F58AFF0763518
SHA1:	E0036D149DA27E6685B889AE74AC1C6E9D234415
SHA-256:	A91AA170FD48C711F489595FB073D110BB4F9AB2BBC03BC0ABDD92640945AE5F
SHA-512:	5E3C44EAC68158D5730110BD35C2E8E69145B4B4783FB8328F1E90DA4064E98A1019B00A90A9FACCDC266A41824E596C88B84A59C5AD86C4682F7EF0E13DEB89
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1485d85215cb469c82457225de274f3a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73275cj1iL8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.39618755879601
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpaRpFBPHUCXcvc3IJ:SbFuFyLVIg1BG+f+MOp3HUUHqjosQu
MD5:	E0CD9383BBDE7C6FEE67020571EF65CB
SHA1:	90E4D18C1DF75E1DE564E22DEC089858B4FA8F3B
SHA-256:	CCF831C0A9DD20E338C6E9FDC18698766AD1C64E80ADB1A881673D9AC1F0C92D
SHA-512:	757A63E5F6569DFF7CD836E9A306E955606F02BA88AC5993213ED20A57C0620E70AEAC120AE0379A2DFD1F4D08AD3B41B931AEA8ED0438623323C4785281E9EA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c8dcccae55e144f6b2a04c29ac9080c3.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73282hrvxT9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.501376745074337
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MonkEzrS8jZcHcljX+:qgFq6g10+f+MonkuSqmAu
MD5:	1ED577C0B89F48A112D1E1B8FA58D1C5
SHA1:	B51ECE2B9ACFDC5F3CE8EDF1FE37D3049F7C07CA
SHA-256:	B247430346A8D4B3C44A97F44D1B48A308C3C1D73646240E9C7A6DC4A10B81CD
SHA-512:	A493920BDAD9737369AB325F993FF5A436B749C55A5B0E6C2516AC0C15BAC991A312C38DE03534BD79230C09B92C4F7D0697903C8ABABB38526303001C5AC452
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bc140b5bb8a749f6b85166d3681b9596.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:73290J1e6e8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.386927201377206
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/RdQENECUcRC0wsjW:SbFuFyLVIg1BG+f+MLEMs0ZjfGt
MD5:	A058E486AD95CFA6D0A55E6A59AD0B9E
SHA1:	B7CF10D07D94B935BE9B504212E0CEE2F5A7C7CD
SHA-256:	BACC6CCE92F60201C56EE2B19CE24EBEB8B33CA8518FDB4D2FF5122156A0E8AD
SHA-512:	B56A615A5A2CA3D7E20BAD2111DCAEAA9B775D08D5E5F714AED8C566C4E782CB381354CF9D539B2FF0C5937B4BE538FF05B4F0BE938D79F6926DC8B697474CAD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=55a8442ea85345dd8eb48ab4a194b7f2.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:73291TaSJ79

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.429180472293645
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsdBDd9Ri0i2js2ALAXA:SbFuFyLVIg1BAf+Msfd9RTtjNALyAZD
MD5:	0406310BCB513A9C57EFCA92FDE5520F
SHA1:	BBD9265257639122448C082BB80359E0875DA7C7
SHA-256:	363BA7923189AAB868C9F5AA809470C951AD8D3C7226A69B2451EC293EA57CD2
SHA-512:	4EE024AA0D9FCC12FB0E5073E4FDE9EE3FF5CFCCC1868EC5147EB362635799D310B5ADEE4DAD4FC352420A2FB9045EF1960D331585B9BFE02DBB88B871A9A162
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f6e9df887533450faf244ac6843d3d5f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73292m0uxB9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.474717138543045
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MsDedRAHi2jNdQIeXD:qgFq6g1af+Msqe72D
MD5:	6F7646378E3A8D3050FC062508F8FCF5
SHA1:	78D3874EA04FF3E3FBA895F5FA7C4955E830EC2F
SHA-256:	9101F15D7F1AD9216099D7416D602E3AC3E75CA6D5C1AE2AB106A5AEEA9514B8
SHA-512:	ED3A07F6EA320C05B6B358992F16C27449AEB1E9A3092A947F3F3E2FF0814B67D49A970004E191AE5567ECDCED190467F428C3B4D462BF5A4E34B9F4C4393174
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ff4b120b6753413794384ead3c113eb2.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74123KIuqKi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.464007250510476
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MaO0EI4qjZcHcljX+:qgFq6g10+f+MaO9IfmAu
MD5:	40F00237F3C9B6E728D1A64B52E129A5
SHA1:	2AB9041A5BCCBB10D18ADBD45140E7B138BD2D48
SHA-256:	46988572619C570C4D56C9AD52E06BAAAA64E21200CB3667846112A89A6565FC
SHA-512:	18F8B07FA0224C1D02A1DAED6D17557C9023158FE49493DD6986EBDDFC13E6609EB1616D867153786EF2ED30DDFC89A8E473942F1C579E3F3B5C4D7B4098A857
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7beb7e9c0cfe4a3785cde4ea83a22489.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74124FeGOHk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.402001028593866
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8E6W0gbRFwvAuqjsf:SbFuFyLVIg1BG+f+M8DqThuqjfGt
MD5:	80246306D834021A061CE8C87402155D
SHA1:	EB3911A4409CA8B6EE508DC91B3008EA0DA1E518
SHA-256:	D6842664BC316E29582AD436AAD159842EC1DF5C1E7E8588721337D6873938CE
SHA-512:	3A85C8D051EA4D28FE32C14C3CE18749ACC62D9DE4F9D093933DD05ACED5D43E6367E677F12C8AE06264DF05FACA405431117F8EF13E3441CE8996059408CAD0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6aeb16ae03834a2997dfdd44e96b31b5.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:74132CaR3fj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4405696409587785
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy2xWCdH1i7xsjs1Ha:SbFuFyLVIg1BG+f+My2hH1i7qjosQu
MD5:	D6A91C01BB3127AA45ED07EAE4519766
SHA1:	6701E51079F5724504AD49D6376C5516839F2547
SHA-256:	8836CBC94472F209614B0C1BBDC5AA06A766FDD78DEB9CD39D1BB2CCA9301088
SHA-512:	E9D43043F42FA072E887A6EB27C6380886B4B34396A55EA115047E251F8471D5287E04856913D58B4685F5F35834B9B655ADA47A64F50C3B56A22BB313036844
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8deea5b2447c4cc693f451a2246eb9fc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74139OWe5Ti

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.436858493422671
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuHGuXFzm1qvFrqjs2Ax:SbFuFyLVIg1BAf+MuH1zmqRqjNALyAZD
MD5:	45779F3E00523093AEE3922623176667
SHA1:	855B4C626EE7B9F9E72B026187392EAD31409544
SHA-256:	782C19F2A188D99CE5D7450070C27B8B85B72E41A2D0FBEA60EBC769BCED7462
SHA-512:	0575145BC8CAE8F2E49F2E2EF249997BD1DD98CC491F136B22042A945E08DFD03601C7EF7E359FB56941EDCB4864707BBC5C99794A8AF4C9CE776872167D6D61
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d9da9531cce14152839b67f696333c5e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:742205fVFwi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.474826558383349
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+DNjohg2js2BbQIeXGu:SbFuFyLVIg1BAf+M+DNjx2jNdQIeXD
MD5:	D87F897833784AD8A309BCD0D6C7C610
SHA1:	ED2DBE5964ADEE5464DDFDD79EBCB7F669311224
SHA-256:	20DB72CE32130A513B4238E52717D0A7B90E035F53EF05D44258220A3D60C877
SHA-512:	7A9BFE4AF6F445FFAA382FC97CE699B95EB6B9CD377DDFA53F1A06886A9BF282AEA405D36768E1B48AD9E8DEF62306EFA7DE296F314D774CE2C780138D6BC046
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4050b27d1cf3480fbecc556d170097d8.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74597W3sQCs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4473474161186335
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/XEECRD0WdFwFrqjx:SbFuFyLVIg1BG+f+M89RDVvLjosQu
MD5:	AEB754716184EE35CE518E1C1B138F37
SHA1:	27D44CDF33B1E471367F42FE6045D04FAF2EEF4A
SHA-256:	BB288569D864BE239359D3CC6D3A13E0B3CE0752DEF06A84DED1C84FAA32922A
SHA-512:	79793A4152BA08BF9D4059D8162857A1793D88AB6188CE7D42FFB930AB67FE37E037132F6B5D9D80E085FC5DB0832395D14D6A12E85EE79052B280286417FC47
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=535aaf1914fe42789c888b59c6481858.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74604UEE8Vp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.500627667636244
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Muu6ic6ITjZcHcljX+:qgFq6g10+f+M96/rmAu
MD5:	9305CB9F1257E33DEB83EA3BEA12E075
SHA1:	7F62709EF9CDCFFBB7EE5981FDE868D080939482
SHA-256:	1D6B45165AA1EBD21EC99DD76F1E3DE50399C4E5549420C208256069DF57D583
SHA-512:	121079071EE1A5AE7E19D125F9DD154DC4155895FF9B9E90B915D217AE0A1CB8F091661CE15420E1ECF9758A9BBCCD7DAB44E2F88172078BBB14017C13723B53
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7c1e4b36e8149749e28558c3ba22292.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74612EnVAqq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.4154395042141745
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+BWX8BCQSURGV0Xso:SbFuFyLVIg1BG+f+M+BQPQJRGVe2jfGt
MD5:	08E1A266D73A58FAD3EC469B70E15D8D
SHA1:	2EC5A4236D1029A25E102C9532F8FF3E634AEB14
SHA-256:	634B04C0917E4677A56ACDDAF1A3E79D4984FEF09BA5ED307E2F14749C80249D
SHA-512:	3B5C51F71B37190776B959BF57026AB358F43B67C74BC4D5C41738C22B6C315D3AE1C52F82ABF6BF810B407955260FA88F53770F6F5CC609D5D4C39529137F85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=476a320394a64eeb8b87cf5ac5ecc7f6.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:74613bCJqCp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.444510381573996
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MK99BIBlF2jNALyAZD:qgFq6g1af+MK1IP+IZD
MD5:	DD7B6AB2EC51B26085A63E929503310C
SHA1:	63A9720A88B39F0AF64032247C9E083854E8E6A6
SHA-256:	40CCE258B52BBDC855150DDEE4639EA7F137AA0AD73A2BC84471426E3B1F11A9
SHA-512:	AE6DCC240ECE1475A4DB956D57F9B65FC0400FE6E930226494EC0D18DFBA0292A0A4D5096802B1D15B6464CEA3E3CF157A9C679E2806D82C64B6C5369EDC5739
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=31ddb8c5fd7442329ea8dfdb7721a0d6.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:746946KZJzr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.468816131444294
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsGW1XhfGdUEHABEDn+V:SbFuFyLVIg1BAf+MsjdhfbETjNdQIeXD
MD5:	E1F1009929B260FEB344779E43E64BFD
SHA1:	240FD8194725FED4250FC1DA759D525D2416EF64
SHA-256:	09A8E8E9976052DA1AE297D3536B7588209C5361CAECD1123B3EBCD8AAE3982A
SHA-512:	11EC42697B78F74EAFE474F0BD25ED0547E4F8B78D29AA5061F2948C49D64CF14F27F76EA35D9410DB4210D2949B13E5CBC0E9A915DB00A2EF916B9C5FBDE8DA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fc5f5492978f4ccc81a227ce3ab8faf3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat02wLM09

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat042Rpsk

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0A9qHim

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0BHXZbp

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0BY1RIK

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0GxWHLD

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0HdLiBE

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0eawzSd

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0tSF9Hi

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0vhY05S

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:J:J
MD5:	454BE5129415DB5B4E2B541EDF91CF33
SHA1:	8CAB891804E0738B14747428D79742FEB9299A49
SHA-256:	27F4A337E0800052AAF6BB52A0A47C6A9D9B1ABF01D4F3E08B080383419F2BAC
SHA-512:	8485DFBAF0CCC9D57E394AC1AB8A035F34D9A6DAEC65403CBB365A38D9F0B5660098C3A546284A7AC8CF03B80AFF2332CD6E74752E6136747DDED243EC712F7F
Malicious:	false
Preview:	6299.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:7CsXlXEWtl/Plr/:b+yl1j
MD5:	BB720D13E90A40DF46EEDA8E07B2243C
SHA1:	E3D7E5D7B051A9E4ED4C5B5ECAFD17A234490244
SHA-256:	72C0C69AC5776C88976C59905720549E013BAF85DB4272F41F972DA19E81870F
SHA-512:	BA5E78EE73BA29284E06981F603653899EEEA4CC4C257F18FEE26AE8922F7C2178410A791BC51F0FCE19261919F73C42F4418AE533C16ED01993E9DB3837C0D9
Malicious:	false
Preview:	....d...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................d....9vg%H......................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	671
Entropy (8bit):	4.820000519889715
Encrypted:	false
SSDEEP:	12:0FQZPaV5pGizFqkizFCQF7nMuzFpAvmxFpA2+VKF0:PZedQZY2FAvKA2+V9
MD5:	2A6BE40A8A37C759026534AA9213E4B0
SHA1:	C87C7B8E5B76D37D7DA91D1AEA03E9D211E7A9C2
SHA-256:	FF0EAB988CE376208A5BDD69CFDF15A22097351AB54CBD0A2C27A9270B74A282
SHA-512:	1FC3DB7A760D3F231FDF6B92FA58242B3F775CE82AAB625346DFF4671CB787FFB650DF28E1B6EB17962F528878CC3BD26B95099DC6DA88A1D0F2D3B83464C996
Malicious:	false
Preview:	Jan 2 01:00:44 galassia systemd-logind[6886]: Failed to add user by file name 1000, ignoring: Invalid argument.Jan 2 01:00:44 galassia systemd-logind[6886]: User enumeration failed: Invalid argument.Jan 2 01:00:44 galassia systemd-logind[6886]: User of session 2 not known..Jan 2 01:00:44 galassia systemd-logind[6886]: Session enumeration failed: No such file or directory.Jan 2 01:00:44 galassia systemd-logind[6886]: Watching system buttons on /dev/input/event0 (Power Button).Jan 2 01:00:44 galassia systemd-logind[6886]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Jan 2 01:00:44 galassia systemd-logind[6886]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838254
Encrypted:	false
SSDEEP:	3:F31Hlo08R/ZltY08R/Z/:F3408du08
MD5:	90BBEFF24BE70BF9BA5D6B3275CFF635
SHA1:	D2AABB543D4CCCF26B66565DA803C86107C82BD0
SHA-256:	5D3A2AA70EB75CC902DAD45DDEC2FC61204CCF9B80F914ACAD677A04C787D517
SHA-512:	D538EDFE47FEC82C740EE500EBBA840334077B7D3706A6791D0BA4E3AE5F12434067F31C913259F3FDDA92BB3BF083D16EB739AA276F3AE034F78775295122A4
Malicious:	false
Preview:	LPKSHHRH.................h....M<..J...<.................................h....M<..J...<........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.426192686117159
Encrypted:	false
SSDEEP:	3:F31HljzA2+Li19zA2+LiP:F3/ZbRZB
MD5:	076FE7E7A502CD901922D174591018A7
SHA1:	FA7BAC7FCD1EB13C368E6953521AB8A0A8D6E742
SHA-256:	C48CF62020A626F29082FF69AF808656AFA067D850008E4A91722372E9198B7A
SHA-512:	CBC6D27E6F0CF308F778AA6E9D9D5BF7D381A63A26EB2EEB434C74FA1F6483C266A40943809A6FF5B9DDABF6B6788604B8591933F36D4E6C6EEDD7A5FC5F724F
Malicious:	false
Preview:	LPKSHHRH................<Ye.e5J..F0.n..................................<Ye.e5J..F0.n..........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	3849
Entropy (8bit):	4.745928287959332
Encrypted:	false
SSDEEP:	48:GYLcYLsrYLyYLIYLKYLDYLM1YLUFrYLcIMYL6YL+YLnY1OYkouYgXaGYAt7YApfZ:qMNF0n548CASURORt5h9fbkFz
MD5:	FDE10515B45D56573A9A4C18C74F5A7E
SHA1:	E4B91E91EA9D37CCFB7DE9A5AB348B8BE0A5F20F
SHA-256:	FAC74E916A06B96724771C96D1748B95DEA6393FB5A9395686191469FCECF33D
SHA-512:	5A2DFE0FF0651AF337C778CBA81D2E7155BEF03A2680A441441ECC2A20D70413847E105A7750DD42C65CCE2A4BAF4861C13E181BF1B9A47779864052EDDC1345
Malicious:	false
Preview:	Jan 2 01:00:38 galassia kernel: [ 271.442883] blocking signal 19: 5455 -> 3132.Jan 2 01:00:38 galassia kernel: [ 271.468445] blocking signal 9: 5455 -> 660.Jan 2 01:00:38 galassia kernel: [ 271.475341] blocking signal 9: 5455 -> 726.Jan 2 01:00:38 galassia kernel: [ 271.482197] blocking signal 9: 5455 -> 765.Jan 2 01:00:38 galassia kernel: [ 271.488991] blocking signal 9: 5455 -> 767.Jan 2 01:00:38 galassia kernel: [ 271.495839] blocking signal 9: 5455 -> 778.Jan 2 01:00:38 galassia kernel: [ 271.502662] blocking signal 9: 5455 -> 936.Jan 2 01:00:38 galassia kernel: [ 271.509537] blocking signal 9: 5455 -> 1410.Jan 2 01:00:38 galassia kernel: [ 271.516550] blocking signal 9: 5455 -> 1411.Jan 2 01:00:38 galassia kernel: [ 271.523378] blocking signal 9: 5455 -> 2935.Jan 2 01:00:38 galassia kernel: [ 271.530186] blocking signal 9: 5455 -> 2936.Jan 2 01:00:38 galassia kernel: [ 271.537545] blocking signal 9: 5455 -> 3132.Jan 2 01:00:38 galassia kernel: [ 272.03415

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	9380
Entropy (8bit):	5.01013771902783
Encrypted:	false
SSDEEP:	96:qMNF0BRBuktspdoR0c5v+UZQp8CASURiZRt5h9fbcMoeFoIEsG:rN2bBukeQ1v+K2pG
MD5:	76A61B8F77BA1CAA2EE67C216C21C205
SHA1:	625CC815E27EC1AE77371EA27A222508F8B7C84F
SHA-256:	33E3D7E6BA005A735C3E717FF579ED987F0F0CF16EEB36049B0B009FD02C17D3
SHA-512:	63056F08A3FBDF56C87AF0AF6761EA40C09F43BC51FEAFB1D318CB16EBAAB1B9CAFBA558983748810848400EFB6B41D6BE40B16670828F3AFEE848E4C3C29867
Malicious:	false
Preview:	Jan 2 01:00:38 galassia kernel: [ 271.442883] blocking signal 19: 5455 -> 3132.Jan 2 01:00:38 galassia kernel: [ 271.468445] blocking signal 9: 5455 -> 660.Jan 2 01:00:38 galassia kernel: [ 271.475341] blocking signal 9: 5455 -> 726.Jan 2 01:00:38 galassia kernel: [ 271.482197] blocking signal 9: 5455 -> 765.Jan 2 01:00:38 galassia kernel: [ 271.488991] blocking signal 9: 5455 -> 767.Jan 2 01:00:38 galassia kernel: [ 271.495839] blocking signal 9: 5455 -> 778.Jan 2 01:00:38 galassia kernel: [ 271.502662] blocking signal 9: 5455 -> 936.Jan 2 01:00:38 galassia kernel: [ 271.509537] blocking signal 9: 5455 -> 1410.Jan 2 01:00:38 galassia kernel: [ 271.516550] blocking signal 9: 5455 -> 1411.Jan 2 01:00:38 galassia kernel: [ 271.523378] blocking signal 9: 5455 -> 2935.Jan 2 01:00:38 galassia kernel: [ 271.530186] blocking signal 9: 5455 -> 2936.Jan 2 01:00:38 galassia kernel: [ 271.537545] blocking signal 9: 5455 -> 3132.Jan 2 01:00:38 galassia kernel: [ 271.54681

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:7CsXlXEWtl/Plr/:b+yl1j
MD5:	BB720D13E90A40DF46EEDA8E07B2243C
SHA1:	E3D7E5D7B051A9E4ED4C5B5ECAFD17A234490244
SHA-256:	72C0C69AC5776C88976C59905720549E013BAF85DB4272F41F972DA19E81870F
SHA-512:	BA5E78EE73BA29284E06981F603653899EEEA4CC4C257F18FEE26AE8922F7C2178410A791BC51F0FCE19261919F73C42F4418AE533C16ED01993E9DB3837C0D9
Malicious:	false
Preview:	....d...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................d....9vg%H......................................

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.376899996656846
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	qbfwdbg.elf
File size:	172'424 bytes
MD5:	9ffc69285cf6a04f58d59b73b7c993c0
SHA1:	8b3d95ed36e9e0264f764724db27a3d7f6d2e302
SHA256:	e8647500a41bda114a197d02f36cb9521f6053b34d5056306324dbfff0c6857a
SHA512:	3853a49738fdaca2a04a667e839e6e291dcfa5e08e11b80305df90468f46aaa00b84eeb1e5689d8e7d6d644002dfa54fbf85ef078d4505c2a0a48c29dce7a5a7
SSDEEP:	3072:Pa7LbQwLnX4Owq5dYoJanX8JyT4bujP1tLsbvjrgrUp0Tp6VUPtkGU5A:Pa7LswLnX/wq5dDJaQuBEbpUKa
TLSH:	F2F35C17B6C194FDC4DAC1748BAEF637E931F09D1238B26B27D0AA223E4DE215B1D944
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@...............................................R.......R.............@...............Q.td....................................................H...._....z...H........

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	171784
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0x1bca6	0x0	0x6	AX	16
.fini	PROGBITS	0x41bda6	0x1bda6	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x41bdc0	0x1bdc0	0x4520	0x0	0x2	A	32
.ctors	PROGBITS	0x521000	0x21000	0x18	0x0	0x3	WA	8
.dtors	PROGBITS	0x521018	0x21018	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x521040	0x21040	0x8e88	0x0	0x3	WA	32
.bss	NOBITS	0x529ee0	0x29ec8	0x7060	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x29ec8	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x202e0	0x202e0	6.4016	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x21000	0x521000	0x521000	0x8ec8	0xff40	0.2538	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 2, 2025 07:58:22.858391047 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable
Jan 2, 2025 07:59:42.869514942 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable

Start time (UTC):	06:57:51
Start date (UTC):	02/01/2025
Path:	/tmp/qbfwdbg.elf
Arguments:	/tmp/qbfwdbg.elf
File size:	172424 bytes
MD5 hash:	9ffc69285cf6a04f58d59b73b7c993c0

Start time (UTC):	06:57:52
Start date (UTC):	02/01/2025
Path:	/tmp/qbfwdbg.elf
Arguments:	-
File size:	172424 bytes
MD5 hash:	9ffc69285cf6a04f58d59b73b7c993c0

Start time (UTC):	06:57:53
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	06:57:58
Start date (UTC):	02/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	06:58:02
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	06:58:05
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:06
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:07
Start date (UTC):	02/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /home/saturnino/.cache/sessions/Thunar-2ec7c2e14-9c4d-40f3-9704-8617ab831fb4
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	06:58:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:12
Start date (UTC):	02/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	06:58:13
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:14
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:15
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:16
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:17
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report qbfwdbg.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/home/saturnino/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml.new

/run/systemd/inhibit/.#105C2BG

/run/systemd/inhibit/.#121GhaE

/run/systemd/inhibit/.#145aT6k

/run/systemd/inhibit/.#15gsFLp

/run/systemd/inhibit/.#17efEtj

/run/systemd/inhibit/.#18QY1nn

/run/systemd/inhibit/.#1AwBmzT

/run/systemd/inhibit/.#1MES1me

/run/systemd/inhibit/.#1NcoS1T

/run/systemd/inhibit/.#1P7epJq

/run/systemd/inhibit/.#1WGMTN7

/run/systemd/inhibit/.#1ZriQGG

/run/systemd/inhibit/.#1do0EOM

/run/systemd/inhibit/.#1lGrZua

/run/systemd/inhibit/.#1nEQAPj

/run/systemd/inhibit/.#1p44quf

/run/systemd/inhibit/.#1qEJg6m

/run/systemd/inhibit/.#1snBoIC

/run/systemd/inhibit/.#1vOQswm

/run/systemd/journal/streams/.#9:656225LpGHO

/run/systemd/journal/streams/.#9:65623vuwYBO

/run/systemd/journal/streams/.#9:65624yM1BDN

/run/systemd/journal/streams/.#9:65625MLIx9N

/run/systemd/journal/streams/.#9:65626W4qtSN

Linux Analysis Report
qbfwdbg.elf

Start time (UTC):	06:58:18
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	06:58:19
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:21
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:20
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:23
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:30
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:31
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:32
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	06:58:33
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:34
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761