Edit tour

Linux Analysis Report
jefne64.elf

Overview

General Information

Sample name:	jefne64.elf
Analysis ID:	1583180
MD5:	17ef36339428d10118962aaebc78e8dc
SHA1:	1afdcb5f5fee08e1aa80d524c48f66cae0842a03
SHA256:	1b89f0a38b1684cff2e66a4330ea5c78de73e1828da8084b9f61d2702c58d872
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583180
Start date and time:	2025-01-02 07:57:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	jefne64.elf
Detection:	MAL
Classification:	mal92.spre.troj.evad.linELF@0/201@1256/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.

Runtime Messages

Command:	/tmp/jefne64.elf
PID:	5493
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

jefne64.elf (PID: 5493, Parent: 5415, MD5: 17ef36339428d10118962aaebc78e8dc) Arguments: /tmp/jefne64.elf

jefne64.elf New Fork (PID: 5494, Parent: 5493)

jefne64.elf New Fork (PID: 5495, Parent: 5494)

gnome-session-binary New Fork (PID: 5496, Parent: 1383)

sh (PID: 5496, Parent: 1383, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5496, Parent: 1383, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

xfce4-panel New Fork (PID: 5503, Parent: 3172)

wrapper-2.0 (PID: 5503, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5504, Parent: 3172)

wrapper-2.0 (PID: 5504, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5505, Parent: 3172)

wrapper-2.0 (PID: 5505, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5506, Parent: 3172)

wrapper-2.0 (PID: 5506, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5525, Parent: 5506)

xfpm-power-backlight-helper (PID: 5525, Parent: 5506, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5507, Parent: 3172)

wrapper-2.0 (PID: 5507, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5508, Parent: 3172)

wrapper-2.0 (PID: 5508, Parent: 3172, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5524, Parent: 5523)

xfconfd (PID: 5524, Parent: 5523, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

gdm3 New Fork (PID: 5555, Parent: 1289)

Default (PID: 5555, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5557, Parent: 1289)

Default (PID: 5557, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5558, Parent: 2955)

xfce4-notifyd (PID: 5558, Parent: 2955, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

xfce4-session New Fork (PID: 5561, Parent: 3011)

xfwm4 (PID: 5561, Parent: 3011, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2f0fb577c-8f27-49ed-9e22-22c0f8688bde

xfce4-session New Fork (PID: 5562, Parent: 3011)

xfce4-panel (PID: 5562, Parent: 3011, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 280cf4a86-48d7-4c11-938d-7ecb7d35458c

xfce4-session New Fork (PID: 5565, Parent: 3011)

rm (PID: 5565, Parent: 3011, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /home/saturnino/.cache/sessions/Thunar-2692b1019-2e62-4110-a5da-30fefabc5610

xfce4-session New Fork (PID: 5566, Parent: 3011)

xfdesktop (PID: 5566, Parent: 3011, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 21e3a5141-81ff-45e8-a564-651b5b7002ba

xfce4-session New Fork (PID: 5569, Parent: 3011)

xfwm4 (PID: 5569, Parent: 3011, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2f0fb577c-8f27-49ed-9e22-22c0f8688bde

xfce4-session New Fork (PID: 5570, Parent: 3011)

xfce4-panel (PID: 5570, Parent: 3011, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 280cf4a86-48d7-4c11-938d-7ecb7d35458c

xfce4-session New Fork (PID: 5571, Parent: 3011)

xfdesktop (PID: 5571, Parent: 3011, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 21e3a5141-81ff-45e8-a564-651b5b7002ba

dbus-daemon New Fork (PID: 5578, Parent: 5577)

xfconfd (PID: 5578, Parent: 5577, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5584, Parent: 1)

journalctl (PID: 5584, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5587, Parent: 1)

dbus-daemon (PID: 5587, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5590, Parent: 1289)

Default (PID: 5590, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5591, Parent: 1)

rsyslogd (PID: 5591, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5592, Parent: 1)

systemd-journald (PID: 5592, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5595, Parent: 2955)

pulseaudio (PID: 5595, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5598, Parent: 1)

upowerd (PID: 5598, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

gvfsd-fuse New Fork (PID: 5640, Parent: 3147)

fusermount (PID: 5640, Parent: 3147, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5652, Parent: 1)

dbus-daemon (PID: 5652, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5653, Parent: 1)

systemd-journald (PID: 5653, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5656, Parent: 1)

rsyslogd (PID: 5656, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5657, Parent: 1)

upowerd (PID: 5657, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 5695, Parent: 2955)

pulseaudio (PID: 5695, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5701, Parent: 1)

rtkit-daemon (PID: 5701, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5704, Parent: 1)

systemd-logind (PID: 5704, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5763, Parent: 1)

polkitd (PID: 5763, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5767, Parent: 1)

gpu-manager (PID: 5767, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5769, Parent: 5767)

sh (PID: 5769, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5770, Parent: 5769)

grep (PID: 5770, Parent: 5769, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5772, Parent: 5767)

sh (PID: 5772, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5773, Parent: 5772)

grep (PID: 5773, Parent: 5772, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5774, Parent: 5767)

sh (PID: 5774, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5775, Parent: 5774)

grep (PID: 5775, Parent: 5774, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5776, Parent: 5767)

sh (PID: 5776, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5777, Parent: 5776)

grep (PID: 5777, Parent: 5776, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5778, Parent: 5767)

sh (PID: 5778, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5779, Parent: 5778)

grep (PID: 5779, Parent: 5778, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5782, Parent: 5767)

sh (PID: 5782, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5783, Parent: 5782)

grep (PID: 5783, Parent: 5782, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5784, Parent: 5767)

sh (PID: 5784, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5785, Parent: 5784)

grep (PID: 5785, Parent: 5784, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5786, Parent: 5767)

sh (PID: 5786, Parent: 5767, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5787, Parent: 5786)

grep (PID: 5787, Parent: 5786, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5768, Parent: 1)

agetty (PID: 5768, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5790, Parent: 2955)

dbus-daemon (PID: 5790, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5791, Parent: 1)

generate-config (PID: 5791, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5792, Parent: 5791)

pkill (PID: 5792, Parent: 5791, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5793, Parent: 1)

gdm-wait-for-drm (PID: 5793, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5798, Parent: 1)

systemd-journald (PID: 5798, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5799, Parent: 1)

dbus-daemon (PID: 5799, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5804, Parent: 1)

rsyslogd (PID: 5804, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5805, Parent: 1)

systemd-logind (PID: 5805, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5862, Parent: 2955)

pulseaudio (PID: 5862, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5863, Parent: 1)

upowerd (PID: 5863, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 5905, Parent: 1)

gpu-manager (PID: 5905, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5906, Parent: 5905)

sh (PID: 5906, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5907, Parent: 5906)

grep (PID: 5907, Parent: 5906, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5908, Parent: 5905)

sh (PID: 5908, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5909, Parent: 5908)

grep (PID: 5909, Parent: 5908, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5910, Parent: 5905)

sh (PID: 5910, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5911, Parent: 5910)

grep (PID: 5911, Parent: 5910, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5913, Parent: 5905)

sh (PID: 5913, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5915, Parent: 5913)

grep (PID: 5915, Parent: 5913, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5916, Parent: 5905)

sh (PID: 5916, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5917, Parent: 5916)

grep (PID: 5917, Parent: 5916, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5922, Parent: 5905)

sh (PID: 5922, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5923, Parent: 5922)

grep (PID: 5923, Parent: 5922, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5929, Parent: 5905)

sh (PID: 5929, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5930, Parent: 5929)

grep (PID: 5930, Parent: 5929, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5931, Parent: 5905)

sh (PID: 5931, Parent: 5905, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5932, Parent: 5931)

grep (PID: 5932, Parent: 5931, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5914, Parent: 1)

rtkit-daemon (PID: 5914, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5921, Parent: 1)

polkitd (PID: 5921, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5933, Parent: 1)

generate-config (PID: 5933, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5934, Parent: 5933)

pkill (PID: 5934, Parent: 5933, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5937, Parent: 2955)

dbus-daemon (PID: 5937, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5940, Parent: 1)

gdm-wait-for-drm (PID: 5940, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5943, Parent: 1)

systemd-journald (PID: 5943, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5944, Parent: 1)

dbus-daemon (PID: 5944, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5949, Parent: 1)

systemd-logind (PID: 5949, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5977, Parent: 1)

rsyslogd (PID: 5977, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6004, Parent: 2955)

pulseaudio (PID: 6004, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6005, Parent: 1)

upowerd (PID: 6005, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6050, Parent: 1)

gpu-manager (PID: 6050, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6051, Parent: 6050)

sh (PID: 6051, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6052, Parent: 6051)

grep (PID: 6052, Parent: 6051, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6053, Parent: 6050)

sh (PID: 6053, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6054, Parent: 6053)

grep (PID: 6054, Parent: 6053, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6057, Parent: 6050)

sh (PID: 6057, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6058, Parent: 6057)

grep (PID: 6058, Parent: 6057, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6061, Parent: 6050)

sh (PID: 6061, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6062, Parent: 6061)

grep (PID: 6062, Parent: 6061, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6067, Parent: 6050)

sh (PID: 6067, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6068, Parent: 6067)

grep (PID: 6068, Parent: 6067, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6072, Parent: 6050)

sh (PID: 6072, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6073, Parent: 6072)

grep (PID: 6073, Parent: 6072, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6074, Parent: 6050)

sh (PID: 6074, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6075, Parent: 6074)

grep (PID: 6075, Parent: 6074, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6076, Parent: 6050)

sh (PID: 6076, Parent: 6050, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6077, Parent: 6076)

grep (PID: 6077, Parent: 6076, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6060, Parent: 1)

rtkit-daemon (PID: 6060, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6066, Parent: 1)

polkitd (PID: 6066, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6078, Parent: 1)

generate-config (PID: 6078, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6079, Parent: 6078)

pkill (PID: 6079, Parent: 6078, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6084, Parent: 2955)

dbus-daemon (PID: 6084, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6085, Parent: 1)

gdm-wait-for-drm (PID: 6085, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6088, Parent: 1)

systemd-journald (PID: 6088, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6089, Parent: 1)

dbus-daemon (PID: 6089, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6094, Parent: 1)

systemd-logind (PID: 6094, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6151, Parent: 2955)

pulseaudio (PID: 6151, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6152, Parent: 1)

rsyslogd (PID: 6152, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6153, Parent: 1)

upowerd (PID: 6153, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6195, Parent: 1)

gpu-manager (PID: 6195, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6198, Parent: 6195)

sh (PID: 6198, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6199, Parent: 6198)

grep (PID: 6199, Parent: 6198, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6200, Parent: 6195)

sh (PID: 6200, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6201, Parent: 6200)

grep (PID: 6201, Parent: 6200, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6202, Parent: 6195)

sh (PID: 6202, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6203, Parent: 6202)

grep (PID: 6203, Parent: 6202, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6204, Parent: 6195)

sh (PID: 6204, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6206, Parent: 6204)

grep (PID: 6206, Parent: 6204, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6208, Parent: 6195)

sh (PID: 6208, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6209, Parent: 6208)

grep (PID: 6209, Parent: 6208, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6214, Parent: 6195)

sh (PID: 6214, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6215, Parent: 6214)

grep (PID: 6215, Parent: 6214, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6219, Parent: 6195)

sh (PID: 6219, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6220, Parent: 6219)

grep (PID: 6220, Parent: 6219, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6221, Parent: 6195)

sh (PID: 6221, Parent: 6195, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6222, Parent: 6221)

grep (PID: 6222, Parent: 6221, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6207, Parent: 1)

rtkit-daemon (PID: 6207, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6213, Parent: 1)

polkitd (PID: 6213, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6223, Parent: 1)

generate-config (PID: 6223, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6224, Parent: 6223)

pkill (PID: 6224, Parent: 6223, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6229, Parent: 2955)

dbus-daemon (PID: 6229, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6230, Parent: 1)

gdm-wait-for-drm (PID: 6230, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6233, Parent: 1)

systemd-journald (PID: 6233, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6238, Parent: 1)

systemd-logind (PID: 6238, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6295, Parent: 2955)

pulseaudio (PID: 6295, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6296, Parent: 1)

rsyslogd (PID: 6296, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6297, Parent: 1)

upowerd (PID: 6297, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6340, Parent: 1)

dbus-daemon (PID: 6340, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6342, Parent: 1)

gpu-manager (PID: 6342, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6343, Parent: 6342)

sh (PID: 6343, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6344, Parent: 6343)

grep (PID: 6344, Parent: 6343, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6345, Parent: 6342)

sh (PID: 6345, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6346, Parent: 6345)

grep (PID: 6346, Parent: 6345, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6347, Parent: 6342)

sh (PID: 6347, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6348, Parent: 6347)

grep (PID: 6348, Parent: 6347, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6349, Parent: 6342)

sh (PID: 6349, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6350, Parent: 6349)

grep (PID: 6350, Parent: 6349, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6351, Parent: 6342)

sh (PID: 6351, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6352, Parent: 6351)

grep (PID: 6352, Parent: 6351, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6355, Parent: 6342)

sh (PID: 6355, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6356, Parent: 6355)

grep (PID: 6356, Parent: 6355, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6361, Parent: 6342)

sh (PID: 6361, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6362, Parent: 6361)

grep (PID: 6362, Parent: 6361, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6366, Parent: 6342)

sh (PID: 6366, Parent: 6342, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6367, Parent: 6366)

grep (PID: 6367, Parent: 6366, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6354, Parent: 1)

rtkit-daemon (PID: 6354, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6360, Parent: 1)

polkitd (PID: 6360, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6368, Parent: 1)

generate-config (PID: 6368, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6369, Parent: 6368)

pkill (PID: 6369, Parent: 6368, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6374, Parent: 2955)

dbus-daemon (PID: 6374, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6375, Parent: 1)

gdm-wait-for-drm (PID: 6375, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6380, Parent: 1)

systemd-journald (PID: 6380, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6383, Parent: 1)

dbus-daemon (PID: 6383, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6386, Parent: 1)

systemd-logind (PID: 6386, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6443, Parent: 2955)

pulseaudio (PID: 6443, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6444, Parent: 1)

rsyslogd (PID: 6444, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6445, Parent: 1)

upowerd (PID: 6445, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6487, Parent: 1)

gpu-manager (PID: 6487, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6488, Parent: 6487)

sh (PID: 6488, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6489, Parent: 6488)

grep (PID: 6489, Parent: 6488, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6490, Parent: 6487)

sh (PID: 6490, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6491, Parent: 6490)

grep (PID: 6491, Parent: 6490, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6494, Parent: 6487)

sh (PID: 6494, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6495, Parent: 6494)

grep (PID: 6495, Parent: 6494, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6496, Parent: 6487)

sh (PID: 6496, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6501, Parent: 6496)

grep (PID: 6501, Parent: 6496, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6502, Parent: 6487)

sh (PID: 6502, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6506, Parent: 6502)

grep (PID: 6506, Parent: 6502, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6507, Parent: 6487)

sh (PID: 6507, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6508, Parent: 6507)

grep (PID: 6508, Parent: 6507, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6509, Parent: 6487)

sh (PID: 6509, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6510, Parent: 6509)

grep (PID: 6510, Parent: 6509, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6511, Parent: 6487)

sh (PID: 6511, Parent: 6487, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6512, Parent: 6511)

grep (PID: 6512, Parent: 6511, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6493, Parent: 1)

rtkit-daemon (PID: 6493, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6500, Parent: 1)

polkitd (PID: 6500, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6516, Parent: 1)

generate-config (PID: 6516, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6517, Parent: 6516)

pkill (PID: 6517, Parent: 6516, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6519, Parent: 2955)

dbus-daemon (PID: 6519, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6520, Parent: 1)

gdm-wait-for-drm (PID: 6520, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6525, Parent: 1)

systemd-journald (PID: 6525, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6530, Parent: 1)

systemd-logind (PID: 6530, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6587, Parent: 1)

rsyslogd (PID: 6587, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6588, Parent: 1)

upowerd (PID: 6588, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6626, Parent: 2955)

pulseaudio (PID: 6626, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6628, Parent: 1)

dbus-daemon (PID: 6628, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6632, Parent: 1)

gpu-manager (PID: 6632, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6633, Parent: 6632)

sh (PID: 6633, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6634, Parent: 6633)

grep (PID: 6634, Parent: 6633, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6635, Parent: 6632)

sh (PID: 6635, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6636, Parent: 6635)

grep (PID: 6636, Parent: 6635, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6637, Parent: 6632)

sh (PID: 6637, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6638, Parent: 6637)

grep (PID: 6638, Parent: 6637, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6641, Parent: 6632)

sh (PID: 6641, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6642, Parent: 6641)

grep (PID: 6642, Parent: 6641, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6644, Parent: 6632)

sh (PID: 6644, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6648, Parent: 6644)

grep (PID: 6648, Parent: 6644, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6652, Parent: 6632)

sh (PID: 6652, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6653, Parent: 6652)

grep (PID: 6653, Parent: 6652, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6654, Parent: 6632)

sh (PID: 6654, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6655, Parent: 6654)

grep (PID: 6655, Parent: 6654, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6656, Parent: 6632)

sh (PID: 6656, Parent: 6632, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6657, Parent: 6656)

grep (PID: 6657, Parent: 6656, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6640, Parent: 1)

rtkit-daemon (PID: 6640, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6647, Parent: 1)

polkitd (PID: 6647, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6660, Parent: 1)

generate-config (PID: 6660, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6661, Parent: 6660)

pkill (PID: 6661, Parent: 6660, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6664, Parent: 1)

gdm-wait-for-drm (PID: 6664, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6669, Parent: 1)

systemd-journald (PID: 6669, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6674, Parent: 1)

dbus-daemon (PID: 6674, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6675, Parent: 1)

systemd-logind (PID: 6675, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6732, Parent: 1)

rsyslogd (PID: 6732, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6733, Parent: 1)

upowerd (PID: 6733, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6775, Parent: 1)

gpu-manager (PID: 6775, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6776, Parent: 6775)

sh (PID: 6776, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6777, Parent: 6776)

grep (PID: 6777, Parent: 6776, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6778, Parent: 6775)

sh (PID: 6778, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6779, Parent: 6778)

grep (PID: 6779, Parent: 6778, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6781, Parent: 6775)

sh (PID: 6781, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6782, Parent: 6781)

grep (PID: 6782, Parent: 6781, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6784, Parent: 6775)

sh (PID: 6784, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6785, Parent: 6784)

grep (PID: 6785, Parent: 6784, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6788, Parent: 6775)

sh (PID: 6788, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6789, Parent: 6788)

grep (PID: 6789, Parent: 6788, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6790, Parent: 6775)

sh (PID: 6790, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6791, Parent: 6790)

grep (PID: 6791, Parent: 6790, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6792, Parent: 6775)

sh (PID: 6792, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6793, Parent: 6792)

grep (PID: 6793, Parent: 6792, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6794, Parent: 6775)

sh (PID: 6794, Parent: 6775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6795, Parent: 6794)

grep (PID: 6795, Parent: 6794, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6796, Parent: 1)

generate-config (PID: 6796, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6797, Parent: 6796)

pkill (PID: 6797, Parent: 6796, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6798, Parent: 1)

gdm-wait-for-drm (PID: 6798, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6803, Parent: 1)

systemd-journald (PID: 6803, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6808, Parent: 1)

systemd-logind (PID: 6808, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6865, Parent: 1)

rsyslogd (PID: 6865, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6866, Parent: 1)

upowerd (PID: 6866, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6908, Parent: 1)

dbus-daemon (PID: 6908, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6909, Parent: 1)

gpu-manager (PID: 6909, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6910, Parent: 6909)

sh (PID: 6910, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6911, Parent: 6910)

grep (PID: 6911, Parent: 6910, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6912, Parent: 6909)

sh (PID: 6912, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6913, Parent: 6912)

grep (PID: 6913, Parent: 6912, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6914, Parent: 6909)

sh (PID: 6914, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6915, Parent: 6914)

grep (PID: 6915, Parent: 6914, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6918, Parent: 6909)

sh (PID: 6918, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6919, Parent: 6918)

grep (PID: 6919, Parent: 6918, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6920, Parent: 6909)

sh (PID: 6920, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6921, Parent: 6920)

grep (PID: 6921, Parent: 6920, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6923, Parent: 6909)

sh (PID: 6923, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6924, Parent: 6923)

grep (PID: 6924, Parent: 6923, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6926, Parent: 6909)

sh (PID: 6926, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6927, Parent: 6926)

grep (PID: 6927, Parent: 6926, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6928, Parent: 6909)

sh (PID: 6928, Parent: 6909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6929, Parent: 6928)

grep (PID: 6929, Parent: 6928, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6930, Parent: 1)

generate-config (PID: 6930, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6931, Parent: 6930)

pkill (PID: 6931, Parent: 6930, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6932, Parent: 1)

gdm-wait-for-drm (PID: 6932, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6937, Parent: 1)

systemd-journald (PID: 6937, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6942, Parent: 1)

dbus-daemon (PID: 6942, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6943, Parent: 1)

systemd-logind (PID: 6943, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7000, Parent: 1)

rsyslogd (PID: 7000, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7001, Parent: 1)

upowerd (PID: 7001, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7043, Parent: 1)

gpu-manager (PID: 7043, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7046, Parent: 7043)

sh (PID: 7046, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7047, Parent: 7046)

grep (PID: 7047, Parent: 7046, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7048, Parent: 7043)

sh (PID: 7048, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7049, Parent: 7048)

grep (PID: 7049, Parent: 7048, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7051, Parent: 7043)

sh (PID: 7051, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7052, Parent: 7051)

grep (PID: 7052, Parent: 7051, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7054, Parent: 7043)

sh (PID: 7054, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7055, Parent: 7054)

grep (PID: 7055, Parent: 7054, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7056, Parent: 7043)

sh (PID: 7056, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7057, Parent: 7056)

grep (PID: 7057, Parent: 7056, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7058, Parent: 7043)

sh (PID: 7058, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7059, Parent: 7058)

grep (PID: 7059, Parent: 7058, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7060, Parent: 7043)

sh (PID: 7060, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7061, Parent: 7060)

grep (PID: 7061, Parent: 7060, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7062, Parent: 7043)

sh (PID: 7062, Parent: 7043, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7063, Parent: 7062)

grep (PID: 7063, Parent: 7062, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7064, Parent: 1)

generate-config (PID: 7064, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7065, Parent: 7064)

pkill (PID: 7065, Parent: 7064, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7066, Parent: 1)

gdm-wait-for-drm (PID: 7066, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
jefne64.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
jefne64.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1bd88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bd9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bea0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1beb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bec8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bedc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bef0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bf04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bf18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
jefne64.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x117bc:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
jefne64.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x12033:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
jefne64.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xe466:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xe658:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
jefne64.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x15d3a:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
jefne64.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x1ae66:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
jefne64.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x11bf3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
jefne64.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x1951a:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
jefne64.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x11ebe:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
jefne64.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x19713:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
jefne64.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x38a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
jefne64.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x48d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
jefne64.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x6d42:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5493.1.0000000000400000.0000000000420000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1bd88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bd9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bdec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1be8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bea0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1beb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bec8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bedc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bef0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bf04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1bf18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x117bc:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x12033:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xe466:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xe658:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x15d3a:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x1ae66:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x11bf3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x1951a:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x11ebe:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x19713:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x38a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x48d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
5493.1.0000000000400000.0000000000420000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x6d42:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Process Memory Space: jefne64.elf PID: 5493	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: jefne64.elf PID: 5493	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1070:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1084:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1098:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1110:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1124:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1138:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x114c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1160:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1174:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1188:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x119c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 11 entries

String: AEOF/proc//proc/%s/cmdlinewgetcurlftpechokillbashrebootshutdownhaltpoweroff/fd/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/lib/systemd//usr/lib/systemd/system/system/bin//gm/bin//home/process//home/helper/home/davinci/z/bin//mnt/mtd//tmp/sqfs//usr/libexec//usr/sbin//z/zbin//usr/bin/tmp/var/mnt/root/boot/home/dev/media/opt/../(deleted)dbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: fingwi.cardiacpure.ru. [malformed]

Source: global traffic	TCP traffic: 192.168.2.14:34674 -> 178.215.238.112:33966
Source: global traffic	TCP traffic: 192.168.2.14:57248 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5591)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5656)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5804)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 5977)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6152)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6296)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6444)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6587)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6732)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6865)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7000)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5653)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5798)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 5943)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6088)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6233)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6380)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6525)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6669)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6803)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6937)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru. [malformed]

Source: syslog.77.dr, syslog.426.dr, syslog.137.dr, syslog.195.dr, syslog.485.dr, syslog.371.dr, syslog.255.dr, syslog.584.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: Process Memory Space: jefne64.elf PID: 5493, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1639, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5496, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3235, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 782, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1381, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1381, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3011, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3159, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3159, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3171, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3172, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3172, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3178, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3178, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3183, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3213, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3213, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3239, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3239, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3244, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3244, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5477, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5477, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5505, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5506, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5508, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5524, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5558, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5561, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5561, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5562, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5562, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5566, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5566, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 661, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 769, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 791, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 801, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 928, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1289, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1309, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1314, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1588, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1593, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1712, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2986, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2991, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3120, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3142, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3147, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3218, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3246, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3268, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3304, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3337, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3341, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3353, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3361, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3392, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3398, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3402, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3406, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3412, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3425, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3676, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3847, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5333, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5569, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5570, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5571, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5587, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5591, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5592, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5595, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5598, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5652, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5653, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5656, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5657, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5695, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5701, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5704, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5763, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5790, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5793, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5798, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5799, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5804, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5805, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5862, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5863, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5914, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5921, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5937, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5940, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5943, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5944, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5949, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5977, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6004, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6005, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6060, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6066, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6084, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6085, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6088, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6089, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6094, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6151, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6152, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6153, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6207, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6213, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6229, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6230, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6233, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6238, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6295, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6296, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6297, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6354, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6360, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6374, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6375, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6380, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6383, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6386, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6443, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6444, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6445, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6500, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6519, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6520, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6525, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6530, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6587, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6588, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6626, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6628, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6640, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6647, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6664, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6669, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6674, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6732, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6733, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6798, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6803, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6865, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6866, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6908, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6932, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1639, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5496, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3129, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3184, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3187, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3188, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3189, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3190, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3193, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3207, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3215, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3235, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 782, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1381, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1381, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3011, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3159, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3159, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3171, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3172, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3172, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3178, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3178, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3183, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3213, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3213, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3239, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3239, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3244, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3244, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5477, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5477, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5505, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5506, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5508, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5524, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5558, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5561, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5561, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5562, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5562, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5566, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5566, result: no such process	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 661, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 769, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 791, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 801, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 928, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1289, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1309, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1314, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1588, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1593, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 1712, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2986, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 2991, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3120, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3142, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3147, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3218, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3246, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3268, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3304, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3337, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3341, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3353, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3361, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3392, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3398, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3402, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3406, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3412, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3425, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3676, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 3847, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5333, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5569, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5570, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5571, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5587, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5591, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5592, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5595, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5598, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5652, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5653, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5656, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5657, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5695, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5701, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5704, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5763, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5790, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5793, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5798, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5799, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5804, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5805, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5862, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5863, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5914, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5921, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5937, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5940, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5943, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5944, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5949, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 5977, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6004, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6005, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6060, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6066, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6084, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6085, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6088, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6089, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6094, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6151, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6152, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6153, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6207, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6213, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6229, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6230, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6233, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6238, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6295, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6296, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6297, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6354, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6360, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6374, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6375, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6380, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6383, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6386, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6443, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6444, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6445, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6500, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6519, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6520, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6525, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6530, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6587, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6588, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6626, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6628, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6640, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6647, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6664, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6669, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6674, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6732, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6733, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6798, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6803, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6865, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6866, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6908, result: successful	Jump to behavior
Source: /tmp/jefne64.elf (PID: 5495)	SIGKILL sent: pid: 6932, result: successful	Jump to behavior

Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: jefne64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: Process Memory Space: jefne64.elf PID: 5493, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.evad.linELF@0/201@1256/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5587)	File: /proc/5587/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5640)	File: /proc/5640/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5652)	File: /proc/5652/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5790)	File: /proc/5790/mounts
Source: /usr/bin/dbus-daemon (PID: 5799)	File: /proc/5799/mounts
Source: /usr/bin/dbus-daemon (PID: 5937)	File: /proc/5937/mounts
Source: /usr/bin/dbus-daemon (PID: 5944)	File: /proc/5944/mounts
Source: /usr/bin/dbus-daemon (PID: 6084)	File: /proc/6084/mounts
Source: /usr/bin/dbus-daemon (PID: 6089)	File: /proc/6089/mounts
Source: /usr/bin/dbus-daemon (PID: 6229)	File: /proc/6229/mounts
Source: /usr/bin/dbus-daemon (PID: 6340)	File: /proc/6340/mounts
Source: /usr/bin/dbus-daemon (PID: 6374)	File: /proc/6374/mounts
Source: /usr/bin/dbus-daemon (PID: 6383)	File: /proc/6383/mounts
Source: /usr/bin/dbus-daemon (PID: 6519)	File: /proc/6519/mounts
Source: /usr/bin/dbus-daemon (PID: 6628)	File: /proc/6628/mounts
Source: /usr/bin/dbus-daemon (PID: 6674)	File: /proc/6674/mounts
Source: /usr/bin/dbus-daemon (PID: 6908)	File: /proc/6908/mounts
Source: /usr/bin/dbus-daemon (PID: 6942)	File: /proc/6942/mounts

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5505)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5524)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5524)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5524)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5524)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5558)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5558)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5558)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5558)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5561)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5569)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5570)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5571)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.config	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68976gx4gOC	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68977VFiwVG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:689785p0kIC	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68590Vc8xLF	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68591mzQ8YE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68592X21gPG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68599HwdjcG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68600yWXNsE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:68601YbUxMG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:69634ayHxHD	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:69635309aTG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:69636aVdHeF	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:69637WOiDKF	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	File: /run/systemd/journal/streams/.#9:69762elez3C	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5657)	Directory: <invalid fd (12)>/..	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5657)	Directory: <invalid fd (11)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5704)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5704)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5704)	File: /run/systemd/seats/.#seat07FH8Yw	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5704)	File: /run/systemd/inhibit/.#1hwLfkw	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5763)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70772T8CK3z
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70778Gh3XnC
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70779MM0YrA
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70780iA10KC
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70781yn6wIA
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70782Og8v8B
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70783EMscDD
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70784siZiOD
Source: /lib/systemd/systemd-journald (PID: 5798)	File: /run/systemd/journal/streams/.#9:70792a31CJE
Source: /lib/systemd/systemd-logind (PID: 5805)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 5805)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 5805)	File: /run/systemd/seats/.#seat0h8M3c7
Source: /lib/systemd/systemd-logind (PID: 5805)	File: /run/systemd/inhibit/.#1cidfa8
Source: /lib/systemd/systemd-logind (PID: 5805)	File: /run/systemd/inhibit/.#1RUtTb8
Source: /usr/lib/upower/upowerd (PID: 5863)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 5863)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 5921)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:71516zVXnpC
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:715228KvctC
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:715251DjiKA
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:715265VXOuz
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:715277Zj0cB
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:71528hJbsVy
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:71529x2aFAB
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:71530HEfeEz
Source: /lib/systemd/systemd-journald (PID: 5943)	File: /run/systemd/journal/streams/.#9:715380smuIA
Source: /lib/systemd/systemd-logind (PID: 5949)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 5949)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 5949)	File: /run/systemd/seats/.#seat0FCPHh0
Source: /lib/systemd/systemd-logind (PID: 5949)	File: /run/systemd/inhibit/.#1S8DeW1
Source: /lib/systemd/systemd-logind (PID: 5949)	File: /run/systemd/inhibit/.#1Dun4g0
Source: /usr/lib/upower/upowerd (PID: 6005)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6005)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6066)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74166BLjgNw
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74249CvgPAx
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74251cFp3px
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74252PnMWbw
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74253K4CQ8z
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74254MtRpjx
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:7425569yrxx
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74256tVMsyz
Source: /lib/systemd/systemd-journald (PID: 6088)	File: /run/systemd/journal/streams/.#9:74264uqFO2x
Source: /lib/systemd/systemd-logind (PID: 6094)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6094)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6094)	File: /run/systemd/seats/.#seat0uZtFuZ
Source: /lib/systemd/systemd-logind (PID: 6094)	File: /run/systemd/inhibit/.#1obCCU1
Source: /lib/systemd/systemd-logind (PID: 6094)	File: /run/systemd/inhibit/.#1QCSs21
Source: /usr/lib/upower/upowerd (PID: 6153)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6153)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6213)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:75956XlP05t
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:75970UKxuEv
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:75973sBvVKt
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:759746bsN9t
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:75981zyuXQv
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:75982A9Ltdw
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:75983nZz21t
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:76036QkcJVu
Source: /lib/systemd/systemd-journald (PID: 6233)	File: /run/systemd/journal/streams/.#9:76170Zg5wvu
Source: /lib/systemd/systemd-logind (PID: 6238)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6238)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6238)	File: /run/systemd/seats/.#seat0MJgRBS
Source: /lib/systemd/systemd-logind (PID: 6238)	File: /run/systemd/inhibit/.#1BWHTKU
Source: /lib/systemd/systemd-logind (PID: 6238)	File: /run/systemd/inhibit/.#11Be5ST
Source: /usr/lib/upower/upowerd (PID: 6297)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6297)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6360)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:76488nHVSbF
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:76495pP4BsE
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75573SSSjNA
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75574eKg1DA
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75575qGcdOD
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75576LRlx3C
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75577X87vEC
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75578sjry8B
Source: /lib/systemd/systemd-journald (PID: 6380)	File: /run/systemd/journal/streams/.#9:75683fLUxIB
Source: /lib/systemd/systemd-logind (PID: 6386)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6386)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6386)	File: /run/systemd/seats/.#seat0aFK3k4
Source: /lib/systemd/systemd-logind (PID: 6386)	File: /run/systemd/inhibit/.#1QnRnw3
Source: /lib/systemd/systemd-logind (PID: 6386)	File: /run/systemd/inhibit/.#1ukVy66
Source: /usr/lib/upower/upowerd (PID: 6445)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6445)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6500)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77358x919ZA
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77359C9iPBz
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77360XHNSqB
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77361bLmnzA
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77367swMy2B
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:773687jkMYz
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77369Zh3RRA
Source: /lib/systemd/systemd-journald (PID: 6525)	File: /run/systemd/journal/streams/.#9:77370HCoQVz
Source: /lib/systemd/systemd-logind (PID: 6530)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6530)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6530)	File: /run/systemd/seats/.#seat0QKwf0Y
Source: /lib/systemd/systemd-logind (PID: 6530)	File: /run/systemd/inhibit/.#1dF6YNV
Source: /lib/systemd/systemd-logind (PID: 6530)	File: /run/systemd/inhibit/.#1kGZKiY
Source: /usr/lib/upower/upowerd (PID: 6588)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6588)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6647)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6669)	File: /run/systemd/journal/streams/.#9:78258Bnnhzu
Source: /lib/systemd/systemd-journald (PID: 6669)	File: /run/systemd/journal/streams/.#9:78265FuTNov
Source: /lib/systemd/systemd-journald (PID: 6669)	File: /run/systemd/journal/streams/.#9:78273Mmy1Ut
Source: /lib/systemd/systemd-journald (PID: 6669)	File: /run/systemd/journal/streams/.#9:78274E1iOps
Source: /lib/systemd/systemd-journald (PID: 6669)	File: /run/systemd/journal/streams/.#9:78282PL9aGt
Source: /lib/systemd/systemd-logind (PID: 6675)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6675)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6675)	File: /run/systemd/seats/.#seat075fhhX
Source: /lib/systemd/systemd-logind (PID: 6675)	File: /run/systemd/inhibit/.#1Cd3sJV
Source: /lib/systemd/systemd-logind (PID: 6675)	File: /run/systemd/inhibit/.#1C2uPfX
Source: /usr/lib/upower/upowerd (PID: 6733)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6733)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6803)	File: /run/systemd/journal/streams/.#9:79518vUivFz
Source: /lib/systemd/systemd-journald (PID: 6803)	File: /run/systemd/journal/streams/.#9:79519vBQhwB
Source: /lib/systemd/systemd-journald (PID: 6803)	File: /run/systemd/journal/streams/.#9:79527tGrJPz
Source: /lib/systemd/systemd-journald (PID: 6803)	File: /run/systemd/journal/streams/.#9:79534srs81z
Source: /lib/systemd/systemd-journald (PID: 6803)	File: /run/systemd/journal/streams/.#9:79613JYNDcA
Source: /lib/systemd/systemd-logind (PID: 6808)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6808)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6808)	File: /run/systemd/seats/.#seat0squxW0
Source: /lib/systemd/systemd-logind (PID: 6808)	File: /run/systemd/inhibit/.#1tPYZv1
Source: /lib/systemd/systemd-logind (PID: 6808)	File: /run/systemd/inhibit/.#1vMiKa1
Source: /usr/lib/upower/upowerd (PID: 6866)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6866)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6937)	File: /run/systemd/journal/streams/.#9:80104K98gTH
Source: /lib/systemd/systemd-journald (PID: 6937)	File: /run/systemd/journal/streams/.#9:80111Aiw2KL
Source: /lib/systemd/systemd-journald (PID: 6937)	File: /run/systemd/journal/streams/.#9:801199jBtyJ
Source: /lib/systemd/systemd-journald (PID: 6937)	File: /run/systemd/journal/streams/.#9:80120zUcj8H
Source: /lib/systemd/systemd-journald (PID: 6937)	File: /run/systemd/journal/streams/.#9:801999TVTpL
Source: /lib/systemd/systemd-logind (PID: 6943)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6943)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6943)	File: /run/systemd/seats/.#seat000ykhc
Source: /lib/systemd/systemd-logind (PID: 6943)	File: /run/systemd/inhibit/.#1fqjd8d
Source: /lib/systemd/systemd-logind (PID: 6943)	File: /run/systemd/inhibit/.#1SP3vra
Source: /usr/lib/upower/upowerd (PID: 7001)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7001)	Directory: <invalid fd (11)>/..

Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6296/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6340/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6295/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6374/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6233/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6233/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6233/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6233/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6233/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6233/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6354/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/6360/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/2955/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/cgroup
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/status
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/comm
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/cmdline
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/attr/current
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/sessionid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/loginuid
Source: /lib/systemd/systemd-journald (PID: 6233)	File opened: /proc/661/cgroup

Source: /usr/bin/gpu-manager (PID: 5769)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5772)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5774)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5776)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5778)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5782)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5784)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5786)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5906)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5908)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5910)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5913)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5916)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5922)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5929)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5931)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6051)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6053)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6057)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6061)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6067)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6072)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6074)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6076)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6198)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6200)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6202)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6204)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6208)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6214)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6219)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6221)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6343)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6345)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6347)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6349)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6351)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6355)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6361)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6366)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6488)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6490)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6494)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6496)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6502)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6507)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6509)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6511)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6633)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6635)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6637)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6641)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6644)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6652)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6654)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6656)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6776)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6778)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6781)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6784)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6788)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6790)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6792)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6794)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6910)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6912)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6914)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6918)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6920)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6923)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6926)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6928)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7046)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7048)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7051)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7054)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7056)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7058)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7060)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7062)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5770)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5773)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5775)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5777)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5779)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5783)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5785)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5787)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5907)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5909)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5911)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5915)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5917)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5923)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5930)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5932)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6052)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6054)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6058)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6062)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6068)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6073)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6075)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6077)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6199)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6201)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6203)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6206)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6209)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6215)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6220)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6222)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6344)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6346)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6348)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6350)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6352)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6356)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6362)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6367)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6489)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6491)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6495)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6501)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6506)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6508)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6510)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6512)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6634)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6636)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6638)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6642)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6648)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6653)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6655)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6657)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6777)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6779)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6782)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6785)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6789)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6791)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6793)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6795)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6911)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6913)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6915)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6919)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6921)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6924)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6927)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6929)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7047)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7049)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7052)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7055)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7057)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7059)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7061)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7063)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5792)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 5934)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6079)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6224)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6369)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6517)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6661)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6797)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6931)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7065)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /usr/bin/xfce4-session (PID: 5565)

Rm executable: /usr/bin/rm -> rm -f /home/saturnino/.cache/sessions/Thunar-2692b1019-2e62-4110-a5da-30fefabc5610

Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 5653)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5798)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 5943)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6088)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6233)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6380)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6525)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6669)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6803)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6937)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 5768)

Reads version info: /etc/issue

Source: /usr/sbin/rsyslogd (PID: 5591)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5656)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5656)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5767)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5804)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5804)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5905)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5977)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5977)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6050)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6152)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6152)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6195)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6296)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6296)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6342)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6444)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6444)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6487)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6587)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6587)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6632)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6732)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6732)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6775)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6865)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6865)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6909)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7000)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7000)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 7043)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/jefne64.elf (PID: 5494)

File: /tmp/jefne64.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5767)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5905)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6050)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6195)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6342)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6487)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6632)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6775)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6909)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7043)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pulseaudio (PID: 5695)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5792)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 5862)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 5934)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6004)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6079)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6151)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6224)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6295)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6369)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6443)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6517)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6626)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6661)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6797)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6931)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7065)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5505)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5506)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5507)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5508)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5558)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5561)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5562)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5566)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5569)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5570)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5571)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5591)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5653)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5656)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5695)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5767)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5768)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 5798)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 5804)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 5862)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 5905)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 5943)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 5977)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6004)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6050)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6088)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6151)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6152)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6195)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6233)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6295)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6296)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6342)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6380)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6443)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6444)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6487)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6525)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6587)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6626)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6632)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6669)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6732)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6775)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6803)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6865)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6909)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6937)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7000)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7043)	Queries kernel information via 'uname':

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: jefne64.elf, type: SAMPLE
Source: Yara match	File source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jefne64.elf PID: 5493, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: jefne64.elf, type: SAMPLE
Source: Yara match	File source: 5493.1.0000000000400000.0000000000420000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: jefne64.elf PID: 5493, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
jefne64.elf	52%	Virustotal		Browse
jefne64.elf	50%	ReversingLabs	Linux.Backdoor.Mirai
jefne64.elf	100%	Avira	EXP/ELF.Mirai.Z.A
jefne64.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fingwi.cardiacpure.ru	178.215.238.112	true	false		high
fingwi.cardiacpure.ru. [malformed]	unknown	unknown	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.77.dr, syslog.426.dr, syslog.137.dr, syslog.195.dr, syslog.485.dr, syslog.371.dr, syslog.255.dr, syslog.584.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
178.215.238.112	fingwi.cardiacpure.ru	Germany		10753	LVLT-10753US	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
178.215.238.112	wlw68k.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	nvebfe64.elf	Get hash	malicious	Mirai	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	rjnven64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
LVLT-10753US	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	ngwa5.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	nvebfe64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	rjnven64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	fnkea7.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wkb86.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	njvwa4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	kqibeps.elf	Get hash	malicious	Mirai	Browse	178.215.238.153

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/run/systemd/inhibit/.#11Be5ST

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iffvVYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfpApLHK7wR9n
MD5:	55E743B939E6907AA3A0A740774637A5
SHA1:	FAADD1AD74A19B6188B816A408C7C31511B0D8E5
SHA-256:	C3F6460F7D0B93073A60719937588ECBAF9DF7E4FEBD4BB2D6C3CAF7639BFFD7
SHA-512:	B361F76DB0C83CEC29B541F9025BDB0A0C376258B58A4B518A549ECF66B00DFF3517531F8A25A37CE7F905DE342E24EA340D0C56DBC292A85333919483C7B1D1
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6297.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1BWHTKU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if0vV3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfWJApLHK7wR9n
MD5:	AAF662CB9DC9D0ABC4E291E32F5AC193
SHA1:	A6EBCA5D0E3C93F722110FAD76BFDB29B17FC977
SHA-256:	20C8863719CE18B36167A37C3C1F80804EA7C8B1A9E959FEE175F61CAF2E8442
SHA-512:	0037BACF5D938FC617B952BECF8110B52970EFE00A2E67057687C07A3F7ECAA1DEBBE2D2E67B4E047BE02E1D7D437C459DFE40A8A89D82CA86311DB89442756B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6153.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1C2uPfX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifYWjAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfr0ApLHK7wR9n
MD5:	CF6BA4A2958380E6E047C531199A2F77
SHA1:	CDC1A36EA3DDFACACD75A98FC6B9AF79890F3B30
SHA-256:	6047E3CBBE46129C7C233822C40AC58DE08C172AACDE820959449F5C7D2DE35E
SHA-512:	841DED9183838EE581230D937E648588DC8E1A0850D38EF9238AA915B2AC7EDC62606C13117A6864E11581ED352BE1A2EE1EE459EC3477154CD494EB0FF7E4C7
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6733.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1Cd3sJV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if+y61IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfNeApLHK7wR9n
MD5:	302423D5303A710D86C5A0FFACF50C3D
SHA1:	58DADD1615D3F5187A5DC3AF165B67AB4BDCBBD2
SHA-256:	EDD51782D10EC51322AB0CDB167BA840071B18088083A5373214546B775EB499
SHA-512:	607A3BC011504AF4594AD00F9C87A9D9FA5A197CC01792B4C91563D2FF4144ED733EC3711F2A550DA5AE14CF27E776D3982683CBFF4C17419EA10BAB741D6A1B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6588.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1Dun4g0

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifG+qYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfa3ApLHK7wR9n
MD5:	4502CABC9790CDD10184423C742DD1BD
SHA1:	6B32E3DC209D73C1D603321976FE2EE65035FFD5
SHA-256:	3C869B1991097101E2F55AD6662CBE5EC597190369392BA9A0F1CE1D61361256
SHA-512:	D236816E17D2F974EF4A73E6CA74DA3513FFC4CA2C36AF1578D80432188C724C62CDE826F846D5476E37A103137DEF4449687940C700BB814D1D543BD7B30DF9
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6005.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1QCSs21

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if0vV3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfWJApLHK7wR9n
MD5:	AAF662CB9DC9D0ABC4E291E32F5AC193
SHA1:	A6EBCA5D0E3C93F722110FAD76BFDB29B17FC977
SHA-256:	20C8863719CE18B36167A37C3C1F80804EA7C8B1A9E959FEE175F61CAF2E8442
SHA-512:	0037BACF5D938FC617B952BECF8110B52970EFE00A2E67057687C07A3F7ECAA1DEBBE2D2E67B4E047BE02E1D7D437C459DFE40A8A89D82CA86311DB89442756B
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6153.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1QnRnw3

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iffvVYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfpApLHK7wR9n
MD5:	55E743B939E6907AA3A0A740774637A5
SHA1:	FAADD1AD74A19B6188B816A408C7C31511B0D8E5
SHA-256:	C3F6460F7D0B93073A60719937588ECBAF9DF7E4FEBD4BB2D6C3CAF7639BFFD7
SHA-512:	B361F76DB0C83CEC29B541F9025BDB0A0C376258B58A4B518A549ECF66B00DFF3517531F8A25A37CE7F905DE342E24EA340D0C56DBC292A85333919483C7B1D1
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6297.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1RUtTb8

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if0q3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfT3ApLHK7wR9n
MD5:	802B4FE7260EF502D44A393CEA429844
SHA1:	A04BC2C0296B0C014DB148AA5AF95266B378FF13
SHA-256:	3E37EB415976E38EEA8E3D58508D57755C922E8E549567E601D87AC4C20769C0
SHA-512:	FE78FCE35FAF4E49FABA62283454FF367232A358177DEE9E7B56C7961AE61F39A6B30136A9B1BB7B8C13F3DCE9F7251F7DBCBD2636A20BF052A8E4D547890786
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5863.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1S8DeW1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if0q3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfT3ApLHK7wR9n
MD5:	802B4FE7260EF502D44A393CEA429844
SHA1:	A04BC2C0296B0C014DB148AA5AF95266B378FF13
SHA-256:	3E37EB415976E38EEA8E3D58508D57755C922E8E549567E601D87AC4C20769C0
SHA-512:	FE78FCE35FAF4E49FABA62283454FF367232A358177DEE9E7B56C7961AE61F39A6B30136A9B1BB7B8C13F3DCE9F7251F7DBCBD2636A20BF052A8E4D547890786
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5863.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1SP3vra

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.076659377371801
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iff+0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfxApLHK7wR9n
MD5:	BF404B77F22CB14AF1DEC5DE1DB1D8A7
SHA1:	EEC616AA3F7A34FA14B066DF894D326EAA0D3ED6
SHA-256:	8EDB3A83438B5D7A3A4725CEA1E63280A2BB9D3CFBEDBCC880AA4512338F8BD5
SHA-512:	1CB2588D99E37366FF4DBC825412B1A043A6F5EE1A1B9A44329F753697B49AEF256564F97A41B6F36669F846FE2859738B646E6704A138456200C23B55943F9C
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7001.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1cidfa8

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifM3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfaApLHK7wR9n
MD5:	861E9DADDBEE9E55029994086C2C225A
SHA1:	4EC06349A6825E9156C198D7E98BB8A702EC24CC
SHA-256:	6B28F468C0E5109C9AEC4DBB5C99CA08A816DE408EB53F54A1CF477D20A1A43E
SHA-512:	1A9073B9922A0F6428EED7B03EFCF4BB7F69CE42E32C594EC5E3BC719CCD7CB006F5491C410E4DEEB3103C6FE2E6B1C2BC858104CD06CD38C8CDA0CEE61A8723
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5657.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1dF6YNV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifcBIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfcBApLHK7wR9n
MD5:	51D93FF3B85FB8FB8417F3A812DE16A6
SHA1:	3C3D29DA4541F9AD0B31EABE705EEF080644EAF0
SHA-256:	7E421AE59780EF218B821E8EA66D794BCF4FD670DB758DD745EE62572F686905
SHA-512:	1063393F6536E3B0D6694786CDA6913200F98893B6D12AC5C9A6FC6F2F28F848CC4AAFDE224FB5AA71EF0C3FD737A2993FB0DA4F98E58F7D7D453EC6B5E0F92F
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6445.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1fqjd8d

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifT3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfT3ApLHK7wR9n
MD5:	1014B4820B08728F58CE3040FE01F6F2
SHA1:	B72A49D1193812FD9DBA00651152DEB7F7018702
SHA-256:	41A8895DD026F809CD21D74ECF00F2E63E4B839363C7D73113D65D67531EEC1A
SHA-512:	2C08B073AD961DAB9E15A9DDD0B418927E9DFF31717F82B17422024696096067550BEC96F2F064E1C6EF078FCDB55088BB0B9275718BBD969D800E3DA63E42AC
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6866.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1hwLfkw

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifM3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfaApLHK7wR9n
MD5:	861E9DADDBEE9E55029994086C2C225A
SHA1:	4EC06349A6825E9156C198D7E98BB8A702EC24CC
SHA-256:	6B28F468C0E5109C9AEC4DBB5C99CA08A816DE408EB53F54A1CF477D20A1A43E
SHA-512:	1A9073B9922A0F6428EED7B03EFCF4BB7F69CE42E32C594EC5E3BC719CCD7CB006F5491C410E4DEEB3103C6FE2E6B1C2BC858104CD06CD38C8CDA0CEE61A8723
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5657.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1kGZKiY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if+y61IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfNeApLHK7wR9n
MD5:	302423D5303A710D86C5A0FFACF50C3D
SHA1:	58DADD1615D3F5187A5DC3AF165B67AB4BDCBBD2
SHA-256:	EDD51782D10EC51322AB0CDB167BA840071B18088083A5373214546B775EB499
SHA-512:	607A3BC011504AF4594AD00F9C87A9D9FA5A197CC01792B4C91563D2FF4144ED733EC3711F2A550DA5AE14CF27E776D3982683CBFF4C17419EA10BAB741D6A1B
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6588.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1obCCU1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifG+qYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfa3ApLHK7wR9n
MD5:	4502CABC9790CDD10184423C742DD1BD
SHA1:	6B32E3DC209D73C1D603321976FE2EE65035FFD5
SHA-256:	3C869B1991097101E2F55AD6662CBE5EC597190369392BA9A0F1CE1D61361256
SHA-512:	D236816E17D2F974EF4A73E6CA74DA3513FFC4CA2C36AF1578D80432188C724C62CDE826F846D5476E37A103137DEF4449687940C700BB814D1D543BD7B30DF9
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6005.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1tPYZv1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifYWjAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfr0ApLHK7wR9n
MD5:	CF6BA4A2958380E6E047C531199A2F77
SHA1:	CDC1A36EA3DDFACACD75A98FC6B9AF79890F3B30
SHA-256:	6047E3CBBE46129C7C233822C40AC58DE08C172AACDE820959449F5C7D2DE35E
SHA-512:	841DED9183838EE581230D937E648588DC8E1A0850D38EF9238AA915B2AC7EDC62606C13117A6864E11581ED352BE1A2EE1EE459EC3477154CD494EB0FF7E4C7
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6733.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1ukVy66

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifcBIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfcBApLHK7wR9n
MD5:	51D93FF3B85FB8FB8417F3A812DE16A6
SHA1:	3C3D29DA4541F9AD0B31EABE705EEF080644EAF0
SHA-256:	7E421AE59780EF218B821E8EA66D794BCF4FD670DB758DD745EE62572F686905
SHA-512:	1063393F6536E3B0D6694786CDA6913200F98893B6D12AC5C9A6FC6F2F28F848CC4AAFDE224FB5AA71EF0C3FD737A2993FB0DA4F98E58F7D7D453EC6B5E0F92F
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6445.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1vMiKa1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifT3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfT3ApLHK7wR9n
MD5:	1014B4820B08728F58CE3040FE01F6F2
SHA1:	B72A49D1193812FD9DBA00651152DEB7F7018702
SHA-256:	41A8895DD026F809CD21D74ECF00F2E63E4B839363C7D73113D65D67531EEC1A
SHA-512:	2C08B073AD961DAB9E15A9DDD0B418927E9DFF31717F82B17422024696096067550BEC96F2F064E1C6EF078FCDB55088BB0B9275718BBD969D800E3DA63E42AC
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6866.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/journal/streams/.#9:68590Vc8xLF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.42300837730829
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsSE43ULmTSNrqjske:SbFuFyLVIg1BG+f+MsSEzaeNrqjfGt
MD5:	7D2D64DCA9EC47F3948652E2E61C4EFC
SHA1:	4EB6010193201004E014386B00A933D3EFD0380E
SHA-256:	F5B0521E1FC02D41DEEF788CCB112621FA968F97B780101DA5B550C97F586ABB
SHA-512:	B56AB9099C0E5F5470A0364B549C6D6603B8554158E2C6B73F87B814BB049C86B69DE954139D0541043C7E02AA546147343178027C6AD7426BFB27AEF378EBE8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f5b217680d2f48cbaf104c271d2d2b67.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:68591mzQ8YE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.388019686569516
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8EDuWVkvqGGEA2rqd:SbFuFyLVIg1BG+f+M81vGE4josQu
MD5:	5BCA9A20C8C82A915662E0D2E930797B
SHA1:	AE47277AD6691E87E7797F90B9F29BF309F135A8
SHA-256:	479B1B5B00F7207BE6E23F8B50C7E879CFF7E4BBE951BE6833CF7D31AEA4CB9D
SHA-512:	499C83137DCC25CE3F835F399A52085E096A1D9CBE56416066F88D05F3375AA23D036A660023D481AEF30E1187E21BAEAFF1BCA1D57BE4AA6D1B780D92D69B67
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60038b8d785f40d7acf540c3c0510aaf.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:68592X21gPG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.402269869805141
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmonDRLUADSHYdvF2jW:SbFuFyLVIg1BG+f+MoDRgAD0YtF2jfGt
MD5:	32400EC23AAE86EB028F6AA398EBC509
SHA1:	041E14DFB8345B9555A4A2AE1B80897B342860BA
SHA-256:	4B2DDBFADEA4A6603C981EAEDBBE5B5B499304863F6AB88C7B45D9658D8872C6
SHA-512:	D8922FAED9CCFA78D8D682F597B31F4DE069633045358C555C638ABAF5512253AC58B1D659DF975DBEFD0720EC08502B0F651F733AFE2C81906A4868D207F64B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b2e14f43b66941efb180998b00820588.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:68599HwdjcG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.353395264274772
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrZdVGsdX9z4SVBvFE:SbFuFyLVIg1BG+f+MB/Nz4SVBN2jtWL0
MD5:	35E18CF1BE628E16E9720F7FCBE36EC1
SHA1:	015AAAE95879086E9CCEE55C93CCE4DEF8A83A9C
SHA-256:	45452A977C6E832489851275A21E20E8F1F036718FB5C32D076E167F9BF093AB
SHA-512:	72E40C53583F1E0B9554110FFD4E90DFD56432244F1E58DA3AA25A65FFDDBDF2DFE2079D3ABCD49C9C6B1F00EC70764D18FF7E8C9D6FD099DB60189D609A4F45
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a60c1d029b024e82b596df42fa087b0d.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:68600yWXNsE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.427756062300736
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoEAUXJmsGjYK8jsjF:SbFuFyLVIg1BG+f+MoPO1Gh8jNE
MD5:	179A21FDD72A6849B7839BFBB60BB215
SHA1:	13D5C9079CCD737F0C5E85BB00CFFAE744807824
SHA-256:	28F9A13848CD0A9D2D9E4BE282A19CABD70A526200E4688524ACA6D40F4A1AA1
SHA-512:	585CCFAE716EB366BB26EB848D8F04A4EC14AFC6060F1E87BCC36E3AD85E043F481FFC460CA57D4060E5AA0B29B0E6F6C91972C62FF7E98FDBE41327FE72C4EE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bac240872e9749bc95d85c3cd01981de.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:68601YbUxMG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.501671888557385
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MBHQw6huqjZcHcljX+:qgFq6g10+f+M9KRmAu
MD5:	AD050475FD5A189ED236B146C7F138C7
SHA1:	4DF301FA7E897CF4840103B17C3B2632E90E3600
SHA-256:	8EC00292252D48FCE36CCD62FE6D261562F13944E4A55E233CFF708F798415D3
SHA-512:	20DE39C7E416565A2D8EEC0D27C4BDD5FE3997FD3A5067F5A36BAEE4B5EDC74C454FBB0153C8F86FD9CEFF84D484B81CA5EA78503B523C9EAA53AE3286B63766
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9e8c4b13b8e74c11af6c7053449549f1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:68976gx4gOC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.52266127678908
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6pUVwNViTLRVhhgl3:SbFuFyLVIg1BG+f+M6pvVazh22ji4s
MD5:	E8AB1E4378F81B66A3D1865050A52AA1
SHA1:	4F67C791306F1546F7928FA5FEB3738230ED6590
SHA-256:	A82B0229B2B9A83888A6ADF84FF68976C5843185051B051212E3EFB080B1E5F5
SHA-512:	575CFAFB52EC49FE637F78E4A39EA86C2018E61F6538F87FD9D0DDBCDC8CD1B9DA4E8D245A434C95F73CC9B1F506EDCC8812C71C00DAA002046B09B070479C7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=07ebdf10730142d6b48e7486a5c6b40c.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:68977VFiwVG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.436922841431418
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/1bxzAQRW2lsjs1Ha:SbFuFyLVIg1BG+f+MfzAQw22josQu
MD5:	F4A1B26C6FB826B680EF1B457515AE37
SHA1:	8E04029CAFAF9B8E025DC030B23D25D63C003C66
SHA-256:	76A554DC6B00A58FD00A801630899F25FC47E29E255CF69D816D52E02E173FC2
SHA-512:	29342A57D709777744D74646AA26DC86BDDC4950631E00A4E6DA55FD5CCD79AC029DFD093BC4C8104201F46D1D53031862971B7DE13B46C951EC8C77F535F00A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5a92a362235d4fb98f59e7e3be918b40.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:689785p0kIC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.372818053925854
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsGwOQv9lAgDYg2jsO:SbFuFyLVIg1BG+f+MsZOujYTjtWL0
MD5:	2F9540F21D161796928C7824ED51F44E
SHA1:	22F21BAA57D0E616F3742215230627842E96A1C3
SHA-256:	5279E314AE6D6CC9CA9E5A284BA82ABE1F527816D45D6C937143812455D0D422
SHA-512:	2361A94C03742CB3B9CA02D3EA1E927722A908C0147823A505D895D637E6ED3370A8B5BB1432D5246E38CB4CEADB4DAE694E9EC4AA4914C8B37BC3F0B2A892C7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fc7b2051c6b445ffbd2723257d6504cf.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:69634ayHxHD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.427177904002306
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuVBByDhDXe11HzZj0:SbFuFyLVIg1BG+f+Mu/UDhLI9jbVC
MD5:	73D8438694591449CEAA835FB425E3D6
SHA1:	59C4A2CE56EF61F656263977452BE58BC526525A
SHA-256:	8A4471A9F33A565132B7DD9E8A16D72401E8AFF56146AEDF832EC049B64F721E
SHA-512:	C0C63D4A4133820F4E7CD6057FD8B98FE3044D457B92B10F4CA3ABC09588FE5C0F270152C0F1D3FD201B993A815F0501322AB5660EDB57DDDFB5C8BB89F2B4B0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dd7951d4153848b3a27d872124f219b9.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:69635309aTG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.370629969420534
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrFmRAidXcWQROvswQ:SbFuFyLVIg1BG+f+Msmin0joa
MD5:	690CAEFBF7B219DCA44EA42DE8B9A22E
SHA1:	847A9641BE87354F0456BE3AD0053EAB11955296
SHA-256:	74B44923E7C19C807C53BB9FE8E72A8AF468BA204CE42FE214DE65A517B21C97
SHA-512:	41111D6469D0F7EDAF80E15381AA0D23003D049C44C2F03F8E43500ACF111DEBC2B3187777FF924A02C4CE55A96E3D7CCC5609444C5AC1DB790F920A1EFF365F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a94e0e8c5e1e436083fe062f53541c2c.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:69636aVdHeF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.453681648616153
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoDD3SWBRWeUnssjs2Ax:SbFuFyLVIg1BAf+MoDmbnNjNALyAZD
MD5:	21253E098FDFE18B4E0D3E0A0DA0171A
SHA1:	57581ECFF7E5011A933538D2AC1C8B8D6346E9CE
SHA-256:	27DAE3553C849B38D62F4E8048D6FB37B43802A6278F26A3806D448C85AFE147
SHA-512:	4637D1C1864C8B717D88FBF930D6D054409C594C8A64947A0F1AF8FB6874136D744DE0529B56754FD0F9DFE3901F17878C80FBDB9E80528DDA86F4DAD909C984
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bfffb673075f4367b723027d04429800.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69637WOiDKF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.410568953376232
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrtTU5+tUWSnRsvAgT:SbFuFyLVIg1BG+f+MgWSnRsvF2jLkGq
MD5:	718AE46354563159191C631E2087DE14
SHA1:	D67780B6A0B66D88506FA99F951F403FBE059678
SHA-256:	B34E33CD9C63BF0C3BC436F7CF0F0D1B4AB7280E41DAE67E8BDE8BDEA2993FFD
SHA-512:	A77E91AF0C49755E2692F43C0D405C8558794E18EA614CFEF7971D0A5B9EFB331BC0AABFD1B81B8EB3E483CBCB5EFF0BC84465A9CE818D54B19BFC90519F9C84
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a37b69c545c643839ce07161379d740c.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:69762elez3C

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.438179195677894
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmv2CVBRuEhKlGFlsjs2y:SbFuFyLVIg1BAf+M+WnuEhOjNdQIeXD
MD5:	13835B23E4B91D9012931396EA2AA616
SHA1:	38E67C78E5C56862F06000DC0541E164F9D768AD
SHA-256:	665F87575F7F792F8757CD87C0C929C88B6E5607932000DA924EDF51734FF39D
SHA-512:	202C41C18667329A7FFD451DEF8D0DE63ACB9BBD92D9BF617BCDC3AD1AA6E7FDED6B63CF04D365EF35DFE19675FCAB1C9E34D85410C8CE2E35401D4D159C4150
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ee6ec47d590d402eb4f4327344b6ceea.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70772T8CK3z

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.432324413993136
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+wAXQhKFX1DkYgrqd:SbFuFyLVIg1BG+f+M+wAX4K/arqjosQu
MD5:	C82C171959E057F021AFAC2476EAA403
SHA1:	A0745B2FA504F8FEEBE359963639C77B97AD062C
SHA-256:	435A0CECCF056109774D300844E01F5AC179CF77EFE60563AFC37F8E74CE35A2
SHA-512:	764005780B49C87A4AC619E9FF6542826D2F668B2A3E28CEEA212E389504DF664E4F23DF5ECE3BE3F6DF3D177C9A19B4A67DE9E9B986D127E36834D24477D9AE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48fce8054e334244b9e362232e126fd7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70778Gh3XnC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.467610081765795
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mut2ZfHZXejZcHcljX+:qgFq6g10+f+MBAmAu
MD5:	A9F1DE38B4A3ABEEE96A588981468CF7
SHA1:	8A8CA96ED21F5E328D149A6E7FE3D955164333F6
SHA-256:	91312AEF21A20AEDE629110D160CAEFC95164F28D098669AFB5E162C19AF57B3
SHA-512:	B925069AEF934E16CF13F55EDDB95F56884BE5610DE0A1C26DF5E437B0F5365E7FC16013DA5F546F8A9F7A4B06C3CF0E75B18C569F4B6ABDAF8E2037516E8BBA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=da6c16071afa4ab5bda9b42a245573e0.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70779MM0YrA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.354580469203091
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsAfVA+JTrJEFtHjxm:SbFuFyLVIg1BG+f+MseVAsPJEKjtWL0
MD5:	D44584F96E5C24067515F141101374D5
SHA1:	62CA4167C801601388F66FA76C5049F5BA4AEEA8
SHA-256:	4BEDBE109229FAE0CA6A36692F525B123794813FE7DF0ACCF1EF93D5488152A3
SHA-512:	3DB2A3F6D0D93C81B01881F7011C90268999246318CEA39089720674378DCECAD775F945DF78395D9C1C3ABCBA5C096FD99439A9B6E55D29E6F9278B645A4171
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fec1f0e016a746bc959a27c99c503de2.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:70780iA10KC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.400774716212669
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyglHGWUaWd22jskGt:SbFuFyLVIg1BG+f+MygloamjfGt
MD5:	D0C7F6D652257BCB530B2F07C31ADF29
SHA1:	F34DA7247EA074C5249CFD41B498ED83BC293FF4
SHA-256:	33726B4C7E70FB439D9495060147C710643C7AF4512D87DD5FFD996FBC1635CE
SHA-512:	AFC33C0D49C16C15D9B3C308DCF21621C58719FBAF41580B5C07FEC923A0A7611254638A9E4EE8B32E4E6195FDF7249D28E57F35B36D3393C5FBE6D31B46973E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=84c1c0bd30d047d691412cdb568e0837.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:70781yn6wIA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.438253314472723
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsXdWb1XEHdDQXXWWx:SbFuFyLVIg1BG+f+MsUb1XE9DQ2uqjNE
MD5:	59C263BB9E65CC9BDF890E4A8E398114
SHA1:	96EE50A6E37301B69303BB68439F7104E3E36D5C
SHA-256:	6FB256CE7EB812922628878950B4172BFFF680A6D2BBBB56648FA68A5BE6431E
SHA-512:	A6E20B232349B5640AFD82D387455E478BE2845D7EAA2DCC92EE159EF871BBE983180E8579FE4013DC68D5A764063A03B81847E6DCC9AD297C84212CB717D339
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f2718ae7b5914de9a2bab8f528d8f833.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:70782Og8v8B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.405070250462601
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoHCQWQU6ymRS38js1:SbFuFyLVIg1BG+f+MoHCDQ9DSsjbVC
MD5:	E1AA2F896E6775989EA216B85FC1F6A1
SHA1:	EB24D572E58BA1B5EFC46227A5F4F0434FE48D08
SHA-256:	9903ECAC0510154A32604EA9774D0D40EE1E1514DAE8E1F66A4E5520D0A23324
SHA-512:	469A1D9722AA40D49EEC6D262F17873952A5EE9DA372B833C5154BCC9AAAB84A347667251F4A2FAE816B91489CB62FDABBA48D7B3B0840AC945A2AB5DD86392E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bb52699b893940ba8957618e90e84779.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:70783EMscDD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.375556067870598
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6uNc2AbHwIHVyY+sjsx:SbFuFyLVIg1BAf+M6uO28nnjNALyAZD
MD5:	93631A6456709A9BC48B94AAAC7DE22B
SHA1:	F6AD3251DB40495534FC8DE21CB0631555057F92
SHA-256:	E753CB19EEBFE3AFD1CC97EA5B4DC0D08E3542E90CBE91A338F604E37AD5F7D6
SHA-512:	1465B40F4562EF11A130BA0A570469BE84CA0922B1B79F425E48BAD4AFB7519E98CFD31838486161C7F25D96D2C4F80EE52565D12B47CC669AC3C2428BA0A617
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00fea0999cce4fdb9c56e5d89b03ddca.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70784siZiOD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.367644472506141
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/uKxccUK599Vjyjs4:SbFuFyLVIg1BG+f+MWKacf5Zyjoa
MD5:	16F7F72170CD7407B3E526D4ECAFB09D
SHA1:	2D7DBE9C175D3F70325BAC848C0211DD61809789
SHA-256:	81688FE284078ADB6CA9E9E709467E5E4AC99D4BDE2C38D834DF9F83868D4B27
SHA-512:	9396EF51609D1FED6621573FB5C53C41237B09381A2F306490C5440F5BC069B92E23F94332ED0702EB180A45EE5CCBAB20FB01787AE1236FED3D69043D9D0305
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=578c84e4c951491a9ec7fa1578075f99.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:70792a31CJE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4993771789120975
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/Qek6UnGnBYrxsjs2BI:SbFuFyLVIg1BAf+MGpn2BYrqjNdQIeXD
MD5:	D1213F9E60FA4A2D77CB398DD1155EBC
SHA1:	2335EA4DFB8A14A0F88CD59F76CE99A716CBCD35
SHA-256:	D103A378E6F0EED7DB5974AE3B956DC13674718529FFCC1C89A05097EB37ED93
SHA-512:	46E1FF95AE947AEF035D7FA2C626D2B2AEC238852EF3FB29DDCF3DEC084272DB36D388279237DE8C939FD83291B836BE7E258E242172672C61DA0CB98838C89E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=542a6d6b99bf47fe9f371c5e7b56d82a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71516zVXnpC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.370939461674395
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm87a2Geuxsjs1Hadme:SbFuFyLVIg1BG+f+M87a2VTjosQu
MD5:	1E55BA2A8640A2128C90BE128AC07D62
SHA1:	4ECC3B0DFC94CCF3BFDC76EDAC8F703676DFD0A3
SHA-256:	497CDCB65757F4E005374A5D8BF679373F0FADA046EB81D87FBD367A8E565E35
SHA-512:	C1B675FC10E6C3A2093E837381601298BB962D0567026867E5EEE50BDF9A1EDA3D982702A2DEF8EF6D50AB2949EFDA5FAEF375EEA7C3EEE4F25EB76B593EC3A3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60aef939e4174607901a91e7a3db7002.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:715228KvctC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.478166985936069
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4xyzUDKqjZcHcljX+:qgFq6g10+f+M4g0mAu
MD5:	6CD1727181DE9DB0B323FF03FDEA8E31
SHA1:	09C01C59F637ECB42BEA9CD25F2285CD37B4EB3D
SHA-256:	B9743CDF223B3C3921B1F7BE2C03C8F767E1A29E63723F4DA3220A30E0C4D905
SHA-512:	63EB912F81C2921A6AFA45ECACB6CB48A6128FBB1A86C7D650611EFE347D89F8A1997E203869563F28D1EF0FCE99AC5F13B48CE188920B48AECEF59BB9BDC933
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2e4cb715cdb144439b6a57e13d8c73d1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:715251DjiKA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.385532732253316
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrbdSUfRLQdidGBqjt:SbFuFyLVIg1BG+f+MlnVQdnqjtWL0
MD5:	D11EB4AE40218FA6B91A8E6DB24AD992
SHA1:	C02E11ECAFCE4A846917232F9AF6819006A319F7
SHA-256:	23E9A5F615C81527BD83C03B2E7224EDC3A6C02BDA3999B83217E04952079E3F
SHA-512:	CA6342E4AE2948955D4FEC9DECFBB2581A34AEAA0610637FAA81EF426B7A6C9AC0CF025777F8236257B2DCB05AFDA00AE0D21A5A568AA890A35273FA229BA4F6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ac9d4f5971664f258064788ce8c2e955.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:715265VXOuz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.411143969964243
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyQHbY3CnKBU5qjfGt:qgFq6g10+f+MJY3CnFt
MD5:	46227A19BD2D8F1A762E85366CE3209A
SHA1:	98EA8779B5D029114D73F363C3C59EA4A68847EF
SHA-256:	2ECBD6AF5DF14BFB8131072FF08FA37D9FD5D3284F5AA571E9DCE165F2C3F394
SHA-512:	6B454D9FAF5512C251943F38A0184FDA2061B7608F4D572068463EC146E632A6091C7D75BE790E58A6E1178BF475DB30D2CD132F20AEA44D1EBC07366CE66EFC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8579dbfb4dd74396a06474029b49d4d1.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:715277Zj0cB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.402066826089464
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsEOBmWgCxESd2jsjF:SbFuFyLVIg1BG+f+MsZQCxEhjNE
MD5:	7ABF84FAAA8DDBF921B8039C8EA44E8C
SHA1:	9E074227DAEC14D9FF0695113595A42194C10F7D
SHA-256:	571A518A93155A3B52D34DA9BB3555BD08D9FAC0A40ED48187B062AAB63178FE
SHA-512:	DB5A25C0A6322517EF38F28371EDD350AECB9F161442714756410E68AC24403B6F39441378BC243B28B9C67BCCC21F37DB2113C99E9F2E4946A9DDA7F55F40F1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fa3d1724923a4813ae299e0e557c00cd.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:71528hJbsVy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.410939852988797
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9UGCFtPQpYj5jshKe:SbFuFyLVIg1BG+f+MgFtPeE5jbVC
MD5:	B33DDFE6311C5DA020C4BD4659864361
SHA1:	1F25032CECD59179522D489AADEC4750BD67548C
SHA-256:	C33B3DEAA57F397E0E50390234F2E3422638804DBD818AE00AA90DDE35BD2F98
SHA-512:	CFA57A8297E1B5C2CA58709D01142108393C548859EEAB082132DE896FD22EC9839544B79EF6A46057F1E7FEF9C39C831B9635F497A3906F5B03B6BF8208FAB6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7dabcdba55ed4e1396a518eb36d27fc5.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:71529x2aFAB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.372359879574261
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Ms1gneNdTW0jNALyAZD:qgFq6g1af+Ms1geNdTFIZD
MD5:	F6019BC42EAA3E6BDCDBB769977CD6E4
SHA1:	0BA1C25A2D8898DEBE109FC7B71541B7C7944DB7
SHA-256:	2D04682A22D6EFF452BA01F6376096708A83D95A4E84FEE746C5DD81C30DF22D
SHA-512:	FF2059769CBB9D8E6B45FC3C7CF02618B48AB146A665C5E22F74DB2599ACBEB4C0B0C2B1E99FF9C08F989B175A95D65F89DAA4CAA19D1190B07F3CD587EEBD7E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f35707c479a44571aee18c73a4e81a43.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71530HEfeEz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.36593714977263
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyrmTWmVdiNIUY+sjx:SbFuFyLVIg1BG+f+MyrmTz4qTjoa
MD5:	8630321032E9E0B06B51B2F55177948E
SHA1:	C291A5B540B23E9C93036910C50E938B4C12BC59
SHA-256:	02294CB5D0896167EF5862ED8D959E7996F6881990FCF9B46B10343B10DE9F35
SHA-512:	BC4FE3B74E5D7CE8950ECE1A0832DB7E1DB9A44FD0B4E04132368B7D65C78BA6CBF3D80A0724F92688FF04FC0B53B66F28A7946F4F1819143D18D8266A78A7EF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=85ffc84ef6344b3080c488bb7b141511.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:715380smuIA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452963155292889
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7EdASRrHA5GGRUwsZjs:SbFuFyLVIg1BAf+MmU3UwsZjNdQIeXD
MD5:	0598A45E6E110A26F161B24C40F30379
SHA1:	875B03039D06D17375D7AD0D24DC21C88EA65E08
SHA-256:	CDD9CA3FFF3E1C6F62D8A60078FC80F1179F216A2EA3ADAED66AB8A32F9800A9
SHA-512:	3782443C4A1F7528511F7FBBDE8CB86BF0CF463628674D200C408437DCA1AAB130AAFFAAE50273B5CD0D30F268F8786A505E0C8A993D81B87EBE7EAE4D3302AF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1a4e38507cc84fd5abc214acc4360ef6.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74166BLjgNw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.403976855593573
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm545cWQ2VbUQ8Suqjx:SbFuFyLVIg1BG+f+MOV98STjosQu
MD5:	CA199021E56C4560FDD10AF7D97CBB9E
SHA1:	2593E1FEA8915D6A2E1698A24D06F71D83231888
SHA-256:	EA0F761BB1266B23571D32BA1C9086F4A9E0E9F3D8A20036A4BC8822257002EA
SHA-512:	CF8A815804C67A48CF7AAC6BCCD624DA6DC2F3479D8F48ED4C7CAB1CAE44365CFD95EC557822D0FC65B3E96F62EE1D8C8909D06EA09949DDA66D8348D2FCE1C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=32949dea59304f43bcd37fb36fcb4b9d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74249CvgPAx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4961710767664895
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5qAaFjrqjsicWmI2d:SbFuFyLVIg1BG+f+MQRqjZcHcljX+
MD5:	1D55AF634A23DC2D6DF6ED2F7240F7F9
SHA1:	74632B42768E49F4C25568C25AD6FE0226A5BB5A
SHA-256:	062CE0FF9B542778EB52325CE18F8A66E0BB4621B04800F46033A534B78ED84E
SHA-512:	9C4A5A39201C5872599D3FCDFD3CC87D361F66E5404C66F9C50F6BEFDFB066ADE4E674C9C923CE98BC508F64CDDCEB011B9EB37ECB993CFB64EA8A8118EF1232
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3f96bde79f7d4213bbe8dcf66a4016e5.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74251cFp3px

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.383054091526128
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsBTgG3AeFqhjskGp/:SbFuFyLVIg1BG+f+MsBfAlhjfGt
MD5:	2BC0132052EB282A832BB07109970714
SHA1:	298B14CFAB4004249FF7D8E2AF34969EDD189374
SHA-256:	33B3C95CF2DFF7ED6ACC5361EF44A7E3B35AB3722F6428FD0A964118112B8F67
SHA-512:	F14B840040859475DFF8CF2263C70DF3989A121FD4E7DC5A7824526F5F0111D1C4361A1A8ED84640C9D69BE5D6002A001087CDDBA6CD99E5F065BB59561B811E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fd6bec50e21c4e2abd550b8b5882ca3f.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:74252PnMWbw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.366863716272855
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzMUIRhlcLHT4vshuQ:SbFuFyLVIg1BG+f+MxInli0vsZjtWL0
MD5:	C02A73860E0758EC5DC6D06632F01524
SHA1:	4661B3572BA5E34603FFE53E1C4C58F6184AECA7
SHA-256:	954FF5F177FAC19F0494E83F1C2A271BAAF57828F1B6FB33549BF2CFE873CDFD
SHA-512:	0EED6007FD850CD8A28D8B0FF84440B3A485911B73B81803364BE6D39260DF253B67B171EE8C38D0D37CF2C0D931193C8F56489630D24039C9EF58100F6982A9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9dfc11ce04dd42ecb49ff2fb655bd980.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74253K4CQ8z

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.4318328424916436
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsDWMVUywHwC6BdDHy:SbFuFyLVIg1BG+f+MsDWNCCmDgD0jNE
MD5:	7C8F56829EB5F5436748FC18B3FF3B16
SHA1:	79CC11C5336598F482EA1C20C586082752EE78BA
SHA-256:	11291CD500F0DA33BAD227142E47491EF72BB9128FF60D0CB62E3229CFF69A40
SHA-512:	841D31E4FD0710C0374105F0D12B9B92D16D8EE86248A7AAC4D68A8DDCC10D5F6F0365DA6D5F31692359A149B256685D1064C18DAEEB42949D03C01357ADAF12
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ff32901c631f43bd931ee27a6d88dbef.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:74254MtRpjx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.452763818625899
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/riWVD1Y/f25jshKe:SbFuFyLVIg1BG+f+Mj1E/O5jbVC
MD5:	C07BA2E2AAA0A9395DA7673E30BCC18E
SHA1:	35CA476A10F92A2E10126B6B4C12184EA04D33FF
SHA-256:	2FBD6B777F7292AC212BBD17F35A1CC2D47E4D70BAD5B0103AEDAD484171A0E5
SHA-512:	784CA4F72D657B28FF22F764656231D0F69CE9C97FB149EBF6CCDBA39E2326511725E0D53CACE004A4FBE3FAC68444866CAE89EEAE898881A9BCA3663DAC44B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=582dceda337f4689b76b92e2504741c5.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:7425569yrxx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.39953493663087
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6CFYmJdiN2jNALyAZD:qgFq6g1af+M9YMdiNMIZD
MD5:	80DD7631F6297EBC3A290BF5385AA7ED
SHA1:	8E325FCA49B374E7EA6F8A6352489EB2F7EB49FE
SHA-256:	B7236A436CF6D0EE087D56C7781857594A22E2E1E2D9E9619D2550E80D429DC5
SHA-512:	FE095D91DD30B6849CF89819AA32138C1D84880A871AF0F189461DDC1B152A2BA9DCE566FCD68FC03EBFF78C57FB7DD1B13FD4F140886A73DB71EEE2DFB9BAEE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0271752c77d047daa4e473cc1fa874bb.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74256tVMsyz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.294627175893547
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoHHjVHSDa4ATjs1Ha:SbFuFyLVIg1BG+f+MoHJyDz8joa
MD5:	9655221538DACABC5DA7298539174127
SHA1:	09F5B14E0D509AD4547D0D8AD22E58408BF85FD4
SHA-256:	544F4556E56AA44CFC340E9D6A920FF3B51FE2C1E06669AB475C0393D20A8C41
SHA-512:	3DFB08F47E09E90BDF92B554C3FE943BD385834C19FCB60B177C84983C9F94BB864A8272CBE8670AF4AF41035A6CB0452EA1576A149237AFC1FE9574517F79FD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bbbb3a00f60b447facf4b24aa2d20ec4.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:74264uqFO2x

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.417570899628495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+6VHqdgWWTuWNlsjs2y:SbFuFyLVIg1BAf+M+4qdgRF0jNdQIeXD
MD5:	207A834FDF90EFEA2B2548DD50A7C251
SHA1:	811A295432463202092624D297E100363755E1B2
SHA-256:	CA830D6EBAE20C036D86666B1D43253C450BBAD5AAEDD06BC103C1DE0A8CF7BB
SHA-512:	660A8D7FC888B26F4A113519C3BCD46EA3F1AA2DE2112BE3CFC3F37D96A38A049EAF4C98E090E44438F2B2D2B0F0708EB8311EC43DC2697212CF785A643DBE92
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4d03d0bd7cbf46d78deb333103079e93.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:75573SSSjNA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.428264823643887
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9hYWxQRz5dX2upGwX:SbFuFyLVIg1BG+f+MjqF5dXXpGZjfGt
MD5:	AD0A6372B247E79B5924A607816A487F
SHA1:	6D97D6E8187CF15E8881A07CA5D8979106867C9E
SHA-256:	C508514DF1D3A2842B70109561F448FDA53C3B307A00CCC4107BCBC4AF722F27
SHA-512:	5561474CF0BC14B24B3242B74E8FAF5CE406F9E6C51E8379A5BDD1E48F1EEB3C3FCF0E1B27E42670DD7A835C8E839CCA51353E64F2F61B010987C4B9812202DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7f82d4a5eb324b54b6a58209786a11ab.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:75574eKg1DA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3332178228723635
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8+UB2W4RJuErDrulQ:SbFuFyLVIg1BG+f+M8+YiJusu4jtWL0
MD5:	227AB1CF77849A129AA8387B6832CC4B
SHA1:	30B5297E94622C1D08C37FCABE1DEE32EE0868AD
SHA-256:	B8525286B1978E43869F481CEBE32B2DF686D92552BE6815622D9804D6236AB5
SHA-512:	723090B9265CD2A5E37ED409A6033283DA8D787680A1613617BBCB5A78320357EC62FD8AF7028DE974766C821BFBBD2FB630417902796A4C98659FC63D65BE14
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=627b21d453a44a3dba82a7eb265830af.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:75575qGcdOD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.435983754307569
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy004ceGPj8jsjOdlE:SbFuFyLVIg1BG+f+MyP48PIjNE
MD5:	F1A9A7B9715D3655FF9530FF3A64A5B5
SHA1:	10A10639549947C38F3F313954CA2C16BC6B6D7C
SHA-256:	2D3ADB343C2CBA093568B72E3D197C6F2DFEB5E4AB522936613340C7B3BC31AE
SHA-512:	67718281E8F79DD0CD26F0B50BF23D1BE864F1EDDF7E27DCD2D7F9396A630D1380E342C1B6986EF4130E906E24170CA7D4E5C08E48B088ABD623DC8348865D9A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=82b368e4d109479fbe24aac21e626db6.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:75576LRlx3C

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.371506423529741
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrfmQV/PodE6lhlsj0:SbFuFyLVIg1BG+f+MzV/wdEIh2jbVC
MD5:	F910134570A6845FBFE48EE3629B8C36
SHA1:	7A5123F75B1D950F2CB2345A224C1A55BB3FF141
SHA-256:	EE2B3396423444C6037B5CE4029DA284C9FEF512A422E06091BCE64BC181E052
SHA-512:	5257F9918A3D623BDFCEDE2388ADE917587F4259F422DE19800F509A33F984F58D44C150D3F05EEA60841CF51AE4FFDE16B7E51AE1FC2D92125E51C6E3515893
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a664e5e0052e43138cd8a20e734f7a20.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:75577X87vEC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.42093002690864
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Muak1dhAWWQZjNALyAZD:qgFq6g1af+M7cnIZD
MD5:	929DBC3C4727E4A915B17DA3B3F8C5E0
SHA1:	844131326F7DA16894C3C45F3B11033523B43C8C
SHA-256:	D651B993837ADDF797DDEA8D6388E0637F14EFFC5818FE2A075CB308B128449A
SHA-512:	42260C78B40BE62BD4D8ED3D421CBAD9FEE6F0304B2DB965AF88C78DC631889E60DD91276F838DBDAF3619E6EAAA08AB1EAE87E0E209F67F6094507DAACF78C9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dee50f8197e247df84becdc3d093ce96.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:75578sjry8B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.382220596856212
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpJR4BRfUGI3U3ejs4:SbFuFyLVIg1BG+f+MnR4/8U3ejoa
MD5:	ED6C700DC286B9F4BB229D1643B3367F
SHA1:	64A4381E38DA04304A8CE45EA80303EF713B91C5
SHA-256:	7F381A93571E5F5BE26EE10045B3C0C699975B547EBA06B1B103ACC5C5CC7603
SHA-512:	7E5A78D11717FCEB6CD5E6AF86B600E4A2D553D2F6B33ED32C8E99B476C7C428D5115E6E097ADBB1F0B6EA60B3ECC182C1D8AF17CB88C2317DE6294892A1B7C7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cd884e8d865249b1a92a59cc9f1085c4.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:75683fLUxIB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.487773477415858
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6IPUxey1Xlsjs2BbQIa:SbFuFyLVIg1BAf+M6IsxfAjNdQIeXD
MD5:	FDF8D96FEAB07F5E94AE6CAEE7390BD4
SHA1:	AEE13995C94526C995A6FA470BB968AC2D863FFD
SHA-256:	BD109722360351BB6A9D044F0C88D09A49A66DFB3505AB3CADC0C8164688BF96
SHA-512:	A5E722D2FF78D479323A0F33995C4A256EABE66B51B4437D1A01694630070D7BEF6C9B2A73C477C59D362B5C21CF5AA603DA2C90144493263B79385EC9599C1C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=058f61ff2cf547829f4664387fff651b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:75956XlP05t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.498958249730521
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MLGmHGTZCTjZcHcljX+:qgFq6g10+f+MLXmTZCRmAu
MD5:	2CFCC28DAE66C1829221F2F009AE4DC9
SHA1:	3C86B12A3B3AB7F45E2179C0D619247DDB4DCF65
SHA-256:	E67935C20BC0F9FB7235C139D99E0E6BFA39F727B7ECC2A8626B1BA6E71A6289
SHA-512:	AFD5474DC2EE87076930105E1F63F938F35C277AE7667958E6A91BE0745782630F58B472C07FC934917EF2F7000AE4A1341F07016AD016594E3CE1BE151E3AF6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=72625b4fdcdc4ec89c6738ddf372703b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:75970UKxuEv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.359709578145479
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuvb0Osx5cd2rqjshQ:SbFuFyLVIg1BG+f+MuzU/caqjtWL0
MD5:	16987769D6DA447DD23153A289C3BF17
SHA1:	F47A40409A8CEA39C6F70A4BCC9BC1BB69EA4272
SHA-256:	D5E1ECFB96841E9A62C1B65302CCFD2B866BE6F19EDA4B51D95B2205F5D236A1
SHA-512:	EF1EEAE29F0F5118A6D20A6CEECD6205152CF2C987920FDB9D433D80B42CDF1765AC097092920B970015F844EFB3ED10934844502EFDD6BD0A055201602010F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d8cb5bacf47d4e7883ada7a826e62897.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:75973sBvVKt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.389931699010113
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6ffbwClDxjskGp/:SbFuFyLVIg1BG+f+M6XcOjfGt
MD5:	90082217496F571082161E79EA7F05F6
SHA1:	F120F704A8E227524CAB8D18271C97D1132FE841
SHA-256:	7EE695433B2F21B3F1561D0B1E09941C56F05CD76D87E58D6393C0C755D1799C
SHA-512:	358A76F9380E742107C12AD9CDD3C2644A60EAC57363C63D28A926627C498F20C9FD71B67309621BAD42394036AA0429953397E29A7ABCE00F0FDC3C1D877EE7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=08e9ff0c250d435d8f6f89be08b0531d.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:759746bsN9t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.438697102007549
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5iPE6RfdTmWsn7UgC:SbFuFyLVIg1BG+f+MH6p0JUg2josQu
MD5:	FAF4DEF7EFCD7538BAA4377B519D5AF6
SHA1:	72152DC87496735C9C077B4FDDDFC0E73CD10277
SHA-256:	AA76E3BF8EBBDD5E3A95FE3C4281A160C17F24DE967711DF09F1081CF5E4A9D0
SHA-512:	F8A5B7E7D558B678BD5A106EEB9DAB8CE83D04928E0B40AF1729D88946707A3C29BFA18967D0D51DD95151DEA695205261880CAED2968388A8276AD89EEE3083
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=35fc1c16ab38446086ef2c0c713745d3.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75981zyuXQv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.445049291437354
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/oOVgEEPcQ/Auxsja:SbFuFyLVIg1BG+f+MvB2cQkjNE
MD5:	61FE70307F56F64010BB27B2724E2380
SHA1:	8DD7C355FECC9F003D8A7AE0E732517A4AD80F51
SHA-256:	3A7EBB94A3BE09AFC47307737E4BBBD4945DC909C0CF65A8698725D62AE2F675
SHA-512:	B357C731DA8D5DD673B11C821D979007F3D19195BE020A12FFF45023AC389DC9AF8B7B00FA465A9D523AC96F291DC2B1BBC4FF98F970FDDF0C29696F519C1206
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5b698f7094aa49338cc27acc09210322.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:75982A9Ltdw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.376902262604956
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvLX4dPcJcqqxsjshP:SbFuFyLVIg1BG+f+MkuJcq3jbVC
MD5:	AD2427BB7C17CA9332792C9E0B0034AB
SHA1:	51DFBA4518437CA2A7968AE12397AFC66BD22332
SHA-256:	BD6EE45D041023CEF614F9A93F618185230BFD1DF138D0D3FB0812EE408DC2FF
SHA-512:	F13DBBF8FA7FEF72F52128877EE68ADCA02B3E216867E7B7E52C3BE13DA9968AAB4B5FBA6E97C92AC4D6718B31E823D0607FC3FAAEDBF4BA8337EE8094B5A515
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ec927e15ea7f457d910972e9708774eb.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:75983nZz21t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4571664101202435
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvxlxwc7BDzZjs2ALAXA:SbFuFyLVIg1BAf+M5lxp7HjNALyAZD
MD5:	BFEEF3FA2BC3956D3E20DEFFBFBD05A2
SHA1:	944687E56E7287D54DF991E601AB2DD697D41619
SHA-256:	4FB72C71750568ABAC2B61A49F78D362E8F33F43E3BAE5584CE74D8503332B2A
SHA-512:	E6355A72FE475043F220FE43DCF5890368EB7B2B92923F354D1834B67A9815EBA4070285395A50290B712CFFC545F6C134D5D5A67ABDCB04F557291EA011466B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e8eb709b57b9426292f789b91d3db759.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76036QkcJVu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.35100295384092
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8JGTA09EcVycsrqjx:SbFuFyLVIg1BG+f+M8sMa1V02joa
MD5:	C5F4B84C844E58B56CEA8148CF6150B3
SHA1:	7D99CE7E52AA27B6609C7F29286F0289027A400E
SHA-256:	00DFEF819274538F9D7C219943E85FBF1805C847A164A81F302CCA2731F2A2ED
SHA-512:	37B7064DC149F301A21FCB751FB92D10A3B5B3A356855A65F376B2FB57A197062A9CEFF2BE6619E29EF557F6BE1124B7BF13865A4E5152839537B10EF2C26A75
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=64c1e9a9c46e43b28c30d8c909f94add.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:76170Zg5wvu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.456464932881325
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8KXRnishTjNdQIeXD:qgFq6g1af+M8Kksn2D
MD5:	776DAFE4D3381E0BE0BE425CF2CC2534
SHA1:	092E3E0A725132214D781A9395C66BC75D3A41DF
SHA-256:	E8AE6DBDF3FE98E51244ED5C31B60BAF13D5E18FA98FFFB2F11E1316A61F0E17
SHA-512:	DAFB6DD59B58A2E26E32CFECC7BED570DCA4BDE6E471BF38487BA467429A226D6C5F893B0E1082A8C7C102F88111F4997B2AEA808D599EA982262D1E719CEB36
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6e6c94b74f604140974aeff510fa12cb.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76488nHVSbF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4404581067254245
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz+v6c/TXoQZjs1Ha7:SbFuFyLVIg1BG+f+Myv6AlZjosQu
MD5:	EAE16A811D750955FCE100C430AB0E0C
SHA1:	384888A178BE4C8AFC0394D165B57DAAE5B3775C
SHA-256:	03FC0A894E72E6B8B45F944B8182F010D70FC37F56911E86DFAE39CF8E92B0D4
SHA-512:	1CAA6F096174FAE7A9A36C69750460A249075F59F113ACCBA941032E7C1B3349657AA05A6088B6E3CA5817423E1CF39292B169EAA1899DCFDCB47DB7C346D1DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=947f00fd4b3b42e19729bdfdd6211856.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76495pP4BsE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.467228931588038
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MVZ5Az7D5ZjZcHcljX+:qgFq6g10+f+MOH5zmAu
MD5:	9A385EA80675D704FA54D05ADB71E40D
SHA1:	C7A1DF5B45272AE41E07F6DC116C96C208925123
SHA-256:	C470F76CF07CFB0C6A90A2E7B15A1D1365A03BF5D24F630606FBEA5AE6064211
SHA-512:	DF08A574FC9E94675596F3C6132B0A3CE93ED8FFB9F3EC7AC43C9BD6D33FF928E531A80DC4AE1CD050327156D1E00DE3FBE9BE84AE93FBAED36C6904C1CB7E19
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a3677c87b9e743498ea50bb39faa0407.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77358x919ZA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.498386899643826
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mc3DXxGi2jZcHcljX+:qgFq6g10+f+MyGiYmAu
MD5:	2068C67E7E4F3578B1669C2DA29F0BEF
SHA1:	A590D61CD7A449C07E5B379C5AD164767F4B61D3
SHA-256:	D38B70DD2156F33906AC0480F6398E9BEFB3DC61936DA2E8053AB94884F3CF1A
SHA-512:	E2F6C88771A491A9834005B2E0508B23DB314F14988DC052423289515DB887A52C035B38D0EBFB11DF01DE143E42AA69B22555B6ED830C485D2050F4E4F70A63
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1379b55bb33d456989cde6812dbc0469.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77359C9iPBz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.400096835786241
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9ezBQRTst6jskGp/:SbFuFyLVIg1BG+f+MmBv6jfGt
MD5:	FCC2F524EA505D3B42E09F506546B8C2
SHA1:	33DDBC89D30A8277F35D688574877EB699A093A5
SHA-256:	6A60315811CD1EB218D3F3D00AA399C15485F7ECA00FF6660DE1773B65C4E77F
SHA-512:	7ED516CBD3B4284092FDDE936E405AE6C00358E98EEFAB1E79384694291A6207E37A95F02EEB817EEDC365C70EDA3E7F52383E2C0B84001CDCC5CF3E6DAB45E5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=714ae85e2b4549dcbb7aa01e9f535934.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:77360XHNSqB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3772794397836705
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4adGqgk4EShbFlsjt:SbFuFyLVIg1BG+f+M4adGqgQShb8jtWQ
MD5:	AE1FA288E9FD050BFC42262BB1117358
SHA1:	69CF86E593D166CA1DDA0A1F3F9800AE693ECD3F
SHA-256:	18F7423DDEB321A5B2A05EF92549E8161469577AC4A2EC0BDE6506663C5C7B5D
SHA-512:	F0CB658D20A602739B0EF0A82A6211E2E86AAE13715F0A86DAEC93E5AE7931D4228350561CF5C5FD95F366DE14932FD5E9420D08D48E052D48ED3E97E3ECE0F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=263829467b69490c8f0a7773ab81d7cc.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:77361bLmnzA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.380243645630206
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7hRWvXElHaB/8js16:SbFuFyLVIg1BG+f+MjoElHaBkjosQu
MD5:	DB96542067F8FA0C75B19015AAECA643
SHA1:	F6EAF08E33F162A863CCB2E630FE43FBC40AC332
SHA-256:	88AAD9C55CCEBCECEC5FAD88205BDAE11D3362642CA61DD344234EEF9FF6ED98
SHA-512:	2F6330D1312C7761913AFA8F5498900AD6CAD9BBF07B4DAC9AE5738B529FE9A2EAF7E7F4BF40EFE7EEF754173CB7410554E1C46EFF21D9E6A13C20CE6D573CD1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1d24326622744248a0fadbb3a73add37.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77367swMy2B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.448663731488865
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyoDI1x/4V7sMqjsjF:SbFuFyLVIg1BG+f+MywKO7RqjNE
MD5:	1A41DA23ECABB28507BC694733C58103
SHA1:	737CE3439A509A83143016D7D7BB3C81F9AA8DC3
SHA-256:	705E789C7837C1BBC423D0052B24FB947E4FF653BF17A388E46A7C0ED2756430
SHA-512:	AB5297CC7B999BBD5F14BBF7F4A6A927145A90A6064347D59A59794A543EEA5F99FC1D3E550F86A221A318CCD62ABAE13D9289BE26C44CE32964263049A9AB5B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=876ddc11451f4247ac182e892c6cbe5e.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:773687jkMYz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.339373025953526
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9JDHOVV04zvRqjshP:SbFuFyLVIg1BG+f+MHbOVNDRqjbVC
MD5:	F6DEDC71C6BABF2DD9F70F5DA9E9A5CC
SHA1:	B3503C707EF3822B1BD89FA6B7C7FC0AAFFC2216
SHA-256:	3C16008A8EE2C06EE0A621535A3A1F97BE7C5C7B2E26710C8C1A02C5B6068302
SHA-512:	0A3B770EFE873806229D1CF192CBB861E08A2A3472D79B2165F7D9383D8C2E03E9B17C83E684ABEC82AAD12D2E56E37DB8B598C2C908CFE38A3A32F7D5CFE830
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7ebd08a4fb8d47878a00870434b84497.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:77369Zh3RRA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.416736767283706
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MWeEcR5ZsZjNALyAZD:qgFq6g1af+MWe1R5ZsnIZD
MD5:	8EBB8FCDF4F8BDBA0CD73493A56DF81D
SHA1:	5F453C7FA24797EA4D8F8759625F38F5B49CB31B
SHA-256:	5A31BA13CACAEA529464844ADAA3FF23AFA1FB1ADF286D1ADC39931B6F415CC9
SHA-512:	70551C1272A4B011DE482F609E7C06071D18E43B15F23527F34C4C4403AE0E1AFFA19AA1E3EDFEB1FC54D775229BB2E6FF66582D7886DA3CF44BD3B285B990EA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=148181a67a9e4e568eb57429a6ef6e6d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77370HCoQVz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.426774589248668
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrPIivdVTQQ22js2BbQL:SbFuFyLVIg1BAf+M7XTQ2jNdQIeXD
MD5:	2051F4E0617E9AF33D933318A4FEC962
SHA1:	4B2AA859E6A46BE1C33681D4794337A1386ED05C
SHA-256:	C7A15E97084D455AA25F3EF73F420545EF5AD639A3A0B90D62308500338B8361
SHA-512:	D82F598513938FF733364EF83BB868E75EC40413ABE5E94C705A7AD1C3CD46FA6353B1206B91FC7B311272C46FC449DDE253EBF11AF30AE01DA93BC18C535874
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=abc00d6f8b3c4a73a2b8efaad8061046.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78258Bnnhzu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.385247160213931
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M60UQ9KHjSZTr5qjosQu:qgFq6g10+f+MyDAX54Qu
MD5:	9A762175655961F2B9731542992179B8
SHA1:	8083B47292D350487500EB1DBB1319F92654EA9D
SHA-256:	6DEB24A93F533D8743FB984BFB4DEC11BB2586326C2E130D04DF0BC025A970A1
SHA-512:	0CC7F6A6A2FC2E634E2AE49F33E5B7A35CD436ED92435F5602107C4EE2F406114FEF64ADB996125013FD2C549D582DA99135BB47BB1075535F9472A503082659
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0e4bb132a11745bd80011b5ec1e64439.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78265FuTNov

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496158604208949
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/hUgzRbDTbA+sjsig:SbFuFyLVIg1BG+f+MKunTQjZcHcljX+
MD5:	22A00D8ECD19239ACB1523A9598149AA
SHA1:	91373EFB52C7E047FE14E16B26F2F62195954989
SHA-256:	47260C106FF24DC64A907B44C121F2E96031B1BC7EB3DD98A9270DDC7F4754F4
SHA-512:	AED370FA8322DCCD38A4DD73FBC68D215976AF5FCDD351A887ABE084CA9E8999B3C4C851208E4F3DFEDA2ADACAE1E2D5415E67CA7ED419420FA4A9E3B6218809
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5ea2a4c7e86641dd9f2f238a978a20b1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78273Mmy1Ut

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.419813147883638
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvizDGZGLu3hdrs22a:SbFuFyLVIg1BG+f+M6eau3Lr8jfGt
MD5:	6EF7AB170BF37F2F2FEA86F64F59D3E9
SHA1:	F579255B9168A77E7D2E4E6B9E132C634C7F6CDD
SHA-256:	0C318C8F2B56150ECE39C756784A8FB0E4D4578441ACE91CAC22EF205B2913B5
SHA-512:	65161A427FA8A0B42D992BFBEFB26DC93870F4C60F3BC1AF7ABB12D7976754965A80A93E5D4337F0FD94875F14B94CACE02CC97B48D5447A6AC033064EB25812
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e9605b7fc60b4ed28fd58788a9c485e4.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:78274E1iOps

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.450761753130024
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MouLkhkksZjNALyAZD:qgFq6g1af+MouoIIZD
MD5:	39D52A9CE1EA43CABA0C9D34B40548ED
SHA1:	49068775B5847CDFCC896BD3832BC22A6A17AC5F
SHA-256:	D1B0AE3B8F19FEBF9EE82BAAA6911BA2FB02122BFB58F8F8D65FA22D05F12520
SHA-512:	93A385CF94AD616EE8615345D3261A2CB6F17161654B047BC367BD6CE77C297665039881A4E9CF564AE730D1BFDB82F7B6D9BD6EF3BD49F15EDB9FB191DC542F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b88c4b8ef5ed46e6972812f86a2460f5.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78282PL9aGt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.484106918667868
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MoT7DTq0hTjNdQIeXD:qgFq6g1af+Mo3Pq22D
MD5:	3D7A72E34BCCD31810F756CB784BBD8E
SHA1:	A29B10B4ACE4CD40D3A74FBE436798225990C4A2
SHA-256:	719EE118C6F3415F8E266B36358D63E1A46E1FA95D70EA4DF50404A22951D8DD
SHA-512:	ABBD11FB77829A06E4A6C5B95526FE3FD3351A9E82A2C0FA1BB13FDCA2E70122BDA03B8A932A5EC2625989660D1141245FA903024206639609538E46463E5C61
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b32de6a304854c269f34627a6cb25e1e.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79518vUivFz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.500161261123659
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4grDwwSDiGhjZcHcljX+:qgFq6g10+f+M4aDSDiG7mAu
MD5:	EC7C7D18A61869252A689E783D4FD3F9
SHA1:	09EECC007FC0777A88E3C92797DC33A68C66D1F6
SHA-256:	8CD9E7A6058816553808AB3D70773B2692D25F83DC23F738C4BA533CC399ACDF
SHA-512:	D41A0231D3E717E1516A379C777E10C746352D9B48CFD5524B906EA56D8DC2C0A6867F62B4F0050E301EB9245435E3FE73F4B8951CE0B27099C6F17067EB09BD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=24cc0e13674f4d7799547f7f7f62cc58.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79519vBQhwB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.384754167358306
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyeVWWETvDqSdLsR5Z:SbFuFyLVIg1BG+f+MyekTGAsXqjfGt
MD5:	C488486600028BE1CD60FD3E1B9443C9
SHA1:	117661215FB961AB1C7543381E48A910626CE11D
SHA-256:	A9EA21BC2574A2506E73AAC430B5C044530AD54E7448819485C70F57CCE72907
SHA-512:	0DDC9D033071F311D101EE98547F7B24B91F003416FECEAA3FBBBE0A156573140C4F1A2CC709ACB00DF6A2FCD2D947641D370A80988EA862F7D79C3FAC50BA03
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8fa1e033a6f745fd978f354cae6084e5.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:79527tGrJPz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4371257837461044
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5LNDskgrQTGQs0jsc:SbFuFyLVIg1BG+f+MxUrQTHNjosQu
MD5:	3312905497BEBAD19C02989C32019CED
SHA1:	16DB12FB911E1544B12C4DF4FFFDECF0CFEF3570
SHA-256:	7BA467D8558CDF3DA1B4F9A53181D24827D9AF0C7BE058DA94CE47F86681790D
SHA-512:	A96229C42DC81BED04773E66E4E09E854FCEDDE2481F49987780BB9CF3B0CAF3915A38539157E825F0ACB0A26390DB8C1F5831404461E0D5E8D0084648218CEA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3671a9bf98e04762b045680ead4b5598.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79534srs81z

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.44616997941017
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4G33UwAWTST2js2ALAQ:SbFuFyLVIg1BAf+M4uAjT2jNALyAZD
MD5:	16CE0718B504B7A983870443021B9E80
SHA1:	10BA5742DE9EC35586FBCA716F787F04AD3A2B30
SHA-256:	6C407F41EE653CBF9381DF47EEDF2385D542252B7C37419D4C2EFAC794FB0B2D
SHA-512:	B693868BE71C696D46D014268107966FB1E0B1BD7BE39FB515197DBFCDFEAE258D1E812DF29D9C0BA1195A6FAB20730225295FD6954A3672699C9B444A37742C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2c7a56b076564b1298627e363cabb66d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79613JYNDcA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4268840090889725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5xXAERZE2uqjs2BbQIa:SbFuFyLVIg1BAf+McEbE2TjNdQIeXD
MD5:	594C9F90F2DD396894FE1A301B986C99
SHA1:	46DB894F51E792168E4EC640017E1D719D094ACD
SHA-256:	D97E34B295A7A92DB45898154CAEE979B22FD465141A3722B17451911A2DF93F
SHA-512:	1B6D23DB276725087A42C00AA7D7CAEEE03D5C300AA7DDBBD269278860D377EA9B05A95A52E1A00C22C2318109ECFF731B46EC388A3248C86830017FC81B11A9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=31a62345f9c6444c9ce5f11cd39ad0d4.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80104K98gTH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.418641408442158
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzEAPRiBXSIjs1Had9:SbFuFyLVIg1BG+f+M7P4hBjosQu
MD5:	BDF2B15C71C6D2C4698F8CEDC43F3555
SHA1:	CE41465EBC1AF145AA97B205F35D8A69202E671C
SHA-256:	E825A04C32D7D5E9E0E141F2D0C8A90474BC596AD3FA76E2A2C5E1A40008B851
SHA-512:	A1949C6C6C1E4E4A643BA259368359B055E41A25FBAEC8034070AC42E98BDFCD9AB1AF34361E78097481C80E996790B4A3B488D7AFB687B17942132A4268483D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9547e3bc7faa47ceb6d28dcc86ca266e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80111Aiw2KL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.472710806499533
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MQVeF3cqbRqjZcHcljX+:qgFq6g10+f+MAeFymAu
MD5:	0DD6DB700FF8929476D6A69376D9A8B0
SHA1:	D4063642B6C0AB8D794D32B00C3C8AEFA11B41DA
SHA-256:	DEB92220802918A6FDE6EFD9C93BC19EFF3C8614277DAD27B42DF09676F6E43F
SHA-512:	9F5E16BBEF2A421D677492974D7EC499AA39FAAD9A9460CFFED3AD499F7F99F528852752926E55D8B627AFC056268C5027FC5FD5B9A0DCAF6F16CCCBD105E38C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=373e0032a7a74a76a6f3f449c75b8dac.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:801199jBtyJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.372923467702685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpznBMNGadl3hMxsjW:SbFuFyLVIg1BG+f+MRBnmMqjfGt
MD5:	889416989DBFE4F1C0F595A6BFB7393B
SHA1:	9D4B07C6E3A8CB52FFE15A637F89E0CFA224CA8B
SHA-256:	8145FCFA0C1EA7A2CBAEE7C25F8647E94E467B931B92504C2CAD1697A465D972
SHA-512:	919B2FA472CF49C09070E6620BAD75159533E401650339B89496661B0453116DADB00C1AF9AF914A64EA66F5C96C45945BDB6F11D4DD225C32893860555914B0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c89a2bbda4234e1d84ac3ec66824608c.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:80120zUcj8H

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.379227019933298
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4A0WAh2PEMsGFXhuqj+:SbFuFyLVIg1BAf+M49b26GXTjNALyAZD
MD5:	032522775FCAB208E10C7ED13866C289
SHA1:	8BBC2C76E1B4A314A2A25CF893F5FF8D6515D46B
SHA-256:	E449531F9DE2EF1668C1E2235EDF91528273B026F343FA1CD378D020E49684AF
SHA-512:	202F33B94A5FC892DC8A41C361893C07C580753FB5F375889F3A8FA0E25F30B068A25A0BAF35AF55D6A5941BB6543CFA62741A8834BCA207424D71AE21E198B7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2e2213f9fed14513a5113cf61ea52094.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:801999TVTpL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4463905394260035
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuD0BwwcQWR5js2BbQIa:SbFuFyLVIg1BAf+MuDswhDzjNdQIeXD
MD5:	D5E192C1A5D3623E771FE3A1E54C9B03
SHA1:	56005640FFB3C2528C43E971AF243BF8EC7424A8
SHA-256:	E285D96BCF933AEA3DC4F36D376A70C93FDE74A7CA98C0FE92DB3BFBB31DC685
SHA-512:	C28BB1422C3FB4E8894382E2832BFD8A7A3B03DA26458B96133820B2E1A950E386D6FD19BEC8178C0F88FFD8761FF1838B15C277ED45BF71632DC0C066FDE7A4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d101a49e4b894094b82daa7f54d95345.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat000ykhc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat075fhhX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat07FH8Yw

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0FCPHh0

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0MJgRBS

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0QKwf0Y

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0aFK3k4

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0h8M3c7

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0squxW0

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0uZtFuZ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.3709505944546687
Encrypted:	false
SSDEEP:	3:Ln:L
MD5:	EEE118C8FFAF6119E843468FFED8272B
SHA1:	56018807B013CEE5B65058D2061D78D814F643BB
SHA-256:	40CE771409984EA5E5F16C15E4C503DB3987F0B3A938FE525DA3E7F2DDB95AE4
SHA-512:	537E4EE6FB3BE8C071F09C9967EE4922C267FE56880BE101C24D5F362DCC2D4B5E11930321BA86AEE8E9F81A4A7012CB5248ECB935AD4EE8DDBF0D22E777ED23
Malicious:	false
Preview:	6626.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:vCsXlXEWtl/bTAL/:X+ylA
MD5:	DA0A4463F275FF5E6CD9997F20A9686C
SHA1:	5BCBD4618028678A438E2582D1A51CAAD8064000
SHA-256:	D84DA9A8B91D400B5A93BE65B8E632770C19CE15CEB66526BACB595BCBEB74A0
SHA-512:	77C547A747DC453A6AF14942B031641799BEE13DBF00412BEB782920DAFFFE05446A42AF1E5E84AFD0FDC2D160B3F2D8CDC022F9AEB6AB779D22FB3B3B4791EF
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................9vgX%......................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	671
Entropy (8bit):	4.825064470988438
Encrypted:	false
SSDEEP:	12:ZWFl2ZPaV5pGikWFlokikWFlQ1WFlxMukWFlTAvmyWFlTA2+VnWFl+:M2ZedjoZjQwxlTAvITA2+Va+
MD5:	57E8074BCD74FA69F48573D90333017B
SHA1:	885F941F9B03AC5116C93DF30B9A7D8A6EBC47BD
SHA-256:	DF47B7DB2B0C1A0237EAC576541E1B9732B9805B8CFA289F1139D0EB66253099
SHA-512:	F1CFCFF8B698DF2D4320528CE7DA3FCB7B6C4F8050813D02F3DDC502CD4F46C6AFE634D3BE3D4306CB24CCAF44EB3A06B727709EAD6EF1FE2E25CC84544BF9E8
Malicious:	false
Preview:	Jan 2 01:00:40 galassia systemd-logind[6943]: Failed to add user by file name 1000, ignoring: Invalid argument.Jan 2 01:00:40 galassia systemd-logind[6943]: User enumeration failed: Invalid argument.Jan 2 01:00:40 galassia systemd-logind[6943]: User of session 2 not known..Jan 2 01:00:40 galassia systemd-logind[6943]: Session enumeration failed: No such file or directory.Jan 2 01:00:40 galassia systemd-logind[6943]: Watching system buttons on /dev/input/event0 (Power Button).Jan 2 01:00:40 galassia systemd-logind[6943]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Jan 2 01:00:40 galassia systemd-logind[6943]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838256
Encrypted:	false
SSDEEP:	3:F31HlF8cek7yld8cek7C:F37egypegC
MD5:	2333608DD86D080C9E41F44A2C922629
SHA1:	F61D33BA29442462D34F4440D11985D2D84C671F
SHA-256:	16AF2E8B16B0B1FBA8F5121E17D191CA781173A0FF246379DEE814D5C9A8BCD0
SHA-512:	7935DC24D3DDD49F5FD74862AD606D5985D25DFA03467200A268DA4DFC0E79309E0BBD8CCDF4187EFB5904C72DC9B6FB32448B21C3BCD41AA0BA8C956544A41F
Malicious:	false
Preview:	LPKSHHRH...................9.@E...?.N.mC...................................9.@E...?.N.mC........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838254
Encrypted:	false
SSDEEP:	3:F31HlMaX41sll/llkaX41s/:F38S41slltmS41s
MD5:	1B82C60998B1FE43E76E59AAEC635A2F
SHA1:	7C46FF4548F91D38AAC707C7450EC5F492B66B6F
SHA-256:	F3AD2AEC8E593AA450004830EF2770CA59CC44D4E916B992042DA95980A3455B
SHA-512:	6DAF7673B3660B1C62BCC636F279B350EB03A84ABF352B7672FC03BC36944C6DE7382050F248247BF2C1FF6A6C6D691955D762B272A8DD303543032C1B72A887
Malicious:	false
Preview:	LPKSHHRH.....................eG..q.._.......................................eG..q.._..........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	3849
Entropy (8bit):	4.705019422354175
Encrypted:	false
SSDEEP:	96:24Cuxtllb1Rl8c8HPm3wXQ9u26bu+zZ/mOBmwax08umWEUpqI:24Cuxt35baHPm8p7
MD5:	F7939CAC2D2DB8970A90C8E06A83C905
SHA1:	98158D67C0EF0D4E5A83778282352EC51CA5866C
SHA-256:	6C5FE7077D48ABAED2A08472EC29EDEE5B4DDECC4881CB07C96802202ECEB81F
SHA-512:	BA9603F380C7E68581B86D04332679248EDD8D5104B751135DF81A9B5DB7DC717ABF42C2A995CD72FC0BDDCEFEBC714264630D4EF2FFF0A8ED30590E4310731F
Malicious:	false
Preview:	Jan 2 01:00:34 galassia kernel: [ 271.722800] blocking signal 19: 5495 -> 3157.Jan 2 01:00:34 galassia kernel: [ 271.746458] blocking signal 9: 5495 -> 661.Jan 2 01:00:34 galassia kernel: [ 271.753587] blocking signal 9: 5495 -> 725.Jan 2 01:00:34 galassia kernel: [ 271.760713] blocking signal 9: 5495 -> 767.Jan 2 01:00:34 galassia kernel: [ 271.767737] blocking signal 9: 5495 -> 769.Jan 2 01:00:34 galassia kernel: [ 271.774784] blocking signal 9: 5495 -> 780.Jan 2 01:00:34 galassia kernel: [ 271.781839] blocking signal 9: 5495 -> 940.Jan 2 01:00:34 galassia kernel: [ 271.794521] blocking signal 9: 5495 -> 1299.Jan 2 01:00:34 galassia kernel: [ 271.801267] blocking signal 9: 5495 -> 1300.Jan 2 01:00:34 galassia kernel: [ 271.808604] blocking signal 9: 5495 -> 2955.Jan 2 01:00:34 galassia kernel: [ 271.815479] blocking signal 9: 5495 -> 2956.Jan 2 01:00:34 galassia kernel: [ 271.822211] blocking signal 9: 5495 -> 3157.Jan 2 01:00:34 galassia kernel: [ 272.52944

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	9718
Entropy (8bit):	4.98197150621092
Encrypted:	false
SSDEEP:	96:24Cuxtllb1Rl8c8HPmh81dzEEVkRmnwZQ9u8J+UQQ26buNzZ/mOBmwax08umWEAP:24Cuxt35baHPmC1dQn2J+f37pE+
MD5:	6476FA2CF113E6471051C2AE0BD7491D
SHA1:	410E028396ACEB3E550A09BB08A35F8A9F4E1820
SHA-256:	44F20DEC35A6FBA9A0B88B0D412A403F4AAE525AC9E663CE8B8929F7C15BFF86
SHA-512:	F403A46E68E8440258E993ADC30BFC48EF89A5288C5DE9D0EE130079F0458B30F4153EAED50F8769D0B95141E0EB7D62B99F93AA267EFCE328C131B182DE3DD8
Malicious:	false
Preview:	Jan 2 01:00:34 galassia kernel: [ 271.722800] blocking signal 19: 5495 -> 3157.Jan 2 01:00:34 galassia kernel: [ 271.746458] blocking signal 9: 5495 -> 661.Jan 2 01:00:34 galassia kernel: [ 271.753587] blocking signal 9: 5495 -> 725.Jan 2 01:00:34 galassia kernel: [ 271.760713] blocking signal 9: 5495 -> 767.Jan 2 01:00:34 galassia kernel: [ 271.767737] blocking signal 9: 5495 -> 769.Jan 2 01:00:34 galassia kernel: [ 271.774784] blocking signal 9: 5495 -> 780.Jan 2 01:00:34 galassia kernel: [ 271.781839] blocking signal 9: 5495 -> 940.Jan 2 01:00:34 galassia kernel: [ 271.794521] blocking signal 9: 5495 -> 1299.Jan 2 01:00:34 galassia kernel: [ 271.801267] blocking signal 9: 5495 -> 1300.Jan 2 01:00:34 galassia kernel: [ 271.808604] blocking signal 9: 5495 -> 2955.Jan 2 01:00:34 galassia kernel: [ 271.815479] blocking signal 9: 5495 -> 2956.Jan 2 01:00:34 galassia kernel: [ 271.822211] blocking signal 9: 5495 -> 3157.Jan 2 01:00:34 galassia kernel: [ 271.83134

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:vCsXlXEWtl/bTAL/:X+ylA
MD5:	DA0A4463F275FF5E6CD9997F20A9686C
SHA1:	5BCBD4618028678A438E2582D1A51CAAD8064000
SHA-256:	D84DA9A8B91D400B5A93BE65B8E632770C19CE15CEB66526BACB595BCBEB74A0
SHA-512:	77C547A747DC453A6AF14942B031641799BEE13DBF00412BEB782920DAFFFE05446A42AF1E5E84AFD0FDC2D160B3F2D8CDC022F9AEB6AB779D22FB3B3B4791EF
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................9vgX%......................................

Source: jefne64.elf	Virustotal: Detection: 51%			Perma Link
Source: jefne64.elf	ReversingLabs: Detection: 50%

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.31106125351663
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	jefne64.elf
File size:	168'328 bytes
MD5:	17ef36339428d10118962aaebc78e8dc
SHA1:	1afdcb5f5fee08e1aa80d524c48f66cae0842a03
SHA256:	1b89f0a38b1684cff2e66a4330ea5c78de73e1828da8084b9f61d2702c58d872
SHA512:	6b966b06880b9e644fc72780a8fe83a95e35fa7a9aa21605775322ce16a8fc5e1beedac9c2078a8c43c5b888a5f9ed0ce4970a263663f12f960b791312d977cf
SSDEEP:	3072:OhyXl/YETJv+Ut/UtRlI+sHuJAD+aPZ0atqWaIPqaQQLnHFWGZeXC:wy1/YETJvXt/UtnI+s34xawIeXC
TLSH:	97F34A06B5C1C8FDC4C6C1744BAEB63BAD71F1D91238B65B2BD4AB232E4DE215E1DA40
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@...............................................R.......R.............@...............Q.td....................................................H...._........H........

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	167688
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0x1b506	0x0	0x6	AX	16
.fini	PROGBITS	0x41b606	0x1b606	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x41b620	0x1b620	0x3ae0	0x0	0x2	A	32
.ctors	PROGBITS	0x520000	0x20000	0x18	0x0	0x3	WA	8
.dtors	PROGBITS	0x520018	0x20018	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x520040	0x20040	0x8e88	0x0	0x3	WA	32
.bss	NOBITS	0x528ee0	0x28ec8	0x7060	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x28ec8	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x1f100	0x1f100	6.3753	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x20000	0x520000	0x520000	0x8ec8	0xff40	0.2515	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 2, 2025 07:58:23.839159966 CET	192.168.2.14	192.168.2.1	827a	(Port unreachable)	Destination Unreachable
Jan 2, 2025 07:59:43.849710941 CET	192.168.2.14	192.168.2.1	827a	(Port unreachable)	Destination Unreachable

Start time (UTC):	06:57:51
Start date (UTC):	02/01/2025
Path:	/tmp/jefne64.elf
Arguments:	/tmp/jefne64.elf
File size:	168328 bytes
MD5 hash:	17ef36339428d10118962aaebc78e8dc

Start time (UTC):	06:57:52
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	06:57:57
Start date (UTC):	02/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	06:57:58
Start date (UTC):	02/01/2025
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	06:58:00
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	06:58:01
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	06:58:02
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:03
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2f0fb577c-8f27-49ed-9e22-22c0f8688bde
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Start time (UTC):	06:58:04
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:06
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:08
Start date (UTC):	02/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	06:58:09
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:10
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	06:58:11
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report jefne64.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/run/systemd/inhibit/.#11Be5ST

/run/systemd/inhibit/.#1BWHTKU

/run/systemd/inhibit/.#1C2uPfX

/run/systemd/inhibit/.#1Cd3sJV

/run/systemd/inhibit/.#1Dun4g0

/run/systemd/inhibit/.#1QCSs21

/run/systemd/inhibit/.#1QnRnw3

/run/systemd/inhibit/.#1RUtTb8

/run/systemd/inhibit/.#1S8DeW1

/run/systemd/inhibit/.#1SP3vra

/run/systemd/inhibit/.#1cidfa8

/run/systemd/inhibit/.#1dF6YNV

/run/systemd/inhibit/.#1fqjd8d

/run/systemd/inhibit/.#1hwLfkw

/run/systemd/inhibit/.#1kGZKiY

/run/systemd/inhibit/.#1obCCU1

/run/systemd/inhibit/.#1tPYZv1

/run/systemd/inhibit/.#1ukVy66

/run/systemd/inhibit/.#1vMiKa1

/run/systemd/journal/streams/.#9:68590Vc8xLF

/run/systemd/journal/streams/.#9:68591mzQ8YE

/run/systemd/journal/streams/.#9:68592X21gPG

/run/systemd/journal/streams/.#9:68599HwdjcG

Linux Analysis Report
jefne64.elf

Start time (UTC):	06:58:12
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:13
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:14
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:15
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:16
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:18
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:17
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:20
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:27
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:28
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75