Edit tour

Linux Analysis Report
wev86.elf

Overview

General Information

Sample name:	wev86.elf
Analysis ID:	1583181
MD5:	d18bc9eb21b477e912ba9dc5e7e885eb
SHA1:	e89565526a31bf5c94fc8cfc816e5a8c84ad0208
SHA256:	dfd01cc32d00e7b8bb9409092992c97a36e15756c74f3e1642d7b37a9a9f8453
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583181
Start date and time:	2025-01-02 07:57:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	wev86.elf
Detection:	MAL
Classification:	mal92.spre.troj.evad.linELF@0/213@1211/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.

Runtime Messages

Command:	/tmp/wev86.elf
PID:	5524
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

wev86.elf (PID: 5524, Parent: 5448, MD5: d18bc9eb21b477e912ba9dc5e7e885eb) Arguments: /tmp/wev86.elf

wev86.elf New Fork (PID: 5525, Parent: 5524)

wev86.elf New Fork (PID: 5526, Parent: 5525)

gnome-session-binary New Fork (PID: 5527, Parent: 1498)

sh (PID: 5527, Parent: 1498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5527, Parent: 1498, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

gdm3 New Fork (PID: 5532, Parent: 1333)

Default (PID: 5532, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5553, Parent: 1333)

Default (PID: 5553, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

xfce4-panel New Fork (PID: 5555, Parent: 3235)

wrapper-2.0 (PID: 5555, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5556, Parent: 3235)

wrapper-2.0 (PID: 5556, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5557, Parent: 3235)

wrapper-2.0 (PID: 5557, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5558, Parent: 3235)

wrapper-2.0 (PID: 5558, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5576, Parent: 5558)

xfpm-power-backlight-helper (PID: 5576, Parent: 5558, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5559, Parent: 3235)

wrapper-2.0 (PID: 5559, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5560, Parent: 3235)

wrapper-2.0 (PID: 5560, Parent: 3235, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5578, Parent: 5577)

xfconfd (PID: 5578, Parent: 5577, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5606, Parent: 1)

systemd-user-runtime-dir (PID: 5606, Parent: 1, MD5: d55f4b0847f88131dbcfb07435178e54) Arguments: /lib/systemd/systemd-user-runtime-dir stop 127

systemd New Fork (PID: 5607, Parent: 3044)

xfce4-notifyd (PID: 5607, Parent: 3044, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

xfce4-session New Fork (PID: 5608, Parent: 3074)

xfwm4 (PID: 5608, Parent: 3074, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 25b39293a-fee6-4e14-94fe-6ac0d9644afd

xfce4-session New Fork (PID: 5623, Parent: 3074)

xfce4-panel (PID: 5623, Parent: 3074, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2231df6a5-9489-4681-813c-95be59ba41ad

xfce4-session New Fork (PID: 5627, Parent: 3074)

rm (PID: 5627, Parent: 3074, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /home/saturnino/.cache/sessions/Thunar-280b92396-6edc-4f5e-865d-0a00b7aafaaa

xfce4-session New Fork (PID: 5630, Parent: 3074)

xfdesktop (PID: 5630, Parent: 3074, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 2975cc77d-4424-4c3b-abac-4708c6227ebe

xfce4-session New Fork (PID: 5631, Parent: 3074)

xfwm4 (PID: 5631, Parent: 3074, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 25b39293a-fee6-4e14-94fe-6ac0d9644afd

xfce4-session New Fork (PID: 5632, Parent: 3074)

xfce4-panel (PID: 5632, Parent: 3074, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2231df6a5-9489-4681-813c-95be59ba41ad

xfce4-session New Fork (PID: 5633, Parent: 3074)

xfdesktop (PID: 5633, Parent: 3074, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 2975cc77d-4424-4c3b-abac-4708c6227ebe

dbus-daemon New Fork (PID: 5638, Parent: 5637)

xfconfd (PID: 5638, Parent: 5637, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5648, Parent: 1)

journalctl (PID: 5648, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5649, Parent: 1)

systemd-journald (PID: 5649, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5650, Parent: 1)

dbus-daemon (PID: 5650, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5655, Parent: 1333)

Default (PID: 5655, Parent: 1333, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5656, Parent: 3044)

pulseaudio (PID: 5656, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5657, Parent: 1)

rsyslogd (PID: 5657, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5662, Parent: 1)

upowerd (PID: 5662, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

gvfsd-fuse New Fork (PID: 5700, Parent: 3210)

fusermount (PID: 5700, Parent: 3210, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5711, Parent: 1)

systemd-journald (PID: 5711, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5712, Parent: 1)

dbus-daemon (PID: 5712, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5716, Parent: 1)

rsyslogd (PID: 5716, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5717, Parent: 1)

upowerd (PID: 5717, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 5753, Parent: 3044)

pulseaudio (PID: 5753, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5759, Parent: 1)

rtkit-daemon (PID: 5759, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5762, Parent: 1)

systemd-logind (PID: 5762, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5819, Parent: 1)

polkitd (PID: 5819, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5823, Parent: 1)

agetty (PID: 5823, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5824, Parent: 1)

gpu-manager (PID: 5824, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5825, Parent: 5824)

sh (PID: 5825, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5826, Parent: 5825)

grep (PID: 5826, Parent: 5825, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5828, Parent: 5824)

sh (PID: 5828, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5829, Parent: 5828)

grep (PID: 5829, Parent: 5828, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5830, Parent: 5824)

sh (PID: 5830, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5831, Parent: 5830)

grep (PID: 5831, Parent: 5830, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5832, Parent: 5824)

sh (PID: 5832, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5833, Parent: 5832)

grep (PID: 5833, Parent: 5832, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5836, Parent: 5824)

sh (PID: 5836, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5837, Parent: 5836)

grep (PID: 5837, Parent: 5836, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5838, Parent: 5824)

sh (PID: 5838, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5839, Parent: 5838)

grep (PID: 5839, Parent: 5838, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5840, Parent: 5824)

sh (PID: 5840, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5841, Parent: 5840)

grep (PID: 5841, Parent: 5840, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5842, Parent: 5824)

sh (PID: 5842, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5844, Parent: 5842)

grep (PID: 5844, Parent: 5842, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5846, Parent: 3044)

dbus-daemon (PID: 5846, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5847, Parent: 1)

generate-config (PID: 5847, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5848, Parent: 5847)

pkill (PID: 5848, Parent: 5847, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5849, Parent: 1)

gdm-wait-for-drm (PID: 5849, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5854, Parent: 1)

systemd-journald (PID: 5854, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5855, Parent: 1)

dbus-daemon (PID: 5855, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5861, Parent: 1)

systemd-logind (PID: 5861, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5916, Parent: 1)

rsyslogd (PID: 5916, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5917, Parent: 1)

upowerd (PID: 5917, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 5953, Parent: 3044)

pulseaudio (PID: 5953, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5958, Parent: 1)

gpu-manager (PID: 5958, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5959, Parent: 5958)

sh (PID: 5959, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5960, Parent: 5959)

grep (PID: 5960, Parent: 5959, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5961, Parent: 5958)

sh (PID: 5961, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5962, Parent: 5961)

grep (PID: 5962, Parent: 5961, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5963, Parent: 5958)

sh (PID: 5963, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5964, Parent: 5963)

grep (PID: 5964, Parent: 5963, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5967, Parent: 5958)

sh (PID: 5967, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5968, Parent: 5967)

grep (PID: 5968, Parent: 5967, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5973, Parent: 5958)

sh (PID: 5973, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5976, Parent: 5973)

grep (PID: 5976, Parent: 5973, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5980, Parent: 5958)

sh (PID: 5980, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5981, Parent: 5980)

grep (PID: 5981, Parent: 5980, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5982, Parent: 5958)

sh (PID: 5982, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5983, Parent: 5982)

grep (PID: 5983, Parent: 5982, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5984, Parent: 5958)

sh (PID: 5984, Parent: 5958, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5985, Parent: 5984)

grep (PID: 5985, Parent: 5984, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5966, Parent: 1)

rtkit-daemon (PID: 5966, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5972, Parent: 1)

polkitd (PID: 5972, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5986, Parent: 1)

generate-config (PID: 5986, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5987, Parent: 5986)

pkill (PID: 5987, Parent: 5986, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5990, Parent: 3044)

dbus-daemon (PID: 5990, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5993, Parent: 1)

gdm-wait-for-drm (PID: 5993, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5996, Parent: 1)

systemd-journald (PID: 5996, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6001, Parent: 1)

systemd-logind (PID: 6001, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6057, Parent: 3044)

pulseaudio (PID: 6057, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6058, Parent: 1)

rsyslogd (PID: 6058, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6059, Parent: 1)

upowerd (PID: 6059, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6095, Parent: 1)

dbus-daemon (PID: 6095, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6100, Parent: 1)

gpu-manager (PID: 6100, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6101, Parent: 6100)

sh (PID: 6101, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6102, Parent: 6101)

grep (PID: 6102, Parent: 6101, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6103, Parent: 6100)

sh (PID: 6103, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6104, Parent: 6103)

grep (PID: 6104, Parent: 6103, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6105, Parent: 6100)

sh (PID: 6105, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6106, Parent: 6105)

grep (PID: 6106, Parent: 6105, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6107, Parent: 6100)

sh (PID: 6107, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6110, Parent: 6107)

grep (PID: 6110, Parent: 6107, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6112, Parent: 6100)

sh (PID: 6112, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6114, Parent: 6112)

grep (PID: 6114, Parent: 6112, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6115, Parent: 6100)

sh (PID: 6115, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6117, Parent: 6115)

grep (PID: 6117, Parent: 6115, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6124, Parent: 6100)

sh (PID: 6124, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6125, Parent: 6124)

grep (PID: 6125, Parent: 6124, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6126, Parent: 6100)

sh (PID: 6126, Parent: 6100, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6127, Parent: 6126)

grep (PID: 6127, Parent: 6126, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6113, Parent: 1)

rtkit-daemon (PID: 6113, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6120, Parent: 1)

polkitd (PID: 6120, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6128, Parent: 1)

generate-config (PID: 6128, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6129, Parent: 6128)

pkill (PID: 6129, Parent: 6128, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6134, Parent: 3044)

dbus-daemon (PID: 6134, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6135, Parent: 1)

gdm-wait-for-drm (PID: 6135, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6138, Parent: 1)

systemd-journald (PID: 6138, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6141, Parent: 1)

dbus-daemon (PID: 6141, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6144, Parent: 1)

systemd-logind (PID: 6144, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6192, Parent: 1)

rsyslogd (PID: 6192, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6200, Parent: 1)

upowerd (PID: 6200, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6236, Parent: 3044)

pulseaudio (PID: 6236, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6241, Parent: 1)

gpu-manager (PID: 6241, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6242, Parent: 6241)

sh (PID: 6242, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6243, Parent: 6242)

grep (PID: 6243, Parent: 6242, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6246, Parent: 6241)

sh (PID: 6246, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6247, Parent: 6246)

grep (PID: 6247, Parent: 6246, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6250, Parent: 6241)

sh (PID: 6250, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6251, Parent: 6250)

grep (PID: 6251, Parent: 6250, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6253, Parent: 6241)

sh (PID: 6253, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6257, Parent: 6253)

grep (PID: 6257, Parent: 6253, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6258, Parent: 6241)

sh (PID: 6258, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6262, Parent: 6258)

grep (PID: 6262, Parent: 6258, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6263, Parent: 6241)

sh (PID: 6263, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6264, Parent: 6263)

grep (PID: 6264, Parent: 6263, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6265, Parent: 6241)

sh (PID: 6265, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6266, Parent: 6265)

grep (PID: 6266, Parent: 6265, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6267, Parent: 6241)

sh (PID: 6267, Parent: 6241, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6268, Parent: 6267)

grep (PID: 6268, Parent: 6267, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6249, Parent: 1)

rtkit-daemon (PID: 6249, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6256, Parent: 1)

polkitd (PID: 6256, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6269, Parent: 1)

generate-config (PID: 6269, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6271, Parent: 6269)

pkill (PID: 6271, Parent: 6269, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6273, Parent: 3044)

dbus-daemon (PID: 6273, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6276, Parent: 1)

gdm-wait-for-drm (PID: 6276, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6279, Parent: 1)

systemd-journald (PID: 6279, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6284, Parent: 1)

systemd-logind (PID: 6284, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6339, Parent: 1)

rsyslogd (PID: 6339, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6340, Parent: 1)

upowerd (PID: 6340, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6376, Parent: 3044)

pulseaudio (PID: 6376, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6380, Parent: 1)

dbus-daemon (PID: 6380, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6384, Parent: 1)

gpu-manager (PID: 6384, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6385, Parent: 6384)

sh (PID: 6385, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6386, Parent: 6385)

grep (PID: 6386, Parent: 6385, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6387, Parent: 6384)

sh (PID: 6387, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6388, Parent: 6387)

grep (PID: 6388, Parent: 6387, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6389, Parent: 6384)

sh (PID: 6389, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6390, Parent: 6389)

grep (PID: 6390, Parent: 6389, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6391, Parent: 6384)

sh (PID: 6391, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6392, Parent: 6391)

grep (PID: 6392, Parent: 6391, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6395, Parent: 6384)

sh (PID: 6395, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6396, Parent: 6395)

grep (PID: 6396, Parent: 6395, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6401, Parent: 6384)

sh (PID: 6401, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6402, Parent: 6401)

grep (PID: 6402, Parent: 6401, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6406, Parent: 6384)

sh (PID: 6406, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6407, Parent: 6406)

grep (PID: 6407, Parent: 6406, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6408, Parent: 6384)

sh (PID: 6408, Parent: 6384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6409, Parent: 6408)

grep (PID: 6409, Parent: 6408, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6394, Parent: 1)

rtkit-daemon (PID: 6394, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6400, Parent: 1)

polkitd (PID: 6400, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6410, Parent: 1)

generate-config (PID: 6410, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6411, Parent: 6410)

pkill (PID: 6411, Parent: 6410, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6416, Parent: 3044)

dbus-daemon (PID: 6416, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6417, Parent: 1)

gdm-wait-for-drm (PID: 6417, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6420, Parent: 1)

systemd-journald (PID: 6420, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6425, Parent: 1)

dbus-daemon (PID: 6425, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6426, Parent: 1)

systemd-logind (PID: 6426, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6481, Parent: 3044)

pulseaudio (PID: 6481, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6482, Parent: 1)

rsyslogd (PID: 6482, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6483, Parent: 1)

upowerd (PID: 6483, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6525, Parent: 1)

gpu-manager (PID: 6525, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6526, Parent: 6525)

sh (PID: 6526, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6527, Parent: 6526)

grep (PID: 6527, Parent: 6526, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6528, Parent: 6525)

sh (PID: 6528, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6529, Parent: 6528)

grep (PID: 6529, Parent: 6528, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6531, Parent: 6525)

sh (PID: 6531, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6533, Parent: 6531)

grep (PID: 6533, Parent: 6531, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6534, Parent: 6525)

sh (PID: 6534, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6535, Parent: 6534)

grep (PID: 6535, Parent: 6534, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6540, Parent: 6525)

sh (PID: 6540, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6543, Parent: 6540)

grep (PID: 6543, Parent: 6540, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6545, Parent: 6525)

sh (PID: 6545, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6546, Parent: 6545)

grep (PID: 6546, Parent: 6545, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6547, Parent: 6525)

sh (PID: 6547, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6548, Parent: 6547)

grep (PID: 6548, Parent: 6547, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6549, Parent: 6525)

sh (PID: 6549, Parent: 6525, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6550, Parent: 6549)

grep (PID: 6550, Parent: 6549, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6532, Parent: 1)

rtkit-daemon (PID: 6532, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6539, Parent: 1)

polkitd (PID: 6539, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6553, Parent: 1)

generate-config (PID: 6553, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6554, Parent: 6553)

pkill (PID: 6554, Parent: 6553, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6557, Parent: 3044)

dbus-daemon (PID: 6557, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6558, Parent: 1)

gdm-wait-for-drm (PID: 6558, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6561, Parent: 1)

systemd-journald (PID: 6561, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6566, Parent: 1)

systemd-logind (PID: 6566, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6623, Parent: 3044)

pulseaudio (PID: 6623, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6624, Parent: 1)

rsyslogd (PID: 6624, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6625, Parent: 1)

upowerd (PID: 6625, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6661, Parent: 1)

dbus-daemon (PID: 6661, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6666, Parent: 1)

gpu-manager (PID: 6666, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6667, Parent: 6666)

sh (PID: 6667, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6668, Parent: 6667)

grep (PID: 6668, Parent: 6667, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6669, Parent: 6666)

sh (PID: 6669, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6670, Parent: 6669)

grep (PID: 6670, Parent: 6669, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6671, Parent: 6666)

sh (PID: 6671, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6672, Parent: 6671)

grep (PID: 6672, Parent: 6671, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6673, Parent: 6666)

sh (PID: 6673, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6674, Parent: 6673)

grep (PID: 6674, Parent: 6673, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6675, Parent: 6666)

sh (PID: 6675, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6676, Parent: 6675)

grep (PID: 6676, Parent: 6675, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6679, Parent: 6666)

sh (PID: 6679, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6680, Parent: 6679)

grep (PID: 6680, Parent: 6679, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6688, Parent: 6666)

sh (PID: 6688, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6689, Parent: 6688)

grep (PID: 6689, Parent: 6688, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6690, Parent: 6666)

sh (PID: 6690, Parent: 6666, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6691, Parent: 6690)

grep (PID: 6691, Parent: 6690, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6678, Parent: 1)

rtkit-daemon (PID: 6678, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6684, Parent: 1)

polkitd (PID: 6684, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6694, Parent: 1)

generate-config (PID: 6694, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6695, Parent: 6694)

pkill (PID: 6695, Parent: 6694, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6698, Parent: 3044)

dbus-daemon (PID: 6698, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6699, Parent: 1)

gdm-wait-for-drm (PID: 6699, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6704, Parent: 1)

systemd-journald (PID: 6704, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6707, Parent: 1)

dbus-daemon (PID: 6707, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6710, Parent: 1)

systemd-logind (PID: 6710, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6765, Parent: 1)

rsyslogd (PID: 6765, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6766, Parent: 1)

upowerd (PID: 6766, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6767, Parent: 3044)

pulseaudio (PID: 6767, Parent: 3044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6807, Parent: 1)

gpu-manager (PID: 6807, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6809, Parent: 6807)

sh (PID: 6809, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6811, Parent: 6809)

grep (PID: 6811, Parent: 6809, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6812, Parent: 6807)

sh (PID: 6812, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6814, Parent: 6812)

grep (PID: 6814, Parent: 6812, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6818, Parent: 6807)

sh (PID: 6818, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6819, Parent: 6818)

grep (PID: 6819, Parent: 6818, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6823, Parent: 6807)

sh (PID: 6823, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6824, Parent: 6823)

grep (PID: 6824, Parent: 6823, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6825, Parent: 6807)

sh (PID: 6825, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6826, Parent: 6825)

grep (PID: 6826, Parent: 6825, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6827, Parent: 6807)

sh (PID: 6827, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6828, Parent: 6827)

grep (PID: 6828, Parent: 6827, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6829, Parent: 6807)

sh (PID: 6829, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6830, Parent: 6829)

grep (PID: 6830, Parent: 6829, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6831, Parent: 6807)

sh (PID: 6831, Parent: 6807, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6832, Parent: 6831)

grep (PID: 6832, Parent: 6831, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6810, Parent: 1)

rtkit-daemon (PID: 6810, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6817, Parent: 1)

polkitd (PID: 6817, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6836, Parent: 1)

generate-config (PID: 6836, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6837, Parent: 6836)

pkill (PID: 6837, Parent: 6836, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6839, Parent: 3044)

dbus-daemon (PID: 6839, Parent: 3044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6840, Parent: 1)

gdm-wait-for-drm (PID: 6840, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6845, Parent: 1)

systemd-journald (PID: 6845, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6848, Parent: 1)

dbus-daemon (PID: 6848, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6851, Parent: 1)

systemd-logind (PID: 6851, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6906, Parent: 1)

rsyslogd (PID: 6906, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6907, Parent: 1)

upowerd (PID: 6907, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6947, Parent: 1)

gpu-manager (PID: 6947, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6948, Parent: 6947)

sh (PID: 6948, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6949, Parent: 6948)

grep (PID: 6949, Parent: 6948, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6951, Parent: 6947)

sh (PID: 6951, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6952, Parent: 6951)

grep (PID: 6952, Parent: 6951, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6954, Parent: 6947)

sh (PID: 6954, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6955, Parent: 6954)

grep (PID: 6955, Parent: 6954, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6956, Parent: 6947)

sh (PID: 6956, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6957, Parent: 6956)

grep (PID: 6957, Parent: 6956, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6958, Parent: 6947)

sh (PID: 6958, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6959, Parent: 6958)

grep (PID: 6959, Parent: 6958, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6960, Parent: 6947)

sh (PID: 6960, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6961, Parent: 6960)

grep (PID: 6961, Parent: 6960, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6962, Parent: 6947)

sh (PID: 6962, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6963, Parent: 6962)

grep (PID: 6963, Parent: 6962, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6964, Parent: 6947)

sh (PID: 6964, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6965, Parent: 6964)

grep (PID: 6965, Parent: 6964, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6966, Parent: 1)

generate-config (PID: 6966, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6967, Parent: 6966)

pkill (PID: 6967, Parent: 6966, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6970, Parent: 1)

gdm-wait-for-drm (PID: 6970, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6975, Parent: 1)

systemd-journald (PID: 6975, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6976, Parent: 1)

dbus-daemon (PID: 6976, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6981, Parent: 1)

systemd-logind (PID: 6981, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7036, Parent: 1)

rsyslogd (PID: 7036, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7037, Parent: 1)

upowerd (PID: 7037, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7077, Parent: 1)

gpu-manager (PID: 7077, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7079, Parent: 7077)

sh (PID: 7079, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7080, Parent: 7079)

grep (PID: 7080, Parent: 7079, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7081, Parent: 7077)

sh (PID: 7081, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7083, Parent: 7081)

grep (PID: 7083, Parent: 7081, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7084, Parent: 7077)

sh (PID: 7084, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7085, Parent: 7084)

grep (PID: 7085, Parent: 7084, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7086, Parent: 7077)

sh (PID: 7086, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7087, Parent: 7086)

grep (PID: 7087, Parent: 7086, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7088, Parent: 7077)

sh (PID: 7088, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7089, Parent: 7088)

grep (PID: 7089, Parent: 7088, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7090, Parent: 7077)

sh (PID: 7090, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7091, Parent: 7090)

grep (PID: 7091, Parent: 7090, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7092, Parent: 7077)

sh (PID: 7092, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7093, Parent: 7092)

grep (PID: 7093, Parent: 7092, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7094, Parent: 7077)

sh (PID: 7094, Parent: 7077, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7095, Parent: 7094)

grep (PID: 7095, Parent: 7094, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7098, Parent: 1)

generate-config (PID: 7098, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7099, Parent: 7098)

pkill (PID: 7099, Parent: 7098, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7100, Parent: 1)

gdm-wait-for-drm (PID: 7100, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
wev86.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
wev86.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x152e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x152f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15308:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1531c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15330:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15344:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1536c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15380:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15394:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1540c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1545c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
wev86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x6670:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
wev86.elf	Linux_Trojan_Mirai_5f7b67b8	unknown	unknown	0xc8c4:$a: 89 38 83 CF FF 89 F8 5A 59 5F C3 57 56 83 EC 04 8B 7C 24 10 8B 4C
wev86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x9172:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
wev86.elf	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
wev86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xfb75:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
wev86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xe11f:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
wev86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x9142:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 4 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5524.1.0000000008048000.0000000008060000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x152e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x152f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15308:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1531c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15330:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15344:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1536c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15380:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15394:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1540c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1545c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x6670:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_5f7b67b8	unknown	unknown	0xc8c4:$a: 89 38 83 CF FF 89 F8 5A 59 5F C3 57 56 83 EC 04 8B 7C 24 10 8B 4C
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x9172:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x192:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xfb75:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xe11f:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5524.1.0000000008048000.0000000008060000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x9142:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Process Memory Space: wev86.elf PID: 5524	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: wev86.elf PID: 5524	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x129c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1300:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 6 entries

String: EOF/proc//proc/%s/cmdlinewgetcurlftpechokillbashrebootshutdownhaltpoweroff/fd/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/lib/systemd//usr/lib/systemd/system/system/bin//gm/bin//home/process//home/helper/home/davinci/z/bin//mnt/mtd//tmp/sqfs//usr/libexec//usr/sbin//z/zbin//usr/bin/tmp/var/mnt/root/boot/home/dev/media/opt/../(deleted)dbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: fingwi.cardiacpure.ru. [malformed]

Source: global traffic	TCP traffic: 192.168.2.15:39054 -> 178.215.238.112:33966
Source: global traffic	TCP traffic: 192.168.2.15:37426 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5657)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5716)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5916)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6058)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6192)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6339)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6482)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6624)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6765)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6906)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7036)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5711)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5996)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6138)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6279)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6420)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6561)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6704)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6845)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6975)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru. [malformed]

Source: syslog.79.dr, syslog.487.dr, syslog.597.dr, syslog.545.dr, syslog.255.dr, syslog.141.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_5f7b67b8 Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_5f7b67b8 Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: Process Memory Space: wev86.elf PID: 5524, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1679, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5527, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3192, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3249, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3250, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3251, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3252, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3253, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3255, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3272, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3274, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3298, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 779, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 779, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3074, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3222, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3222, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3234, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3235, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3235, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3241, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3241, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3246, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3246, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3275, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3275, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3292, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3292, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3310, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3310, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5507, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5507, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5557, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5559, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5560, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5578, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5607, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5608, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5608, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5623, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5623, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5630, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5630, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 724, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 766, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 789, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 802, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 931, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1333, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1445, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1615, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1623, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1867, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3044, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3055, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3060, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3205, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3210, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3273, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3278, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3316, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3332, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3368, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3399, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3407, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3419, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3440, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3456, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3461, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3465, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3469, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3475, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3488, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3702, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3851, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5367, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5631, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5632, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5633, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5649, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5650, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5656, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5657, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5662, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5711, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5712, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5716, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5717, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5753, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5759, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5762, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5819, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5846, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5849, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5855, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5861, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5916, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5953, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5966, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5972, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5990, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5993, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5996, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6001, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6057, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6058, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6059, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6095, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6113, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6120, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6134, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6135, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6138, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6141, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6144, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6192, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6200, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6249, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6256, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6273, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6276, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6279, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6284, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6376, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6380, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6394, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6400, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6416, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6417, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6420, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6425, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6426, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6481, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6482, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6483, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6539, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6557, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6558, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6561, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6566, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6623, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6624, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6625, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6661, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6678, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6684, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6698, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6699, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6704, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6707, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6710, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6765, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6766, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6767, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6810, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6817, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6839, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6845, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6848, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6906, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6907, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6970, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1679, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5527, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3192, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3249, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3250, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3251, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3252, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3253, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3255, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3272, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3274, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3298, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 779, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 779, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3074, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3222, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3222, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3234, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3235, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3235, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3241, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3241, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3246, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3246, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3275, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3275, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3292, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3292, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3310, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3310, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5507, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5507, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5557, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5559, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5560, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5578, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5607, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5608, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5608, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5623, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5623, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5630, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5630, result: no such process	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 724, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 766, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 789, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 800, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 802, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 917, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 931, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1333, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1445, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1615, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1623, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 1867, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3044, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3055, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3060, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3205, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3210, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3220, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3273, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3278, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3316, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3332, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3368, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3399, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3407, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3419, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3440, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3456, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3461, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3465, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3469, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3475, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3488, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3702, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 3851, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5367, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5631, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5632, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5633, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5649, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5650, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5656, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5657, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5662, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5711, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5712, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5716, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5717, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5753, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5759, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5762, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5819, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5846, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5849, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5855, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5861, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5916, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5953, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5966, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5972, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5990, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5993, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 5996, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6001, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6057, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6058, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6059, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6095, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6113, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6120, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6134, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6135, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6138, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6141, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6144, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6192, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6200, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6249, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6256, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6273, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6276, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6279, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6284, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6376, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6380, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6394, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6400, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6416, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6417, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6420, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6425, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6426, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6481, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6482, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6483, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6539, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6557, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6558, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6561, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6566, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6623, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6624, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6625, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6661, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6678, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6684, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6698, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6699, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6704, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6707, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6710, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6765, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6766, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6767, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6810, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6817, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6839, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6845, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6848, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6906, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6907, result: successful	Jump to behavior
Source: /tmp/wev86.elf (PID: 5526)	SIGKILL sent: pid: 6970, result: successful	Jump to behavior

Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_5f7b67b8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6cb5fb0b7c132e9c11ac72da43278025b60810ea3733c9c6d6ca966163185940, id = 5f7b67b8-3d7b-48a4-8f03-b6f2c92be92e, last_modified = 2021-09-16
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: wev86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_5f7b67b8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6cb5fb0b7c132e9c11ac72da43278025b60810ea3733c9c6d6ca966163185940, id = 5f7b67b8-3d7b-48a4-8f03-b6f2c92be92e, last_modified = 2021-09-16
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: Process Memory Space: wev86.elf PID: 5524, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.evad.linELF@0/213@1211/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5650)	File: /proc/5650/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5700)	File: /proc/5700/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5712)	File: /proc/5712/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5846)	File: /proc/5846/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5855)	File: /proc/5855/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5990)	File: /proc/5990/mounts
Source: /usr/bin/dbus-daemon (PID: 6095)	File: /proc/6095/mounts
Source: /usr/bin/dbus-daemon (PID: 6134)	File: /proc/6134/mounts
Source: /usr/bin/dbus-daemon (PID: 6141)	File: /proc/6141/mounts
Source: /usr/bin/dbus-daemon (PID: 6273)	File: /proc/6273/mounts
Source: /usr/bin/dbus-daemon (PID: 6380)	File: /proc/6380/mounts
Source: /usr/bin/dbus-daemon (PID: 6416)	File: /proc/6416/mounts
Source: /usr/bin/dbus-daemon (PID: 6425)	File: /proc/6425/mounts
Source: /usr/bin/dbus-daemon (PID: 6557)	File: /proc/6557/mounts
Source: /usr/bin/dbus-daemon (PID: 6661)	File: /proc/6661/mounts
Source: /usr/bin/dbus-daemon (PID: 6698)	File: /proc/6698/mounts
Source: /usr/bin/dbus-daemon (PID: 6707)	File: /proc/6707/mounts
Source: /usr/bin/dbus-daemon (PID: 6839)	File: /proc/6839/mounts
Source: /usr/bin/dbus-daemon (PID: 6848)	File: /proc/6848/mounts
Source: /usr/bin/dbus-daemon (PID: 6976)	File: /proc/6976/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5527)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5527)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5555)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5556)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5557)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5558)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5578)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5607)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5608)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5631)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5632)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5633)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5638)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5638)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5638)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5638)	Directory: /home/saturnino/.config	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65706OY0732	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65707dN6L71	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65708ORJ702	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65709Znklk4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65710WbOhC1	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65717jkcX72	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65718e72mF4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65719EueMr2	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:657207VIci2	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65729BMW0a4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65730M9aX23	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:657316QUuE0	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65732uzwKy4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	File: /run/systemd/journal/streams/.#9:65782Q5y2J3	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5717)	Directory: <invalid fd (12)>/..	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5717)	Directory: <invalid fd (11)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5762)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5762)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5762)	File: /run/systemd/seats/.#seat0XTHmHR	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5762)	File: /run/systemd/inhibit/.#1QwgTQU	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5819)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66138rQjeGO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66144XUmoHR	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66145tX3zGO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66146WtyJSQ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:661475lJPPQ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66148jHpLiR	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66149M2UJBP	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66150dofBPQ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	File: /run/systemd/journal/streams/.#9:66158zn5xHP	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5861)	Directory: <invalid fd (19)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5861)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5861)	File: /run/systemd/seats/.#seat016NJTn	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5861)	File: /run/systemd/inhibit/.#1vJgc3m	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5861)	File: /run/systemd/inhibit/.#1uYDasm	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5917)	Directory: <invalid fd (12)>/..	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 5917)	Directory: <invalid fd (11)>/..	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5972)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68673aimwwA
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:686759DjCpz
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68676c3Ox6y
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68677NyMcYB
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68684EvagTA
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68685dZFFwA
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68686JtmyaA
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68687hlTWMB
Source: /lib/systemd/systemd-journald (PID: 5996)	File: /run/systemd/journal/streams/.#9:68731QwhqTy
Source: /lib/systemd/systemd-logind (PID: 6001)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6001)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6001)	File: /run/systemd/seats/.#seat0M6k9nZ
Source: /lib/systemd/systemd-logind (PID: 6001)	File: /run/systemd/inhibit/.#1ajqOl0
Source: /lib/systemd/systemd-logind (PID: 6001)	File: /run/systemd/inhibit/.#1Kb0oSV
Source: /usr/lib/upower/upowerd (PID: 6059)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6059)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6120)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69077Izgy3k
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69084ohhiwl
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69085MFAGCi
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:690860S8shj
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69087zvoh0i
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69088vd5gQj
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69089W9QXVj
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:69090XO6xXi
Source: /lib/systemd/systemd-journald (PID: 6138)	File: /run/systemd/journal/streams/.#9:691277Hq5ol
Source: /lib/systemd/systemd-logind (PID: 6144)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6144)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6144)	File: /run/systemd/seats/.#seat03txLxO
Source: /lib/systemd/systemd-logind (PID: 6144)	File: /run/systemd/inhibit/.#1rIP80N
Source: /lib/systemd/systemd-logind (PID: 6144)	File: /run/systemd/inhibit/.#1r4UDyM
Source: /usr/lib/upower/upowerd (PID: 6200)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6200)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6256)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71521nnwfzY
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71522rrDZkZ
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71523Yt9BWX
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71524isDYJX
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71531kpHGh1
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:715320bxebZ
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71533ThjqHZ
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71534BY6Zi1
Source: /lib/systemd/systemd-journald (PID: 6279)	File: /run/systemd/journal/streams/.#9:71671OorSyX
Source: /lib/systemd/systemd-logind (PID: 6284)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6284)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6284)	File: /run/systemd/seats/.#seat0yw14Ik
Source: /lib/systemd/systemd-logind (PID: 6284)	File: /run/systemd/inhibit/.#1Om3jNm
Source: /lib/systemd/systemd-logind (PID: 6284)	File: /run/systemd/inhibit/.#1gNlEXn
Source: /usr/lib/upower/upowerd (PID: 6340)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6340)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6400)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73045vyNphC
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73052S09K6F
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73053YHwqPE
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73054K8nczE
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73055ROJ1zD
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73056ElttHE
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73168A7wgrC
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73210jQblkG
Source: /lib/systemd/systemd-journald (PID: 6420)	File: /run/systemd/journal/streams/.#9:73319CyYBkC
Source: /lib/systemd/systemd-logind (PID: 6426)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6426)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6426)	File: /run/systemd/seats/.#seat04zLgZ6
Source: /lib/systemd/systemd-logind (PID: 6426)	File: /run/systemd/inhibit/.#1cfWJf5
Source: /lib/systemd/systemd-logind (PID: 6426)	File: /run/systemd/inhibit/.#1zshaA8
Source: /usr/lib/upower/upowerd (PID: 6483)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6483)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6539)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74863DBVIgl
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74864ER5Kvi
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74868D8cRxl
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74874rvJ1Kk
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:748811DUY2h
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74882ebme5h
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74883vKRXzi
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74884iGMTjh
Source: /lib/systemd/systemd-journald (PID: 6561)	File: /run/systemd/journal/streams/.#9:74926W9lRki
Source: /lib/systemd/systemd-logind (PID: 6566)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6566)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6566)	File: /run/systemd/seats/.#seat0LYkqjH
Source: /lib/systemd/systemd-logind (PID: 6566)	File: /run/systemd/inhibit/.#1DKngoF
Source: /lib/systemd/systemd-logind (PID: 6566)	File: /run/systemd/inhibit/.#1PncyqH
Source: /usr/lib/upower/upowerd (PID: 6625)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6625)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6684)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:762994tQwH5
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76306SscN78
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76307LN0gm9
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76308QHOUR6
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76309D4jpo9
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76310ImBWP5
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76311bkwt47
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76312fi7rb7
Source: /lib/systemd/systemd-journald (PID: 6704)	File: /run/systemd/journal/streams/.#9:76320hJcJk8
Source: /lib/systemd/systemd-logind (PID: 6710)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6710)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6710)	File: /run/systemd/seats/.#seat08foLpB
Source: /lib/systemd/systemd-logind (PID: 6710)	File: /run/systemd/inhibit/.#1OD6VxA
Source: /lib/systemd/systemd-logind (PID: 6710)	File: /run/systemd/inhibit/.#1SpQcqy
Source: /usr/lib/upower/upowerd (PID: 6766)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6766)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 6817)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6845)	File: /run/systemd/journal/streams/.#9:77010qOwMaL
Source: /lib/systemd/systemd-journald (PID: 6845)	File: /run/systemd/journal/streams/.#9:77017G96A9K
Source: /lib/systemd/systemd-journald (PID: 6845)	File: /run/systemd/journal/streams/.#9:77018DznqzL
Source: /lib/systemd/systemd-journald (PID: 6845)	File: /run/systemd/journal/streams/.#9:77019dS8QKM
Source: /lib/systemd/systemd-journald (PID: 6845)	File: /run/systemd/journal/streams/.#9:77026EKtH5N
Source: /lib/systemd/systemd-logind (PID: 6851)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6851)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6851)	File: /run/systemd/seats/.#seat0Q64gkh
Source: /lib/systemd/systemd-logind (PID: 6851)	File: /run/systemd/inhibit/.#1lRZ7eg
Source: /lib/systemd/systemd-logind (PID: 6851)	File: /run/systemd/inhibit/.#1CVIIDf
Source: /usr/lib/upower/upowerd (PID: 6907)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6907)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6975)	File: /run/systemd/journal/streams/.#9:77751jFtXbA
Source: /lib/systemd/systemd-journald (PID: 6975)	File: /run/systemd/journal/streams/.#9:77758Kz7NJC
Source: /lib/systemd/systemd-journald (PID: 6975)	File: /run/systemd/journal/streams/.#9:77766kx8ULC
Source: /lib/systemd/systemd-journald (PID: 6975)	File: /run/systemd/journal/streams/.#9:77767u8iNpE
Source: /lib/systemd/systemd-journald (PID: 6975)	File: /run/systemd/journal/streams/.#9:78869kgZtPD
Source: /lib/systemd/systemd-logind (PID: 6981)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6981)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6981)	File: /run/systemd/seats/.#seat0QrwJN4
Source: /lib/systemd/systemd-logind (PID: 6981)	File: /run/systemd/inhibit/.#1YfcZx4
Source: /lib/systemd/systemd-logind (PID: 6981)	File: /run/systemd/inhibit/.#1rlnH84
Source: /usr/lib/upower/upowerd (PID: 7037)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7037)	Directory: <invalid fd (11)>/..

Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6394/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6284/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6376/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6279/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6279/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6279/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6279/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6279/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6279/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6400/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/3044/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6380/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/658/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6339/cgroup
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/comm
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/cmdline
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/status
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/attr/current
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/sessionid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/loginuid
Source: /lib/systemd/systemd-journald (PID: 6279)	File opened: /proc/6416/cgroup
Source: /usr/bin/pkill (PID: 6554)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 6554)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 6554)	File opened: /proc/231/status
Source: /usr/bin/pkill (PID: 6554)	File opened: /proc/231/cmdline
Source: /usr/bin/pkill (PID: 6554)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 6554)	File opened: /proc/111/cmdline

Source: /usr/bin/gpu-manager (PID: 5825)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5828)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5830)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5832)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5836)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5838)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5840)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5842)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5959)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5961)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5963)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5967)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5973)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5980)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5982)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 5984)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6101)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6103)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6105)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6107)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6112)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6115)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6124)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6126)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6242)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6246)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6250)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6253)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6258)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6263)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6265)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6267)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6385)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6387)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6389)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6391)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6395)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6401)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6406)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6408)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6526)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6528)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6531)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6534)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6540)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6545)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6547)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6549)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6667)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6669)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6671)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6673)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6675)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6679)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6688)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6690)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6809)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6812)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6818)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6823)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6825)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6827)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6829)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6831)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6948)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6951)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6954)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6956)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6958)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6960)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6962)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6964)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7079)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7081)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7084)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7086)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7088)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7090)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7092)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7094)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5826)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5829)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5831)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5833)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5837)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5839)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5841)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5844)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5960)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5962)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5964)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5968)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5976)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5981)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 5983)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 5985)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6102)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6104)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6106)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6110)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6114)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6117)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6125)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6127)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6243)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6247)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6251)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6257)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6262)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6264)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6266)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6268)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6386)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6388)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6390)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6392)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6396)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6402)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6407)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6409)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6527)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6529)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6533)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6535)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6543)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6546)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6548)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6550)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6668)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6670)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6672)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6674)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6676)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6680)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6689)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6691)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6811)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6814)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6819)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6824)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6826)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6828)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6830)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6832)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6949)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6952)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6955)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6957)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6959)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6961)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6963)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6965)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7080)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7083)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7085)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7087)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7089)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7091)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7093)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7095)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5848)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5987)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6129)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6271)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6411)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6554)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6695)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6837)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6967)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7099)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /usr/bin/xfce4-session (PID: 5627)

Rm executable: /usr/bin/rm -> rm -f /home/saturnino/.cache/sessions/Thunar-280b92396-6edc-4f5e-865d-0a00b7aafaaa

Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 5711)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5996)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6138)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6279)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6420)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6561)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6704)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6845)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6975)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 5823)

Reads version info: /etc/issue

Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 5657)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5716)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5716)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5824)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5916)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5916)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5958)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6058)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6058)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6100)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6192)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6192)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6241)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6339)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6339)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6384)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6482)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6482)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6525)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6624)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6624)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6666)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6765)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6765)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6807)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6906)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6906)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6947)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7036)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7036)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 7077)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/wev86.elf (PID: 5525)

File: /tmp/wev86.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5824)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5958)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6100)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6241)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6384)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6525)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6666)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6807)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6947)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7077)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pulseaudio (PID: 5753)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5848)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5953)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5987)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6057)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6129)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6236)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6271)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6376)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6411)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6481)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6554)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6623)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6695)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6767)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6837)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6967)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7099)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5555)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5556)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5557)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5558)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5559)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5560)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5607)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5608)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5623)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5630)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5631)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5632)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5633)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5657)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5711)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5716)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5753)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5823)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5824)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5854)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5916)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5953)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5958)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 5996)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6057)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6058)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6100)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6138)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6192)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6236)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6241)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6279)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6339)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6376)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6384)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6420)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6481)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6482)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6525)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6561)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6623)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6624)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6666)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6704)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6765)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6767)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6807)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6845)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6906)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6947)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6975)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7036)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7077)	Queries kernel information via 'uname':

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: wev86.elf, type: SAMPLE
Source: Yara match	File source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wev86.elf PID: 5524, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: wev86.elf, type: SAMPLE
Source: Yara match	File source: 5524.1.0000000008048000.0000000008060000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wev86.elf PID: 5524, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
wev86.elf	38%	Virustotal		Browse
wev86.elf	42%	ReversingLabs	Linux.Backdoor.Mirai
wev86.elf	100%	Avira	EXP/ELF.Mirai.Z.A
wev86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fingwi.cardiacpure.ru	178.215.238.112	true	false		high
fingwi.cardiacpure.ru. [malformed]	unknown	unknown	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.79.dr, syslog.487.dr, syslog.597.dr, syslog.545.dr, syslog.255.dr, syslog.141.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
178.215.238.112	fingwi.cardiacpure.ru	Germany		10753	LVLT-10753US	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
178.215.238.112	wlw68k.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	nvebfe64.elf	Get hash	malicious	Mirai	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	rjnven64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
LVLT-10753US	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	ngwa5.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	nvebfe64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	rjnven64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	fnkea7.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wkb86.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	njvwa4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	kqibeps.elf	Get hash	malicious	Mirai	Browse	178.215.238.153

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/run/systemd/inhibit/.#1CVIIDf

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if3t3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf3t3ApLHK7wR9n
MD5:	C3FEF78BE9A511756E2575A29AC0D2CA
SHA1:	4D826E459D5EB5B0F19F8ADF76539991304F432D
SHA-256:	64D5BDE609AC30AD46E3EA5C6E8A7A6FDA66325D264CE39B7F48BFEEC373B4F2
SHA-512:	212D3FE1C0E7349F3AA9C075D290130B0B318D793A1FD60AB4FD99AC878EB4D2A1EE2D87493C175865E2768288F1EB7A383B18C8D60C9F474D163EEC0FE4EB9B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6907.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1DKngoF

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if+vyAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf+BApLHK7wR9n
MD5:	35C93BC2AC54FCC8AF5C53EB28B1413C
SHA1:	F3A319658F8D586D7FEE0072F7838FD6E59A1AB4
SHA-256:	73FEFD55A30D24F125F5BA2FEBB8D6047EEAAB3FDCD2D2795ACA69054AB8EFF8
SHA-512:	F7A27572C1167D593ADD5EA557D8F919459F398AB4283B4F5619A5D0E72DA179AFFB529CCF9D1F5E0CD4CB151D236760E84E757F0F1B5A9A32EB6CED4BF09077
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6483.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1Kb0oSV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifj+M1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApflApLHK7wR9n
MD5:	395B024306D70F7BBFE80AB45AE31B3A
SHA1:	ADCF4AF203B234D5CEC921D9DA7C6EE1A81F2FD3
SHA-256:	2CDC7BFCA9A84711B8D1E8E23889CB9EC2AAF40E91DA49323A122D2DF0B9D350
SHA-512:	CBA57C15FB0B8484450DF3BF9093D2D39EDF7ED5755A3A8A45B9932F382305F4EA0415B843501EF2775906D82E6A6A758C0EBEC612150E70C1710D11FBF85452
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6059.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1OD6VxA

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if+YAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf+3ApLHK7wR9n
MD5:	D5838B6B214A4F9E64C8F7DBD17799FE
SHA1:	8DF9BCDFF97E8E8284EE0E9B2A543F0EB29FEC9C
SHA-256:	320D9A8951953F200E86512E9022373DA997B3C7FA4E292A94E3A3ED6620AD74
SHA-512:	7AFC836B3B79EDEBBF740686C77CF9793A796D486D44465B4A0B10BA04C7777CAE730F75D237F9C9E8D5187007D722ABB350BA1538C306CE17B693B169848E83
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6625.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1Om3jNm

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iflIppTMXSHK72X8/Sf9n:SbFuFyL8OAApflApLHK7wR9n
MD5:	26F49912B5FCD1A59A30512CAC840E99
SHA1:	5BF1CC34CE5F53B1080AF4C4E54964E26C153D68
SHA-256:	E0CF6180EA6A1DD9ADC043D1DF8FFE5773301D8D020CF28D5ECD6C8F4F04E241
SHA-512:	F393500E6983969C39C47E0275FD299208AC8FC681ED6E61D9FF5A5F63DB9E590738C8780178FF0DE76C73B403CC9F70F33CB8E12DFD3EB03D01FBC0F0B0F408
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6200.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1PncyqH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if+YAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf+3ApLHK7wR9n
MD5:	D5838B6B214A4F9E64C8F7DBD17799FE
SHA1:	8DF9BCDFF97E8E8284EE0E9B2A543F0EB29FEC9C
SHA-256:	320D9A8951953F200E86512E9022373DA997B3C7FA4E292A94E3A3ED6620AD74
SHA-512:	7AFC836B3B79EDEBBF740686C77CF9793A796D486D44465B4A0B10BA04C7777CAE730F75D237F9C9E8D5187007D722ABB350BA1538C306CE17B693B169848E83
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6625.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1QwgTQU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iftIppTMXSHK72X8/Sf9n:SbFuFyL8OAApftApLHK7wR9n
MD5:	13602E7A65265C733DF3181A3B5B6030
SHA1:	E6BE29E52524E96D3528AA68ADE66C6FC08DE0A0
SHA-256:	A46F482C71CF63572EB4A0BA2AAF440912DCAD90EEDCDD6D3E61D8BF631C57A3
SHA-512:	937B2CF681AE9A0C1FDEC184A1BFE697680FBB197825FE1850C6787AD739A317C825CD2D2FBA7884979771E23550BC414C822AF6B356059F8E4102B6288515E5
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5717.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1SpQcqy

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifcyeIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfDeApLHK7wR9n
MD5:	B7F93CAC23C609DBD3689DA8CD75092F
SHA1:	934E18109D14DF99A8F9E0CCD5376AD573E93684
SHA-256:	B4C627EB8B3DB28E871373840F64C06118E92F7F6234FD4BA7C1032A333D5CE9
SHA-512:	1463C8ED11833477C890C9D99004DD98ADD9DB12AE2902C83698190E28C2127C88E569557C04E6BDB12CD19D4ED557864D55447B35F8A10CF713EC350094BBC3
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6766.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1YfcZx4

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if3t3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf3t3ApLHK7wR9n
MD5:	C3FEF78BE9A511756E2575A29AC0D2CA
SHA1:	4D826E459D5EB5B0F19F8ADF76539991304F432D
SHA-256:	64D5BDE609AC30AD46E3EA5C6E8A7A6FDA66325D264CE39B7F48BFEEC373B4F2
SHA-512:	212D3FE1C0E7349F3AA9C075D290130B0B318D793A1FD60AB4FD99AC878EB4D2A1EE2D87493C175865E2768288F1EB7A383B18C8D60C9F474D163EEC0FE4EB9B
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6907.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1ajqOl0

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifZvJIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfZvJApLHK7wR9n
MD5:	0A85D37E9610AB16F373A76DB8717C1E
SHA1:	7B11AC0393DC0C97FCCD49998E2F714F7D9B65C7
SHA-256:	52685888E2F37F1B02E828105459E828EBD30C469C6184DA531B64A6E1289E53
SHA-512:	DDD08A397F4A5DE9210C69CF8DF93A837BE206EEA53E6F6B0762278C666E3C6FE236F105D37C231FA9C8EE910892A3FD1FF88ACB0D86A0CECB0658E1126F5934
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5917.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1cfWJf5

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifevJIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf+ApLHK7wR9n
MD5:	B69650FD3386AE97A2C434BDDBE7F543
SHA1:	1E3699261C7783590EB37AF8F83D0910157F032A
SHA-256:	37640D6C07DCB5C907170B554D90BE25C39B9F4ECD0D0BD97CA9B44B5E75EC30
SHA-512:	6946CF005E82B7F5DD57A71BEC63CEA748FEE50CD32909AFCE2A8328E06A56802CCA103E8E985DDBDB4EA1B7B01A01B4E83B9877ACAB6D8EE8843DD5111BB338
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6340.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1gNlEXn

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifevJIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf+ApLHK7wR9n
MD5:	B69650FD3386AE97A2C434BDDBE7F543
SHA1:	1E3699261C7783590EB37AF8F83D0910157F032A
SHA-256:	37640D6C07DCB5C907170B554D90BE25C39B9F4ECD0D0BD97CA9B44B5E75EC30
SHA-512:	6946CF005E82B7F5DD57A71BEC63CEA748FEE50CD32909AFCE2A8328E06A56802CCA103E8E985DDBDB4EA1B7B01A01B4E83B9877ACAB6D8EE8843DD5111BB338
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6340.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1lRZ7eg

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifcyeIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfDeApLHK7wR9n
MD5:	B7F93CAC23C609DBD3689DA8CD75092F
SHA1:	934E18109D14DF99A8F9E0CCD5376AD573E93684
SHA-256:	B4C627EB8B3DB28E871373840F64C06118E92F7F6234FD4BA7C1032A333D5CE9
SHA-512:	1463C8ED11833477C890C9D99004DD98ADD9DB12AE2902C83698190E28C2127C88E569557C04E6BDB12CD19D4ED557864D55447B35F8A10CF713EC350094BBC3
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6766.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1r4UDyM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iflIppTMXSHK72X8/Sf9n:SbFuFyL8OAApflApLHK7wR9n
MD5:	26F49912B5FCD1A59A30512CAC840E99
SHA1:	5BF1CC34CE5F53B1080AF4C4E54964E26C153D68
SHA-256:	E0CF6180EA6A1DD9ADC043D1DF8FFE5773301D8D020CF28D5ECD6C8F4F04E241
SHA-512:	F393500E6983969C39C47E0275FD299208AC8FC681ED6E61D9FF5A5F63DB9E590738C8780178FF0DE76C73B403CC9F70F33CB8E12DFD3EB03D01FBC0F0B0F408
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6200.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1rIP80N

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifj+M1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApflApLHK7wR9n
MD5:	395B024306D70F7BBFE80AB45AE31B3A
SHA1:	ADCF4AF203B234D5CEC921D9DA7C6EE1A81F2FD3
SHA-256:	2CDC7BFCA9A84711B8D1E8E23889CB9EC2AAF40E91DA49323A122D2DF0B9D350
SHA-512:	CBA57C15FB0B8484450DF3BF9093D2D39EDF7ED5755A3A8A45B9932F382305F4EA0415B843501EF2775906D82E6A6A758C0EBEC612150E70C1710D11FBF85452
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6059.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1rlnH84

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifa3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfkApLHK7wR9n
MD5:	B1BF18FD6B27609721148ADF7459097D
SHA1:	0BB73316FD13A30F26DEEDDA8C9AA40E8C60A5E3
SHA-256:	AF71C582A95A2F2E838565F0C3B99EE443F2B326B675E910C1BBBAE2593F6A80
SHA-512:	91774DF9E6F96DE1CE726572278787F9089D9DD5B9BC9182949755952C3DE8F3673E308C4543E23974479D859A3C01C037AD7B641DE690A30F81F55B4159D146
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7037.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1uYDasm

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifZvJIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfZvJApLHK7wR9n
MD5:	0A85D37E9610AB16F373A76DB8717C1E
SHA1:	7B11AC0393DC0C97FCCD49998E2F714F7D9B65C7
SHA-256:	52685888E2F37F1B02E828105459E828EBD30C469C6184DA531B64A6E1289E53
SHA-512:	DDD08A397F4A5DE9210C69CF8DF93A837BE206EEA53E6F6B0762278C666E3C6FE236F105D37C231FA9C8EE910892A3FD1FF88ACB0D86A0CECB0658E1126F5934
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5917.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1vJgc3m

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iftIppTMXSHK72X8/Sf9n:SbFuFyL8OAApftApLHK7wR9n
MD5:	13602E7A65265C733DF3181A3B5B6030
SHA1:	E6BE29E52524E96D3528AA68ADE66C6FC08DE0A0
SHA-256:	A46F482C71CF63572EB4A0BA2AAF440912DCAD90EEDCDD6D3E61D8BF631C57A3
SHA-512:	937B2CF681AE9A0C1FDEC184A1BFE697680FBB197825FE1850C6787AD739A317C825CD2D2FBA7884979771E23550BC414C822AF6B356059F8E4102B6288515E5
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=5717.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1zshaA8

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if+vyAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApf+BApLHK7wR9n
MD5:	35C93BC2AC54FCC8AF5C53EB28B1413C
SHA1:	F3A319658F8D586D7FEE0072F7838FD6E59A1AB4
SHA-256:	73FEFD55A30D24F125F5BA2FEBB8D6047EEAAB3FDCD2D2795ACA69054AB8EFF8
SHA-512:	F7A27572C1167D593ADD5EA557D8F919459F398AB4283B4F5619A5D0E72DA179AFFB529CCF9D1F5E0CD4CB151D236760E84E757F0F1B5A9A32EB6CED4BF09077
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6483.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/journal/streams/.#9:65706OY0732

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.541797628668673
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6NfzSgbdJAg2js7LH:SbFuFyLVIg1BG+f+M6NfztbdJF2ji4s
MD5:	E56B2B86D944691A95C0E46C1AC5413C
SHA1:	A1894CDE8A2DDE0E4A14BFC1288105BB43496EF8
SHA-256:	99D365BB4A04FE9B8286A669CE8AAD824D2C79964CADF0F9B4E8A443FB085597
SHA-512:	8781CB7E39BA98A4A3C08D848CEB1F048402AA5ACC0B84415470452B6C8A475348DA6722682A7BA2179271A8DC7D4FA5F7285F268AE6EE449D636DE98EE49AAE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0ca5062478e8485791512c8794263984.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:65707dN6L71

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.425578153187828
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoW9DHDhvGGAFZjs16:SbFuFyLVIg1BG+f+Mo4boGA/josQu
MD5:	D722C9E1DD16B14EF08A0868BE4AFFF0
SHA1:	BFB0BF283443C95F588E55460AE5FDC17E1530E3
SHA-256:	248338EFF9DD10228DC2376DC0FA3C3943C6484178ECB1DF2A06EAA41F2ADD99
SHA-512:	B8B19EE1988396A0C96E7B9233229A28AE0E0607B4B3BE386814E2A547006358FDD75F46CD8E2BB281F7E3B80055749B34BF72CDB9EFA713B1E7CD97219A3540
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b15623bb8fbf40eda2859ccefc1db7a5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65708ORJ702

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.343633546383178
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9eSATFEiE09NGFFrQ:SbFuFyLVIg1BG+f+MUSATLE2kF8jtWL0
MD5:	F6188AE48791A9C0D1D5A32AA736436D
SHA1:	2C177FC60A211AE3D1F50D3175CE56C7EDA77860
SHA-256:	F782972E6D27900C798BFC977ACC9E669AC392F6FFDF387E3ED277208B09F3D2
SHA-512:	2899399CAF9E4D9702502A32C4F4C3D8DFC113928CECA2778535DB0CCBB8ABDF8828F4DC414EC7AC77D120B000BFD307D627AADC3027DDD9AC83DAA3B7884904
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7897e61964c343aab10240f73e208310.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:65709Znklk4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.367336896835725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5cXw44CURGZjskGp/:SbFuFyLVIg1BG+f+Mgl4CZjfGt
MD5:	76523DC936152624E7C4A26E0C88CDD4
SHA1:	9F4FBA86D3042910774DD98DF09DC92345FC69BE
SHA-256:	3BA53ADD2657061A0E6314ACE8C44DC94A9C8AF73D5A1B3983ABC83113310D7A
SHA-512:	76529F401C99CD2FDDB31F68489D19483F8ED149C1E6B95CB72EE42AEAB78F87272438CCD01920566E982650D964B3D4C7699EC091E18FF8CE7F811D7229AD05
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=30a62bbee1464d0a97a19dc1b3973bd6.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:65710WbOhC1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.427554558594715
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MXvJgWAXmG7sZjosQu:qgFq6g10+f+MXvJg3RsZQu
MD5:	0C0EC0B8C7370A49F08E7A92F521448B
SHA1:	4E9F9ACB2DEBE2D0E09651454807AB3455187459
SHA-256:	26A66E4FF75C86B3386E6D19008F4F28E2E1760493E693A73832AAA8077FE503
SHA-512:	8ADD12F761D1031A7723A9473003DA9407EC53E6BA114D0D33ED2A5EF7A6D3E34378DDD6A46AAECD96A24E2CC928DEB08BA8193B2511FB4FFDEA6A95E4D81CD7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c24acf626d13415aa75fe804eca2b5f8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65717jkcX72

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.3856840628965665
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9KSftcU6DUiESvs2t:SbFuFyLVIg1BG+f+MRcvDj70jfGt
MD5:	626F63C66119AC63685D4F2C60804CCA
SHA1:	57F57185390C3C62BFD3B9558381F1CDC6C19229
SHA-256:	BBC3F1F16AEA6710A3519FB53D8ECAA497C5DEDD8AA7D52060C4B74FF5EFB46A
SHA-512:	1225948EBE6A3DCE74143CD47C2AF588409BFC4B4EEDFC505AA9ED28B7C9018F93DA4D5BF47B02A161E5C344482FF119A2CB18F28C914C4FF5AA6BDD25AEE2EB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7ea18da9b7e542158999cf19ef1087a7.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:65718e72mF4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3677402962536025
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+B6OEaYDvshTjshQJ:SbFuFyLVIg1BG+f+M+BtB1ZjtWL0
MD5:	15B6711BBF2C75D9F6920EEACBBFE684
SHA1:	A971B85D4A2A2E0A680AB5D696A71264E6D1773E
SHA-256:	FCE895C6B2D96B02B0BE9FC727EC965ED88243338E66A4E69FC8F9528F724462
SHA-512:	2990A92CBC950FB7177403191AE51DB14D382E4538BDFCE5F50AD8CDC05EDA5E77FA3E8FEF7F4F4519E1EAFA1B17AE010F207BA2E4B02D619A9DBAA343AE0180
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48c022d0166f49edba8155555c1c1dc7.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:65719EueMr2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.396068139120207
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8Sb7TRGBPoglsjsjF:SbFuFyLVIg1BG+f+M8A7TRGt92jNE
MD5:	EABA69B83A2109825E8613FC68E3D5D5
SHA1:	475C15F963A328EDF23966519E12E0F0E3C86643
SHA-256:	D944FBC129093265EC34512F5EDD173ECF989D887FF0B3CD2FF7EC29323E214A
SHA-512:	2B93119C0546471E7A98BA8426685498E71FBD8293FCE72219FC8A36A87F083AB9E4C5310D9648078B1C83D30977266040399EE258852B8CCCFE9B02F75C5344
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=68ca6aa43a764cd69acfafa5930857f0.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:657207VIci2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.479837154201673
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mo59Tza1LyD5jZcHcljX+:qgFq6g10+f+Mo5ZgMmAu
MD5:	71377483A1B7258573ADA487D23CC815
SHA1:	D3262413531C244F8CFC150E1434E630522C5E0F
SHA-256:	2C2B4A96FEEF6ED7863EF1B410D475094E8980F324E70F141436ED7E03028594
SHA-512:	99F5F084DCD2A9F5C54D131F29367589F3457EAB462674B50F0129DB5F10846284FFD46C720959110CAA268C73FDE0DF2CF91439C9EAB73DE74FE9A8F2497C0A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b62ec42b1a2f4eaab067e81403087df5.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65729BMW0a4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.385275023681413
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr6fdGfdVR3gEHQmGD:SbFuFyLVIg1BG+f+MmfEfXtBJVjbVC
MD5:	EDDC8815981E05807676815E5DD13BD1
SHA1:	75D03E952405B293E64948A8AE67B0E479C0AA8A
SHA-256:	FA6A95EEC25B5D49D53C44E009D7D771F09908E7EC36D829F524E1D5B45D61C4
SHA-512:	036422B5ED00531FBA422B0A8265440244630BFF1BE8743C1AB5C24772ABEDE43EAEAD5653E6233522B2BC9867EF6891D39329ED1053950560F066B0F10337FF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a49ff8c460804334943513e5d5d37337.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:65730M9aX23

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.378311204945313
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy5tEWU/WEvFrqjs16:SbFuFyLVIg1BG+f+My5tEJv8joa
MD5:	87D6DB01913AEE99AE82AC220BC6210C
SHA1:	84D9E5F98BD587C2B307750D96B11B5B70FF9E1F
SHA-256:	90168091F97C8F0FB54BDF53BB4FA50942B5194AD2A0F70598B677153135719B
SHA-512:	865049C8926A176BF341C70286D840A37FF4C4468BD8E36832E86315DAAD64B55AD510E6FFD38E3D1DE75976B74CFCDFA6FF73D775DDE846DCA404F41105406E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8a6fe73f86c74cd7ba31bfbf93ab53c6.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:657316QUuE0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.467351960060328
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+ceb3ehX4shg2js2ALl:SbFuFyLVIg1BAf+M+cI3eB3TjNALyAZD
MD5:	9999472E5908B77031FB323CEE5ED053
SHA1:	F58D7AD516DF0F50210B791C8C64303C3ADFE76F
SHA-256:	C0F4A5958991698D0A9B9F5A9ADBDD7E57D8219DBE7C4DA362E5383809515B9A
SHA-512:	E2119D67A4ACD5B47609158FE531E9D2927C8A71E48595AEFB3D15B7CF5226E924FF42C987445FDCDD782CBC949F6549A1699AA8D93D30FEA7D9957C74986AA7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=49d485789e7a4c479df08b6fc28fb23d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65732uzwKy4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.397734002319712
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm737i33ZvFrqjswkCM:SbFuFyLVIg1BG+f+Myv8jLkGq
MD5:	6FCCF66B92297EA0D5A4268369230C44
SHA1:	C750850CD72106DA6D3A87E3C845D65DF56AC1B1
SHA-256:	51808D7F4A78FA0823B9B974D1A09394C3EC2C0EC8F52BFD5DF8147A59F92F48
SHA-512:	62ACC4B16AAF28FC4C45FD5D59AF0FBEF7800DBA759CB633A5596224C7785A2555E5BB49BC61E178EBABEBCF6FE99C0BF0BEE286916E014F21D9741322EF1045
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=17a04cd278e44a87ab659a6a6184f1af.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:65782Q5y2J3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.458192553623506
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+7J3X6zzGQy6vshuqjs:SbFuFyLVIg1BAf+M+56mQPRqjNdQIeXD
MD5:	79F7562256132E6549505894C8018FA2
SHA1:	8F75B594BE23ACABCE87F750DEC8754F0A7B1EC5
SHA-256:	6FE4D1A621E4777FA38F975A0AEBBF28BD399FCE3B109E197FCE58CB050D1452
SHA-512:	FE11F06912E9EFEE4E56C1BED15D81AADA96ABC86BE9BD4AB4038F603ADA26C5B7981F78F6271B3D2BF242AAF0D0DF708AD2A677173C0AB671DE70A1EA28607E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ea9a659bcc44866897d16b6c5bdad05.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66138rQjeGO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.408902217954219
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4nh2uMqA3YTjs1Ha7:SbFuFyLVIg1BG+f+M4nhX5LjosQu
MD5:	B09B608D210EB2DFDA2DDFF9DCD46AB8
SHA1:	187D8F9503C3547B0A47B7CB82F6FB4CF2C1937B
SHA-256:	E93A07C9F3144BB2646D12DE43A87008FB895354B5D4EE65E7AC3FCA5E6F72B3
SHA-512:	51A01F84735B4A925127049AA50661F99E69DBE04F0161CCBF604D8F0804E354E90C6FF203E108EBB374AA14ECBB3D547CCB97DC000BAF1D7856C32FC12EAEEF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=26c37ae01923450a913d9e38c43e9184.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66144XUmoHR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.49608582043166
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MFn9FnSRqjZcHcljX+:qgFq6g10+f+M59F5mAu
MD5:	28C03579D51100927CE73506FCC7B6AB
SHA1:	F5078C054897D48C4BBF0C01C4450191BE826111
SHA-256:	00922217D96E9D3FF7679A20907B2D19D8579027B9F2120B9DCA86E6153556FD
SHA-512:	3E6ED5F4713090B9B854197E16A03F4C54074F7606E5CD53BB1199031177740E53A9BD538D25900EDB540EC5203C7954E504E7D2B51916455DD71EF23CD4A8FC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=12d2819fb8c7407180a261d4d739ef05.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66145tX3zGO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.411631118598925
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz2WdH7dsyD2bxsjsf:SbFuFyLVIg1BG+f+MCWJdsyD8qjfGt
MD5:	D97E9AEC331CB4AF66D71438DEF43249
SHA1:	C58326AEA7082EBB9E9D26D47B95C37ABA803B4F
SHA-256:	F1C7DD0C33AFBDE5578866472FDD385F80214839BE2E33978F026214A4AA2C4C
SHA-512:	62314357A1337A339BBEAE2D50ADC813746CF6A1B9D5289B9F5174659B4EB171CA26A8DB08CC35A4C71316B61FF1C9AC699DCA2C19C81B6FE6D5331E693F1982
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9f2cc932aab048fe854d35b708ef459a.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:66146WtyJSQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.360240777454575
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv/j1QbvFD2t8YTjsO:SbFuFyLVIg1BG+f+MnRQFCttTjtWL0
MD5:	BF760331B04F9D30EA783CD95DCA2CC4
SHA1:	19FC475974230B232FF2B919600AFC1EBA070CC2
SHA-256:	D301A3E38D61D1B7BC25FE3F7E01B2085984DA624A5A5C8A67E8A7BBB4EE754B
SHA-512:	56642CB7746C54BCC2E1EB0EA4BAB56EF629F963654ED4C49C7644ED6AB14DF72BA79DC3812664A5A7886A3F08A220CADFD17BA60E0ECEFD20322A1FA42D174B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e8421f1aad9142a9b7f62ac55fde99b9.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:661475lJPPQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.389794344984904
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+v2d4gK9m5cvshTja:SbFuFyLVIg1BG+f+M+v2WXVvshTjNE
MD5:	4C44B3E1CD4072F181858D40A914B515
SHA1:	700004103D34B6DE3A716730A9C760C509F688B9
SHA-256:	C4464F404418BCF0AA35193CD0CE0A55A0A23CA9707FCD36AA59DAA4260E3F0C
SHA-512:	2CAD4890EC31725E9460BFD80A8DACDC38D3C767D4D465FAC16362FFBCDAC89A7C0430CD03565827474B87278173B9919A913F35DDC5A543128C2CEA36446F11
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4a9be9de8b6344639a6cecd5240e0c09.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:66148jHpLiR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.427665052636987
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4HvBD1hd9YI2jshKe:SbFuFyLVIg1BG+f+M4H9nH2jbVC
MD5:	A31BC523CD99F5BCF4680C6D7EB7B59A
SHA1:	4AE03B1C14D7740032D4419688CB747D4D384250
SHA-256:	B090BE22BEF9C85A913E82F17A19B931A0A17533875ED8FB0987EE228B6F4C17
SHA-512:	08F1272CDDCBE029F6BA361C5238047668B172635DE0D383D3F7A9489DA3F1880359AA530AF1724CBD201C0AAE0816C732D170D73370B4F81BE0EBE9D2177680
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2b79df6703754e5ea8c92b1ad6630db7.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:66149M2UJBP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.426659876993736
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm77KFRwPQNWfQXsjs2Ax:SbFuFyLVIg1BAf+MowoEzjNALyAZD
MD5:	D0784B306B8A6ACB65AD982AF870F9FB
SHA1:	64DA8698AE881E54943F1490AB5661DCB664D2AE
SHA-256:	9856489D74CF9C2B777767873721D1ECB84344148D4F24ED817D0A40CD082307
SHA-512:	EDAEC08C549374DC46C01D4F0CBA4FA32E30D584F2BDB6E70EB9F479738C03D9C6B0F72484541FD2306371AD4E4FA90544B13C061D3103C885FDF9F890A1D3CA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=104c8156e29443e087531d3990673401.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66150dofBPQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.392495615426882
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvDKzPicT3+sjs1Han:SbFuFyLVIg1BG+f+MJQ3Tjoa
MD5:	6C7D5F947C9F51E0D2037F0F5208D081
SHA1:	EA41DE58BE167ED302C91729AFD974701C9B6BD7
SHA-256:	5F335D0A068C96EAC36BD22BB0BE831EBB6C3E2901DDAAC2D64A8A9E485A8592
SHA-512:	539B9C4A641C2E27DEE28E3100CA715FB02CA92CF7967655EEBCF9C6B4D03C4566BC9EE66962FB30F78846AC5819C4FD45B02907863B6875E73D3440C6CD928F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e655951c38d14c3e9d03f56bf71895cc.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:66158zn5xHP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452764842591626
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6Ih1cRDxhKoTjNdQIeXD:qgFq6g1af+Mtch52D
MD5:	25B24F9D4FC4D6D9143C23EDD42D5057
SHA1:	FC2855BC144A7F1C9452EB181D7CFA47ECA92434
SHA-256:	1FBD74A0A39F650FCF61E13C47FE27E7E693C6E7B9C8C5C045BCE8A79DBE03A3
SHA-512:	8E2FD5C20770AABD7443500777CEB89D6B265A2A3003F93112D4357E047217A1771C71C2EEC766C7BD0D083B98BE035B63C510DD5D0A98B718725D0D7CEB26E3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=058e01a0c4f94c1f8bd27ae5f0082335.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:68673aimwwA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.450526331403005
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MYhQpLAhTjZcHcljX+:qgFq6g10+f+M6+SmAu
MD5:	ABC53AF21B5B1AFDE70527EC125BB071
SHA1:	578522EEF2E1FC316CF994A2546AADDBA4604E35
SHA-256:	A6DAFDB17CC441B8D7C074D85ECE34EB7D6A705FA9959EBCCD9C9003B3A7112C
SHA-512:	F8DE57BCB1044C09409578DC47FAADD50DE7A2C2B3D4855389B37676FAF2CFFDD24960251DE3B8ECB8B4E219A01393E8E4B7F0F24F1AF55EA3D9EA1757739FB2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=785bd5811bee488d8ad5209ae00124bf.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:686759DjCpz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.371755655307663
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5/THURmWzRmixsjsO:SbFuFyLVIg1BG+f+MNT0nzRRqjtWL0
MD5:	6136E8AC3470C62295029C77E7FC9B2F
SHA1:	69EBC1D27AAFB0068DDAD869B0E0FE7381832AF9
SHA-256:	0894D1610A5E7360637B8955DDFD60FF050FABFCA2C29D9E6714CEB449EC6705
SHA-512:	5CE3FA3E91F70899124EF4E21ADC179FB22FEDB3A725378EEB390CC66B774A89616A873232B1593B0889861215B16D479E2E057DEFD5E10460D2EB979B9516A5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=33d45ea196b1499484c3f502986dd3fc.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:68676c3Ox6y

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.4084695968627
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpgyE9Hw6jskGp/:SbFuFyLVIg1BG+f+MaBjfGt
MD5:	51363563C519E969FA9DF62D5E8301D8
SHA1:	44A6D6E66866EE4C982AA88EAA018EF111EAD5C2
SHA-256:	145EC0BD65A0F63408F989ACB6921337B36D46B91597F8F2D366E9DB4F3AC982
SHA-512:	98F4241737048CF52C64D44FA2A8693A44CB0FD505EB101F6FD035AC8988403CB875FB5A0524467A92397EB8C77D8B46943B3DE0ACE42E4CBE87647A398CB75B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cf77a41948894a62ac512bacadd04fa7.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:68677NyMcYB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437607428146763
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+9HHG73FWvi5xsjsc:SbFuFyLVIg1BG+f+M+xSsq5qjosQu
MD5:	000BBDF8707F8F8A64E6C6075F1CC56E
SHA1:	2365BE0A657B94EE8274EAE8265B97CAB82AB2E7
SHA-256:	B9F071A91BFB3AE244A3A1C0046B4C73F791CE53940CD60A7E910B047C8CD117
SHA-512:	D7F16AA6D798B8795BFDDC503FC0912CFF545EF59D0D7CCFFD8821B7B26FB4260BB3C751BFB4BBED0B9DC7B05215EB523B0A0CCA4F3A0544BE036EE490BEEF75
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=43a77b5d69cc49ac9cf2f7a7983473d1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:68684EvagTA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.447962210340552
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzCJRRRhXzcEbdSshi:SbFuFyLVIg1BG+f+MmosZjNE
MD5:	4DF830C59BBB9BEE858AE7CD5DF61DD4
SHA1:	D11098896A167F639442A04FC19F685980EB8BCB
SHA-256:	9784CED7678EEE4F4B996F1255A2CFC8783A5E8BFC540D207E44E8B36E7E05E0
SHA-512:	21CBC53CF544197976813BA41B38E9AB826CF173DD38BF0FAC02D600AC8C1DFFAF75D8E2DDBD93AE5D374E97394CBAC9C388B877836F0ABCDA0C65ACDD4E3741
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=95217b8d8b6f4444b285e9ab86bb886a.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:68685dZFFwA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.377784260006829
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/sFncGSV2Rr/sh+s4:SbFuFyLVIg1BG+f+MEKFur/shTjbVC
MD5:	F2C0DF1DE0AA361A83700F077F47C080
SHA1:	2CD1E731E09519B4DC0BB3EA1CD33746BA741CC3
SHA-256:	9EE532D517E23D1E7E468F0793CAC765204D30509BDDD24EEA759D40BBF22679
SHA-512:	01D429B396163AE50332CF7C6D646F984438E11C7116E159CC001C9CA2D7AE282D71002A33309EDE235B0239F52EF9F0E8F7A1E7EA9C7BE41D52DD9DA79BA188
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5caa4b76cbdd4056bb53da70453312a2.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:68686JtmyaA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.442588343507767
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7J3AJmQ4Bf/MXR2+sj+:SbFuFyLVIg1BAf+MFY4B3WETjNALyAZD
MD5:	F69417302948BBCFC9B2DFB4EEBEA088
SHA1:	C6A8889D6ABFB57F2587A3B0BE4A95DEA7476E4A
SHA-256:	066001DF9F638964AB9E4C41EE3F0ABFF6D04C96ADD23CA75AA716A3D84DBFD5
SHA-512:	AA8C8E2878F0D8A69003AA3CB7530FEDA9F14AD8D9C2DBE69EC036B9B3C08D6281D3740E4216EF713FAF7467C10C5629E0E54258B4F110468545FEFC2F958894
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1f0b2e59705e4bbdba30026fc35f248b.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:68687hlTWMB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3230296391435505
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6vhQAzCRPVdWUSXmW:SbFuFyLVIg1BG+f+M6/GROUkJosZjoa
MD5:	8056A37491E894F2ACCCF66BBFDE676D
SHA1:	8BCD88CBE8D38EC9A266980C3E3F53CD2A6A1F2B
SHA-256:	601917001D2BDC9F46AB3EC20196D2DB7BE04FA9B7B94D1C077AAE19A62EBD04
SHA-512:	B0D5FA11F3FB22FF3E55AABAE2275DEC5EC76D6D0E4847704C9CB6BCD2D3C6241CEB8D74F42EFCF48984EFC6FBE81F1491019F6B2939E084FE57D52B39475D8A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00fdea5ee38e45c3a08315b24e13d723.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:68731QwhqTy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.446787947194279
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4QAXcH6cHUnBdXsjs2y:SbFuFyLVIg1BAf+M4Qq26FBujNdQIeXD
MD5:	F16F5663E814C98893985893ADA450B1
SHA1:	3FD794F1E7C336AA0B4AA225BC04B019C5507FED
SHA-256:	6916CCFB93A28377DE5CCB819526D3B069729E889FC87CDA63351DB1C08F9ECE
SHA-512:	11E7D983C237F004AF9529CCEFD38D944D455D111A8E672727B0CA55B9116FF941E278E193FCA31E848608A36CFCD9699B8757156E70EAE3A931D45140778DD2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=269ec2cec65b499dbd0cc1040e5d2181.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69077Izgy3k

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.43483490179118
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmubTwcHc1DseJxsjsc:SbFuFyLVIg1BG+f+MubTw2WDsekjosQu
MD5:	E5A6B9909FA2CC3103DE93AAD3C37149
SHA1:	F90CD6D4BC412922C363C6361DAB221DCC73BD33
SHA-256:	95F46ED38C3FD9B388A158500112C8F668CF51035DD0FBD3BF11AFD6F923A855
SHA-512:	7283DB23E8E3F7D32B631071E6FF33344A57EC872238A7AAEFB636BF0242CC91CECCAEBF21542AB570C6511FF8D8E4829AC848D481E9ED3BBA4A24648EC4E7B2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d10ef30652fd4b879b9e58d5e1025c72.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69084ohhiwl

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.425850577185373
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4lXRcjIULZjZcHcljX+:qgFq6g10+f+M4DfUnmAu
MD5:	6F90C23B55912FC667B3E64247BC4237
SHA1:	9243A7DCE0B320133344B52CE11A9C35A8835EED
SHA-256:	FBE1A362E212673995C00BEBB34A68E258A9527863CBD589513E4B538C292D63
SHA-512:	E5B711830E465BEBE2598DA632E11B0740CD0A287E9298C062B8ED62AEDB30D5D6D6B57BBC52ADA12EE69E236C5D3D04AE5753770FCB2561AA79AA6B505FA8E3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=21e4371ec2e249d0a070dbadf9a61111.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69085MFAGCi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.398305265350831
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7CduJy+cRbDWglsjW:SbFuFyLVIg1BG+f+MudKaDWTjfGt
MD5:	68753CA57D0CE2D9E17FC064ADDF2482
SHA1:	D1E2A3FB6EB5AE8539A969C9E58731A8D1844154
SHA-256:	A51D9A439D6F1F17A421B82279D23E34F8A358129FC0F12A9D542D8353AD40AB
SHA-512:	5427D87ADF3F46750A60AC004D283CEEAD1A638701B9AA62DE9D2216405522C73A03042FED7FE0F6C0B450DE18049CABC9D906EE38065AC6849E073E635A3517
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11cf31aab7944174894263a307e15373.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:690860S8shj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.335602828275058
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpoEmtUR2WDGMqjshQ:SbFuFyLVIg1BG+f+M6nULDWjtWL0
MD5:	4EC907793B3688C3055DADA868169D95
SHA1:	61CD877E26A1BB53009D3115D874DFCD8E3FB7A8
SHA-256:	74C8291BE1AE157124ECE61005F295733B7A500392ED2AD9B970265514A96D2A
SHA-512:	C47B1C70D303690D45CD69E3B46CD79AF5AFD21FEC251A7F8F0D5F0FCB924B8682331A360526B54F5B9800426BB56BF87F9045E0DE2401C846B0D429F43773A5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cadfec312f364e0b834a683fc9f3c64d.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:69087zvoh0i

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.471902388936336
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9sUERBsjsjOdlJO:SbFuFyLVIg1BG+f+MOUERajNE
MD5:	D218482A87EEB868E4FB2861BDA2811A
SHA1:	DDCC0A261689BD16D4C5659C64EFB21D349D13D8
SHA-256:	F96299FFB596363CA655A1592FFCD090662986CE25EB6CB6251F11C3D95D3025
SHA-512:	D506B53E8A9AB60610DCF194DCA4B3944B4743FF7F4BC172E4B433B2261D395FD3BA02E3BB0F8317E47BBCB9976E23D044F8247676C64DD444A1FCC8B8CE98F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7f940418d9894c74bf51554e857286db.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:69088vd5gQj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.37103266007876
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+35RMMX+AYeAgrqj0:SbFuFyLVIg1BG+f+M+fMWgeRqjbVC
MD5:	BA39CD210896925C05A9F4F3E9659E58
SHA1:	A5C08CD66374AA601885B87DB494744C6CAF893C
SHA-256:	BA5CEBA963514B170E47311CA8DECCBAA8473327BB6234698576033726337CF0
SHA-512:	881A80ABA08A9D2A6F7F2A5CC7976FA7155B65A0AB13538DF5914F37A48BB55E04E20B09E18E575B68D713EEFAF359963373D9B7F61363EF1F457CF15646262A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4b3f37f3f66446e4a3c26670df3f6fa9.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:69089W9QXVj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.429965220085933
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmr1zErDMsU6BQlsjs2Ax:SbFuFyLVIg1BAf+MK4sU6BQ2jNALyAZD
MD5:	60BE8D63F3FC2321EB325ACCF9CCC2BA
SHA1:	29A5B75E3D646A12F67BFB9D506FFE98D43B140E
SHA-256:	157F21C590CE1CEB500EAFDE1E5BF86978DCA3C177DE4AE117EA8E3FEA138DC9
SHA-512:	57D5412307693EBD8F958FF68735188D965FBD6BD076E37ADD971F6827F56C2F702382CF3A1A8A1675BA53298081CE90B64C15CCEED0ED54EBFC3A0B8A6E48E0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=afced9b1a983442fbff537c1950933dc.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69090XO6xXi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.391265601853814
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo6EHWtUdd6pQArTH9:SbFuFyLVIg1BG+f+Mo6YCaArTHjoa
MD5:	898D4F067B07B0E41D59A1EDA816B4D3
SHA1:	19FA2440D6EA8546958483A2DE7B3EB8A1ED808A
SHA-256:	5E17567F4AC7D18E7E0E670BD2808D6D2237929B025B1D262E8987962CA8D75D
SHA-512:	B9DA4CBF4CAD6B99853642FF8E86D9FFADC5992D32FED3256AD6D845536755F62A5BCF2BBED9751B45E2FCEAB9BC099025E61F72BDAC19180BE5C691F412D765
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b05ab30ff1884916ad32e726783568e4.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:691277Hq5ol

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.463620264655386
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6B6RxDFMRYvFlsjs2BI:SbFuFyLVIg1BAf+M6kVORC8jNdQIeXD
MD5:	B168DF198DE6F008E919853DD68067CA
SHA1:	5E9A829F667F032AFD4D00D55D3084CA5F9DB598
SHA-256:	2D587CCBD322163E218517C68A36E7EF1C6FADBB943FF1DB1E6EEA1A9A901BF6
SHA-512:	5A62DD8D140F8727A5F3815B9162C99AF4E80FD028C86987B675969B3260D57BF22670175F7790B4D9B6278EA28EE29E5DE5114AD21D804C22BC7DF7B6C254B1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=029e338a1d1f4f46b655c39319f5453a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71521nnwfzY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.485305806195747
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuWKd0hTjZcHcljX+:qgFq6g10+f+MdRmAu
MD5:	E3B12232733700A55EA9AE8926B88031
SHA1:	E76215C0455DF05FFBB7706A12EB9ACB1B4796D6
SHA-256:	10041ED631B99E28093EDD3344C56E27E7AC507759934CE583D508F186DB367A
SHA-512:	D536933BF816C68DA7FEE05BC83FA7D6A23A41CC9C8BF3E4946D479FFEDAE83CDE36BDA504A5C2C792B273817198441F170FE9726D994D2FAC7BDD477F3D3975
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ddec5d44f182467f86482e1fe9670565.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:71522rrDZkZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.394418770316052
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpGVojVAw0MxsjskGt:SbFuFyLVIg1BG+f+MkKB5qjfGt
MD5:	13740440A8D7CF30794B4C81758AE29D
SHA1:	337EEE580EB2873E12538841A8ED801B854D2AC1
SHA-256:	302E35FF031B0CA5D4CE1E09C6B9B5B0A940723B157CB3B2897A0784BED8D539
SHA-512:	F4327081698C9C9C0806D62E4847100E23F8D61739E09DEB6393EE9C59BFB35D801FE74996EBF9665A417A911D836A6B656675A24E8DFA7E5990FD7F53BDD054
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cff2f43bbdf04581a8673401ff10ef2a.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:71523Yt9BWX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.382702578127573
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsDVE1I13cWBhRdF7O:SbFuFyLVIg1BG+f+MsDuyDRd5YTjtWL0
MD5:	BB58D61C9B95FC1AD39E6463AB66B92C
SHA1:	CB990C527D323EBAF37A1E0358A1AC082EF4C55D
SHA-256:	5A9208F7003A3D909A6271323B0A0FF96895F6315374365C62560F953D997EF2
SHA-512:	D38EC24042A34E8AF45036CFA5941770B8B6AE61B67DAA8778F49810CE94FD80D6E0F1F913F165CCA0EC4A7F440111ED60A37811B02CF8A0D9E820D341AD342C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ff0a5bc6a86644939324318b48c71014.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:71524isDYJX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.424579089924446
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8xgWx3itVdwSS+sjx:SbFuFyLVIg1BG+f+M8hwViSqjosQu
MD5:	D451C5D4BEF49F2242EDFCB0AD54CFF9
SHA1:	F8E5192F781707680C17B217663859AF2DBE233C
SHA-256:	91F29982C04969EFC0464C461DAE2FB4D28C834C1CB3B89EA18AEC05E17E4BA8
SHA-512:	38C60BF5BB840964821E7A8F25899AE9C379EB4A298194C9AC5798184F454F234DBC997BD62CDE79467529E9EC35191F6C188F8A5C1DCF4A06EE2B3CC672C8CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=69e24338377c444a9918306cc70b72e1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71531kpHGh1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.425412370510567
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/Zj6SqdgVvFlsjsjF:SbFuFyLVIg1BG+f+Mx6Vd68jNE
MD5:	1EAA9BF594AE99528327796499B873AC
SHA1:	E3B82CC9C2F88453E532A2D69EF46F0635E61989
SHA-256:	91F217F7EA3B0F559E4262CC5A6C305B00DCFE500617EA18D9316A2A20CA7138
SHA-512:	7C90C7AC49ECC7903001A29167FF46CAE063565D798261FB678A4F3E25C3B1845CCC0779AAFBFED6AE80F080BF8A6AC00999662F8B2E1E8148E24234710319DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=56cfa0dacbd249f292da8f7a208d9370.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:715320bxebZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.381875677281315
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7xVAdIxRydylADDDb:SbFuFyLVIg1BG+f+M3JRXlcDDf2jbVC
MD5:	A663E8C421A84DF9F2A90FEDB47E18DF
SHA1:	26A35700655A01F41060CE051C67E1CA4C8184C9
SHA-256:	FE3510E723719FAE81C666D4F5A3A40FBF0C225DC699F1BE502BBC7109D79C97
SHA-512:	5B8370EFD0F6380057F6B26D1173C134F0B5C418A2F413C6075F1A5982AD6050A803B3302F1D230BEA01DB9D92B34B44B84A865A0A667D875351607B396E95B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1420e814ad8147d8bd32a455a0e53ff8.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:71533ThjqHZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.388597544022914
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuGVDR5c18BRBsjs2ALl:SbFuFyLVIg1BAf+MuGpby8ajNALyAZD
MD5:	B2860031DDD93003797A567B0F65DA87
SHA1:	0FE918F65296C27CD0F9B87F33FAE651B856466F
SHA-256:	04B8668867C0BC32FFA6F925471393EA23DCAD2203767B332178E2544615AC3D
SHA-512:	EE589AA00CD2558A62BA0CC6C5DC22A08BDBDF4979F8577CE86F8DFC1A169D744E1D8CECD2B460BDC4CE2DC8333F482C2FF3AC1F650B59C6B19D8BD72D4CAA89
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d8216a923d7f4eed89b0a04aa1a044e1.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71534BY6Zi1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.37098804100217
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzgEQ6HAgv2js1Han:SbFuFyLVIg1BG+f+MVSJjoa
MD5:	7837624375E6CE67CDC6B929E17E38D5
SHA1:	5810E0C9580EA1955B34CB542F701893E5B98D7F
SHA-256:	E42C347335354DA2BD017236AD46593FB58A57C203FDB94C4B9EE68851E7291D
SHA-512:	FC42B52D49FE9703ABE49F38F1D8EADB0837AAFCC581DE85C7C00C2FF5726D4BFA2413BCA4683211557F1653F67DFC0F450CD959EEB13705794F8764CDE2ED90
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=96542bbb0c05499db49be885a1279e3d.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:71671OorSyX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.422601202892099
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MoEBkHRgyVh22jNdQIeXD:qgFq6g1af+MoJR2D
MD5:	0AD8F0FFACB9D3F32068A287891F6CBE
SHA1:	9A610D87557B8279C7A164EBBC225F96A29211B5
SHA-256:	C62C5A06A750DA89C9066F6A56730A060D413BB43EC9CABDB6BC4B5F3F32C2AC
SHA-512:	765612117941DE80760578250DD0A8131FD7444AC18DACF875E759DE69D3A1B84F013BBB67C675F2B1ED20118F2E7F8F3FF84D26008EFC61BA9CF685AFC287B8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8cda4808dec4b468c5230a0c050dd09.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73045vyNphC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.446989764325654
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm915n16fglsjs1Had9:SbFuFyLVIg1BG+f+Mf6fTjosQu
MD5:	C7FDF629617B2265ED4182717BC0E1C4
SHA1:	CF7D9792F24DBAD1A3DD72A016E2ECA63E16E557
SHA-256:	8A11D3A5D64B8FAB1633985EAB357C60C26896F4E0264EB5F12560F9A9A58F4A
SHA-512:	B713B1E7923A6481EC801F9A25AFF41852231B6E67C8B2DEDB0CE12E31751D9F2BC25D651DC5ED4D2D306ED3F3ABD417D10A80640FF5DFB915B090B9F7074E78
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7ea2f91435034cbf8c1b775e91b569a1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73052S09K6F

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.477345124720688
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+BUAKi345GI0jZcHcljX+:qgFq6g10+f+M0ZIJimAu
MD5:	96467DE640C5C6F8E8DFE4F0E2747233
SHA1:	EF0ABE7F3F4491A777C6F807947997C8C03C4A93
SHA-256:	78715FF1C5509A8F11A0BBDE15C3909F17E775CE07432208D779E4C93FBC777F
SHA-512:	C6B14A2476A6327409E9A9056086BD1A6AC4AD089600BE49242F82062B244DDBF567C1EBBFB664A45E049AD8B40888FAB46856CB1FA0D128DF89BD59463D588D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4d6bf36e4f5f47b7a1a8bef55f1ac063.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:73053YHwqPE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.315388631148568
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuCRHyXW99jshQJWL0:SbFuFyLVIg1BG+f+MuC8Xk9jtWL0
MD5:	F8BD248CC0706A5EA9687DB93261F630
SHA1:	8E131AC3DBD716C75AE9C4C97B82CFBD9BC11F7F
SHA-256:	04593C092F21541F6AD5763D08DE268601C6C02911D7193B6FCE3309A6AC96C7
SHA-512:	B66A85FCCF7345E8FB010E5C6942DBE50C8AC439FDA6855F3D3D1DDB9DF0C338ACAE88AB6115C6B7BAD2E445CDEDB082E26E8EDD9DABCE724C47FF457EEC861B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d251af0052784d0fbbafe012bf519029.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:73054K8nczE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.403779213845576
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4OEvX3QS+GaSZjske:SbFuFyLVIg1BG+f+M4Od/qjfGt
MD5:	51C21C414B5972EBEFA2309006AA5BC4
SHA1:	864E2586B06224B805477B9FCEB5F7D0D9F0EE98
SHA-256:	4941287FA004246D4AD4E075EA7BDD4B3CC04C987B4EC4AF332B6586AA4415C3
SHA-512:	79CE762A067BCB5162928A86B24D3D1B1FD00F2807D0011C130B24E701D31E928D278E0FE426CC1E900E1A03B9049014A141061BB5F0889D9FE9C14794A051D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=26ffd03a156347fc9cc457ddabcc41cd.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:73055ROJ1zD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.452921530278421
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzRlEED2cq47SbS0ZO:SbFuFyLVIg1BG+f+MzDOcGS0jNE
MD5:	394C53C0211EA7108B271E5B48481BA4
SHA1:	EBC2E977075235DB5E6FC9FBCC7038B146A63972
SHA-256:	7D22DAC818566E6C32B3936FC6420AB7315A91E2AD60214402E288A05879FCCF
SHA-512:	52717EE2B08CF15DE52360127D45DCD7B2D269A79F9D5F5FBA15588D1C0F1411E27EB949CF8CF7DEAA0D49A4850C7D29FFA430CC7244C2818438E0F33A74A04F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=92dab599a8cf46479ec3fa6dba773985.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:73056ElttHE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.375518926120437
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm76/h8AZcy0ZjshKJg:SbFuFyLVIg1BG+f+M68AZcnjbVC
MD5:	BF98D4FF421457791C78C6D88978E131
SHA1:	3D806A754C97E59A4C853B95E63A55AEEF2193DD
SHA-256:	78425C7ED027CA4CDA9A5245D9479A06C783A9DB30595A4BF8350CB512C2406D
SHA-512:	BA5A88F50FB61AF416411A2B60E99A911A60DDC1389DF49B486FDE5861F4E773FCB8B4136854B660C04296726D2AE7D1A567CC1237DE653E2ECA23C18BB309C0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=112cb19d3fbb48cfaa0ea9d8ca73c30d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:73168A7wgrC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.401882407861022
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmp0Urmzjs2ALAXaGKjwU:SbFuFyLVIg1BAf+MlrmzjNALyAZD
MD5:	53A788C34788699B5F11D6B0394D0FFB
SHA1:	702116240DD1DD9AC1CD22553ED185574C3FA3B5
SHA-256:	C894CDD34EE745E272B6C0B632B8FC168EC455937F5CAEDEA469DF3775B8D424
SHA-512:	EF4338BBD39DDB89F770711BAE77AECA62B207F73269051CAB5D7476B67F7BE13B867E7AEE601FBC7EAEDD9338913FFB229FDE7607CCB2F11A675AE635E9F8DF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cdcdb92fbf434c099ef7d7f8badee7c4.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73210jQblkG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.35047456511018
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+VhRmVA4XafzGLPRm:SbFuFyLVIg1BG+f+M+VhRmVA4XZojoa
MD5:	D08195DCD12C932500C0BB13A209126C
SHA1:	8845AC750526CA109DE1CB1F86AF8F809014FE13
SHA-256:	EEC9FE8A91563D78B8B26FFD401538C266B3E29C6E2FC82504EDA464395F110C
SHA-512:	4E65E5E01D9E5D0AD48370215478698430969E8BEF4C560B5BC153EC79EEC5A7F056CF7E249D76FA5C3B247C11F37DC8A8A04F63C5570B3026F5F9CC9025B852
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4b24f5ab4704484ea426366e3ca2dbcb.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:73319CyYBkC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.463620264655386
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmv3zJC/8Ee22js2BbQIa:SbFuFyLVIg1BAf+MPNfJjNdQIeXD
MD5:	7CBAC136B63531B44F7128BD9A1958DC
SHA1:	689115FBF723A6C39D402B7E6AD043BD9288EFBE
SHA-256:	71917521BB5CB330E258C398C06E800619C69F0DF7E2107E1D08D5E242A09409
SHA-512:	378DEE3FA84B68283BA3729BA1D23804CB3C927330F12F6CA4F9AE25E8589CD7C6467350ABBABDB55A2FBB2664F89909D4999B7526C479539384C5A652D59B6C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e4a134fe8f0c40249a3f8f225769d299.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74863DBVIgl

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.493752581422673
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MBhiQ1YC0jZcHcljX+:qgFq6g10+f+MjiGYtmAu
MD5:	263EA3AC3CA6EEB22B3FCB70EA7CC013
SHA1:	A904BE4C96BF477EE4498B3CC78F5B2D8094049F
SHA-256:	E4ECB2E22466943E3998ADD1040782752712471EFA6DD355ADF6E78B04A5135C
SHA-512:	DFAC6F66E1696504FDCE24D604DDE27E4EB1FEE85C88729622C7121B5BECACA539EA41BAB37722614AC920C61C69B7AC324496B4C07359796625FF390E5D90EC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ab6e9ea4a10b4b1c92c175d564768357.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74864ER5Kvi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.318256419079098
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9ZnRdDVc1occOjshQ:SbFuFyLVIg1BG+f+MTnRdD2uAjtWL0
MD5:	41DD366D60566E9025510DF186371966
SHA1:	82739EDAA20F1BA70A898BDA193A9E4308F139D9
SHA-256:	870EA60D083B53E2BC5CF92C4DFA4569D72F66A70FB2DF14661D24187E3C2EC9
SHA-512:	711D206EEC582B7EF7933637CE46BC570E6B83703A8E2637937D5986461962BF70AFBF040AB8F4CF4BBC2FEDABDFC466CA39A17624C5AADE49390235C3CD98BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7dfa94ff71d448f0951fad9597f3f229.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74868D8cRxl

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.326817352999352
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9PQM4REXAWbkNlsjW:SbFuFyLVIg1BG+f+MZo+9jfGt
MD5:	0B0E59DA7433FDB792C7B8E64A6B4F3E
SHA1:	E441F8704A020A657F13E04953498694FB3BA4B5
SHA-256:	AD1FAAFEBEDE0475FF2DA5686590ED2B87B820905ED2776C909F92E6A690C49E
SHA-512:	1DDCA10F0961DB9E039D3C5503C8CC647E03C76061053689BFE5DC97462FA893A76ACE628937CCE5502EB128EA67BF39197622749969798C4D340A85D2563087
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=76d906ad879e4989a94a2e3e33906090.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:74874rvJ1Kk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402202595017443
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo/VnWXHBUcoNlsjsc:SbFuFyLVIg1BG+f+MotnQwN2josQu
MD5:	2DBBAB7F76A89A23BAC4517F13C890DD
SHA1:	C14313BCCE2EB16C51C72E8137DABA78A000B824
SHA-256:	72F6C67437387CE2855CB7226F06EE5AF564234C11944A74105D5EF494F1DD44
SHA-512:	C35D169FC8ECBE63DD6790CC67305D22A0D6074488C87AB55ACC87FBC128F023BCDD9009B7826C75DB642E3880478EFEB4A95694564B7B4B5CDD1F0C03567783
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b005e527d32d4d5089385b3c199a0e6b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:748811DUY2h

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.4231618316693
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm50XWAToqtNrxsjsjF:SbFuFyLVIg1BG+f+MWXWAcqtN2jNE
MD5:	52E44A0600A3DDC39346DA9B1FEF6031
SHA1:	BDCDDCDBD491627C440B61A519D0FDB44AFBE5B0
SHA-256:	8050E4444FF94DB53A4A9B7B6CFB12BAE0AC8DA4C8AB2D1BF01157C89BD1096F
SHA-512:	F8168CE3BD05EB7DF36B553DADEAD9707943B6A8CCB7D11EF9337F67B48B5754B38FF7886935EEFC9AAC44C6311229B4F944C11698F1E49338DF74ED46EEFED2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3a84f82d673a40eaa3c26dab9ef7530b.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:74882ebme5h

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.384471135699069
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/tSvDDURV7vFlsjs1:SbFuFyLVIg1BG+f+M4kRxF2jbVC
MD5:	4019FB51977EA91FF203F87DF3F74433
SHA1:	4664579645088FCE8DDF77239C5FFCAADFD6644E
SHA-256:	BCB161514DD3CE6D5F84C8E4F8C35D631A98E6E4E7C8E835E0571A785FEA8D04
SHA-512:	5C9621275B5B1E6ABCF4CA20FAD5747626E2F4CF09BA9B86B58122AEC1F598F712F15535D160F4A1094F3754EA97951E21BBC36A63DC6F98FB5EB316C5A72A4F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5fca4f793c1f45ef83fc41407cac0dd2.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:74883vKRXzi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.444234088763789
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8JXBpfDRqjNALyAZD:qgFq6g1af+M8ZBdDRwIZD
MD5:	F724666C2F57A52734106BCAA0E82479
SHA1:	2D81C0D854EDBF4871D0FA5966A8F565455A52A5
SHA-256:	3CDB996B6509CC794C19211EFD47DD030DB931C7CD178B302A49096762243F17
SHA-512:	30C4871E5FFBB5607D5909C52F9055D7B30B7B32B77E72D355D218FCA24313D9BF325E9D802AAA24ED8E544F1099FFF83C35B33B4572EB352891A2D26D247180
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66c90e74865b4c3eaeb4a9852a96733d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74884iGMTjh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.333833046444959
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/pEGLRVBaaG6Tvsjx:SbFuFyLVIg1BG+f+MWyRqaG6Ijoa
MD5:	F8DC5B586BCF4D9BA3B213637AFB88DD
SHA1:	B5C81FC6E83845EC9EE0AC2FF60B4EC7C64B0A3A
SHA-256:	CCCE6832D657F8A1E6B99E995FEF9D940BFFD260BB4D0F762D8F725ABE15E7A4
SHA-512:	72D897B75D9D14A8536A3D9CAB659A7AD6ACEA765E06ED2FFEF236708A0CD0056694C81B7B3ED3B933281F95DDA78B90B4703F6C1D5057BDEC15ED6BCDBA011E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5aef531cd202403caee0fcca8d99319c.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:74926W9lRki

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.44619222672474
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5SewRW3tdAcoWBv8jsd:SbFuFyLVIg1BAf+MDku1LZ8jNdQIeXD
MD5:	B64129F728B6F5062EB49BB73EF33D20
SHA1:	C975665954D48ADB424D80CDFC4D0928595F8791
SHA-256:	C75A3E0A93F75EEA773FBA79AC1AFDED2EE3E62E57C7197C5E93CC90B0F74F87
SHA-512:	3D512959A0779CBC121CE8EE0C38B3A70787475A6E87525F5DB32201C1B561992A98C9BFBB16726D6D79A18537D3BF0E7B8747BEAF689FA059F0E18DB6D2CBF4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3f445683b7e9437aa1d4a85e7e918d3d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:762994tQwH5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.389467012223282
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyPgnQ6F3VA22js1Ha:SbFuFyLVIg1BG+f+MyPOdVA22josQu
MD5:	3D4BD439E0187C71D2BB70A2921B14ED
SHA1:	B051BB2DAF9BC295F9FF9B129B13C8FA4033C494
SHA-256:	BCCB8B395A037C1A5B4657A5B84D27978B62667D69E85E85FE05C8FB6FB6E2F5
SHA-512:	1F0F946E91732FFBBC1CD661EB492888CC832FB0895C2D5E09F7911F5BE7282554151032A07EA2028CEC10D8DACB9AA8416234E203EAB984A5405B0474469B30
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8ad774c8ed424a5bb2aa7410d558fd0f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76306SscN78

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.456258717443187
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzVnVC92wuqjsicWmt:SbFuFyLVIg1BG+f+MBnw9bTjZcHcljX+
MD5:	503EEFF2187CD5A7A4B292147D3BF64E
SHA1:	C630D552F7214DF2E8C0F0638D95C930ACE977A1
SHA-256:	7A0200F7A3D50BD594412385DF30ABA422792AC205000B96305085CE8343C185
SHA-512:	A5F0767F4D2BA2BAD27B717388A96CB503A1DB06BFE282C7721E19C12FBE6DC2DFF17421EB18699CC908A512E340A32B561C4647C80ADA13AE93DBAEAE94B188
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9e47dbdd01ab463db57908e47a08706f.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:76307LN0gm9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.316933812294594
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6xfHROU4MQUhBvFlm:SbFuFyLVIg1BG+f+M6ZnBD0jtWL0
MD5:	80BC30D2D007F4066F0BDD145C304E7D
SHA1:	B313FD1607376D003A7E24273E566D8C2D86BF97
SHA-256:	B91F9CA4F51E08CD4EC51A7F2665F73A821607A7DB99F53D6084AD67AD84F023
SHA-512:	E5B0D5228B8A5391DD65AB27FB71520B09F5F78DF9377844037DBD387457169B5195FBB400035FA5428DA150D024BBEDC972BA731DDC5EBDBFC0004574DE3ABD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=09ed5631ca5d4a0f98f51e85ce51d251.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:76308QHOUR6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.358813768452538
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv1dQuNdNYiTlvFrqa:SbFuFyLVIg1BG+f+MIuvN/TlvRqjfGt
MD5:	0B0631863DA8070AF05DB575FD6A7CA3
SHA1:	70EB96759257D9F3B52CE6220549B06E726B2CD8
SHA-256:	9625F6966B5F9C1C3A77845E648BB1356AF70211540BC38DC03248973B48F1A8
SHA-512:	240819415F58137A77D4291ED4C516181EF73B1A7865A56775D2854DC19FC18884356E6F5D49ABAAB3095FD6E58091ACA97708A25ACF940409EDA4FE078708EE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e9a85c46bfdd436aa6ee1412402da6ee.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:76309D4jpo9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.430607553109744
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzHdUiHWmNOzTk0Zja:SbFuFyLVIg1BG+f+MLttO80jNE
MD5:	F23806E045B2AFC45B33D4C460520C89
SHA1:	AEBA9360BFE5A1DF926597A4F480CE08A09683B4
SHA-256:	2DBDC718AB1578545EBDB56D431F368B70B488BC3F7A7C69117D015EE83B805A
SHA-512:	E499AD53E4E9F8D39D6B7735EEE7E7257DA5283CC5C85DB07F0C3CB98AE200D6265E680564AEE8C4DC65D5C0CC9CA573AB405C8F7992EDA358FEE174BE2BEE3A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=96970022a916448ab933d5a5612b66ed.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:76310ImBWP5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.3971057233370345
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoaSEzGxRi9HYqjshP:SbFuFyLVIg1BG+f+MoiMi3jbVC
MD5:	3B595D4553F3F030CB0AF1229C2E0BA6
SHA1:	BF0A38F51A14D42A5547AA54EF5465FD8C652C5E
SHA-256:	03EA22118763F6347910549061CA0F2009D7A8244B688FD55A271634D96654BA
SHA-512:	288F8276D859B59D7A6EF708D5BB9FF8F98AF1823C37D032F2BFCE9D0FDE05207B9C545A51EC34A94BF2DA56F91C71C84B2826E8572DBF09EB8FB3DD2AACD065
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b1f427d8af7a4023b444fd6714eb0d9d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:76311bkwt47

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.397310198931452
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzkUSVRv8BJ4Xsjs2ALl:SbFuFyLVIg1BAf+MQhVA48jNALyAZD
MD5:	7353C2F329BF31706B2185C262B16930
SHA1:	11F44CCEC99F65DACB8E7372E24292E8A16A7042
SHA-256:	298E246C74C223073C7B473DFCF9E5D2EF4524274FA51E397BDA3BFF1779F453
SHA-512:	1D81F16A1DB87C81865B76CF7D15CFB9C970CE07A249E99EBC38783033F1DD0ECCDD530E2C14774355829386857901105AA0DD82573587BA05EB2B8CF0E65CA4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93ea170406ec4410aca1d2e9e352fb71.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76312fi7rb7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.430877704594675
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoRoAWwL3LAFA+sjs4:SbFuFyLVIg1BG+f+MohLsF8joa
MD5:	42989918BFB1E46708A2469958FDBB81
SHA1:	560F77E397877CD660E0D35A851AF1D4EE401F06
SHA-256:	863630F77BD06BFA2A3AE9F4577FF8179B8D7739D3202B055A0CFF5F8F7286F4
SHA-512:	7E7650B67A8FDBF039261F6B5182F6DBAD0B8B594F818A8BA0D8D8FC7E3958E71983E23BE18D10E33E8CA588596372C6B3EA7038668D08A882B5BFECDB92E286
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b68135743cd347fc9095a28856bf2720.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:76320hJcJk8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.477348212296333
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6LGcXxV3fDGWs2rxsjs:SbFuFyLVIg1BAf+M6qcjXsZjNdQIeXD
MD5:	AFC4B81F8FDCD330AEA8B65E39B1F1BF
SHA1:	E3BFECA03C380DA3758F7086EF36ED24C2447044
SHA-256:	577B052AED73FEF02B1410C25D647B25584538DCE3C197CE7CAFC017B8CF8C73
SHA-512:	EE1783F7F64A22DF617A7DF5D9C26E4DDC0C208B0B4623F2F9461FDB2A0E84BB9F7D3E7AED144512D5D7BD3C637A58696E7809F7DFB3A67F1CEEFB8F365C3A7E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0c923925a5544407a74db37a4981c85b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77010qOwMaL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.445990701062269
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyPnEc2EkV635xsjsc:SbFuFyLVIg1BG+f+MyvVa6EjosQu
MD5:	DAA19DC4FDD6E574582373FCB07978DC
SHA1:	A6602EC18E0D452362C4A8631A6EFE8D11A43AE9
SHA-256:	18BDE38594C2D5E0ADB045B70DB72B3A41CF69C5A6C1DE4E9D47A68694BF9948
SHA-512:	F8D2F08FDB22FFC5909381760A7CD45972AB352DB70215BE13DF0E78635AE0F9A60B677C1B21701773B3D7783625F729961CB1511086043696BDBB740FBCC22A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f671549097f4191bb5d7c5d8591eab2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77017G96A9K

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.442755849836883
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu1EgQrZjZcHcljX+:qgFq6g10+f+MTzmAu
MD5:	63E2282CFB81018214080DDA2D48A94A
SHA1:	57665EDD4ABFC767B1A1991EA6C4A69E03D4BF13
SHA-256:	F973DECF95A86EDC43FFD169AE52F2DF74E42ADE1C48F915E5C84AEC44CA6FF9
SHA-512:	2545A4A7D80E75A50F0C2794360DCF6F1BEE136C93EC70AE86BF34B893F5B20CA64D1D8E591B747FD4F9F885BF5650385A235A7B35A7FE2FB7B742A99A333DDA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d894053cd0ed4685b495eeaf2de03395.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77018DznqzL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.429759977236359
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8JBXsHUq10Duxsjsf:SbFuFyLVIg1BG+f+M8P8h1vqjfGt
MD5:	E3BDAC6AD3D19B4D8073C86C586828F8
SHA1:	C4D024244F1C209C0C26B9DDA09DD146F4044B16
SHA-256:	E34A4DF941C04653EE97D36314EFE7F0A000DDE3126E36CBAE0FB6CB363A1AAE
SHA-512:	EF588FBF4D7750DB0AE700294B116D6F6DB3E9264F5D65194C76E8C8FA07B32DD7295F5CFC9B10E8E11EE21021FDB21C8035F691450B5A78634255A23FCBF775
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=615d29c9b10b4f628474e298b2c1e4da.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:77019dS8QKM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.398275425072219
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6mgW+ROEKSVRTjNALyAZD:qgFq6g1af+MLT+ROEJvFIZD
MD5:	C83B6A7AE26095D767BE9D3008C828BB
SHA1:	501842733BAFB43AD20C037CBE0C506B40540618
SHA-256:	604A269025E4CDE6475A2C696C558A9A55AA74C972BD4BFDCA5743C1B6E15953
SHA-512:	6D8B091B7840C0FCC93C9D9122B3565BBB718049402EDCB59A8C4499981D879626DEBE265527D8FD7AF44A2F6DCB6DD7B846EB1D7E0EB427A192B1EA176D71C2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0704c34448414d61af10270fba1f3422.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77026EKtH5N

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.485251823502875
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsE4GSVLbx+uyj8js2BI:SbFuFyLVIg1BAf+Ms5FVvxfjNdQIeXD
MD5:	03B8859638ECB21A7E57855884165732
SHA1:	55C2F8E4ABBC375B062851C55AA089C5AD7E5AD7
SHA-256:	50075F5C48CA2C8B8BB146F79358BCE6F2162311F7529D00DC0C49CD974A0E2B
SHA-512:	BF2B8B745214E231130580C1124220F5F8278E60A2352FFEC2EA7A82C924783E81A918D958083586C32705AC32F6671CA944BA08B531B944EE8862F03C307214
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fad0ac737c9649adb7624820980250b6.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77751jFtXbA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4271494714492725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/J4BEQBMPHdQvsjsc:SbFuFyLVIg1BG+f+M0BMPHdQ0josQu
MD5:	CC212F5B1A4D8552D8283D9C8D3646DF
SHA1:	B78F14C28FF6FDAD0538722D9004E8E26BCB1540
SHA-256:	4E25471B68161AACE597762B3A31691D107970B9495F710391EA72DAF7FCEF55
SHA-512:	EA524AE57F25372597FD5A7D01D748CAE610AE6CFB549B1B1629299FC4F135CE2732A209E8EAA47734115DA0B68B7F93D6D42BFF2417CFA25DDE30B8EAD6F4B5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=515a2bda32d7487e8b413b84a67cf211.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77758Kz7NJC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.443736501524262
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MC4BBTLvF2jZcHcljX+:qgFq6g10+f+MC0vFYmAu
MD5:	F0F5466D9A7C77289902822271AC6C9E
SHA1:	1398902E2B5FBD5FC20379C79C571148F5A6332F
SHA-256:	6E31C07DF0A64AF6035323AE9F7640584D486395343CED84EA30E3BA93FDE212
SHA-512:	0041C8CB0E563247C55B831BB19E8B707B5BA0492B0986E65147FD9E94633D173DB8A4D414FAFD62F928EACE88D655DE89113C9675122852511A4910A192AD2E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=71c6ea05ae8449fa8fa058d5dd689cdf.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77766kx8ULC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.3970923381533344
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzdjUusa3VvhTjskGt:SbFuFyLVIg1BG+f+MJUJEVvhTjfGt
MD5:	2C3D34E5081D2805DF4FFB7E18C3BBB1
SHA1:	81A2B8D0CEFD05BBA018E4C931F8D5E4E65AA2A6
SHA-256:	44D7F6F47DA4DB339A16A2C78D7C06C7560A8193C52302A3478D7428160DF5ED
SHA-512:	C2559858BB661D6F92018D4A38F806B1ADC76AB2AF9697957ACAD461E97ADB16A460301EFD5854FA41CE643478C4D79A6E1E27BBB449382E287518AA30ACE8ED
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9ed778fe7511465480385a2d20a40527.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:77767u8iNpE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.403142705510976
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9VZWEXQKXRBzsZjs2Ax:SbFuFyLVIg1BAf+MVWEN2ZjNALyAZD
MD5:	35F75969943CB6A3175FC865B682F261
SHA1:	C5706CA8D47AFA63F9FC76EB676452C69DE4EE8B
SHA-256:	041E02130AAF03BA940BA20B8C6295DB3D62A00E3C1E957A420DFFA790917417
SHA-512:	8092AAA713273B32C933A8044450137F04556B3B4E558C142DEDDFC7E207CE51E468CD6742229F65373A66D379792914275970E510A98FDAD28DD5B9D3333F60
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=759fbbfed90a4e5fa4c759ae2b2dd4df.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78869kgZtPD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.44443107444085
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8DSoUJh5E1BhqjNdQIeXD:qgFq6g1af+M8OJfg82D
MD5:	9322CC89CD21B58B2C6F8B6FE5336F30
SHA1:	AA4FE65244556D5D377EFC13D6D70D559AB7D0D7
SHA-256:	4DE851CA0D11A45AC8E0A4A9F77F178AA3F233BEF00D2B826EC74621E9CDA504
SHA-512:	7A375EF90D0AAF3EB505EBDA891A3490DE90E457ADF8F7A36CFA78707AE472B2480E06C676AEE8A76B6D09DC74DC5DD056BD7FB689E5DC657C2BE767A8877D41
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f76c5a91f1a4a3bba77ae2a67e8c3ac.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat016NJTn

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat03txLxO

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat04zLgZ6

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat08foLpB

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0LYkqjH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0M6k9nZ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Q64gkh

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0QrwJN4

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0XTHmHR

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0yw14Ik

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:MSv:MSv
MD5:	96E890F13DC0A79FEC728221AF60E1C3
SHA1:	B34FB019AEEF629DBE5532895DFEFA3A82BAB1BC
SHA-256:	5B63C02E54801AF5E4EB029002CE42B4325C9E8B5698C00C4CBAF84B2D5C348A
SHA-512:	4B8EE8151CB9F100822ADBF070F6AFEF03349306B0C067B910FE0D4DEFF18AFC26811EF4F306E3186DEEA20A9EFC6189EDD139681C2306BA57901833667AEAAD
Malicious:	false
Preview:	6767.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:yRc1sXlXEWtl/Cyfbi/tl:CcQ+ylXzi/t
MD5:	A493CC60BC136AED0E3848E680B7DB21
SHA1:	392270C9364F9E88C8F3471D01B2F5183870028C
SHA-256:	8AB3A485AF707A70E7EF07C207926E47F4ECCE586E38E5441E434F7B0BCD9E40
SHA-512:	F32A6D371EF5E35168EE4186537234898B199B63AED539C306D462E83E143AFBD2C1E3396CAABB97DD513E1DB411C37B7F4DB561880DA59733CF314848635CA5
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................9vgl>......................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	671
Entropy (8bit):	4.838153738171957
Encrypted:	false
SSDEEP:	12:vkFaZPaV5pGiokFUkiokF8bkF9MuokFvAvmmkFvA2+VdkFy:vBZedofZoTbEC0AvT0A2+Vdl
MD5:	DE29FC6261C3B304F004940C7C6C2328
SHA1:	E223F71DF3B2C9A0FC300627AE9761638ACE5BE5
SHA-256:	59A3BF9BC38342BACF3DC38F7026FF9EB6F70B850053A3E15303E32308441115
SHA-512:	B1C369666A837E5CE73EEE103F18D205209175B00312167419F48F0C81DB43448E0B7ED2FF73FC15112E1548F49D843C847E6A06E12A4D42E9A67758A90FF884
Malicious:	false
Preview:	Jan 2 01:00:39 galassia systemd-logind[6981]: Failed to add user by file name 1000, ignoring: Invalid argument.Jan 2 01:00:39 galassia systemd-logind[6981]: User enumeration failed: Invalid argument.Jan 2 01:00:39 galassia systemd-logind[6981]: User of session 2 not known..Jan 2 01:00:39 galassia systemd-logind[6981]: Session enumeration failed: No such file or directory.Jan 2 01:00:39 galassia systemd-logind[6981]: Watching system buttons on /dev/input/event0 (Power Button).Jan 2 01:00:39 galassia systemd-logind[6981]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Jan 2 01:00:39 galassia systemd-logind[6981]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31HlAGWzTZwtaGWzTZgl:F3wD+taD
MD5:	9B38A7B6B1B0F2426E2CA2938FA8A2FA
SHA1:	E5CF485713320D5C78A3C15C91FAD6695145FC1F
SHA-256:	4638888D680A1C0820C46C18467F09013571B96D1CF2EF82B58B857C539B858A
SHA-512:	89E84FD0201B4DEECBAE64D4197F5739D2A195A6C2C01F7D0DD22C4CBFE3540E143A7078202052875A745B7C48B00442F292ABD08277D33DA16A0B6F207E210F
Malicious:	false
Preview:	LPKSHHRH..................#1..K...U.;\|...................................#1..K...U.;\|.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838254
Encrypted:	false
SSDEEP:	3:F31HlcPeMi5ssPeMi5cl/:F3Mcrcm
MD5:	62B70677E6E074F2DFCE480D5F8B68E9
SHA1:	A43B3E989220B8ED33275F8D1AC1E5F5B2109ED9
SHA-256:	3999ED192685D6EA81A291ED0773BEEB76DFC924238D69C7B7ED6B141387CAC8
SHA-512:	9213540A58E68CECDF6906F3D3E47B9E7DF4CC9A6BAE311440F1003AB71E8BF5EB807FA95AD529A21B4E12642D3C0731A2DB16515149796890EE03A6A898F73F
Malicious:	false
Preview:	LPKSHHRH...................r..B.....\I...................................r..B.....\I........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	3689
Entropy (8bit):	4.7167860231492575
Encrypted:	false
SSDEEP:	96:hpfP5SfY5g5FCJF8K5Uun2slmW15lLFtlsbw:yYeM/J
MD5:	7AA19C2F59BF0C999F1C413BA9615625
SHA1:	0792EBEC09B0C1B8BAB9F4B1ACDB815505103276
SHA-256:	088C25FBD0760F884156BD6117D549C05ED70E09FDDAA39CC795636229C16271
SHA-512:	1B83BDE89876D87DC6254767C144C975D3C5ECA541D0EAB9304CE9B55B8FD1E3A25A8F0610C84992037267653D6FE9A22798BDF3BA087B556D59FC6833125409
Malicious:	false
Preview:	Jan 2 01:00:34 galassia kernel: [ 312.628645] blocking signal 19: 5526 -> 3220.Jan 2 01:00:34 galassia kernel: [ 312.655238] blocking signal 9: 5526 -> 658.Jan 2 01:00:34 galassia kernel: [ 312.661901] blocking signal 9: 5526 -> 723.Jan 2 01:00:34 galassia kernel: [ 312.668380] blocking signal 9: 5526 -> 764.Jan 2 01:00:34 galassia kernel: [ 312.674734] blocking signal 9: 5526 -> 766.Jan 2 01:00:34 galassia kernel: [ 312.681161] blocking signal 9: 5526 -> 777.Jan 2 01:00:34 galassia kernel: [ 312.687516] blocking signal 9: 5526 -> 933.Jan 2 01:00:34 galassia kernel: [ 312.694054] blocking signal 9: 5526 -> 3044.Jan 2 01:00:34 galassia kernel: [ 312.700509] blocking signal 9: 5526 -> 3047.Jan 2 01:00:34 galassia kernel: [ 312.706946] blocking signal 9: 5526 -> 3220.Jan 2 01:00:34 galassia kernel: [ 313.271906] New task spawned: old: (tgid 7036, tid 7036), new (tgid: 7036, tid: 7073).Jan 2 01:00:34 galassia kernel: [ 313.272756] New task spawned: old: (tgid 7036,

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	9220
Entropy (8bit):	4.9955842896513465
Encrypted:	false
SSDEEP:	96:hpfWhk5NEqe/mxOvRmwE57fY5xE+UQQC5FCJF8K5Uun2slmW15lLTetlsdG0JLv8:dQqe/mkkY/E+vvM/k0JLv5/8Qv+ZFnr
MD5:	F50E5D05A00D102D848FE113A7ED1406
SHA1:	439B2AB9E4B53F560645C9AD1772AC1192AC1C74
SHA-256:	7951CCF7FC9B158E4F7CCCBE570A374C1A7132EB91246770E8286D79E14AD263
SHA-512:	B9D717DF0CA452CAC39B3B406E818BFE7BDC8038BE46EB1B89FE03A9F3B6B80B986C1085D8F288C40797FEB9ED984020C823BF20B45CC0D32BF92CA4ECAECCC7
Malicious:	false
Preview:	Jan 2 01:00:34 galassia kernel: [ 312.628645] blocking signal 19: 5526 -> 3220.Jan 2 01:00:34 galassia kernel: [ 312.655238] blocking signal 9: 5526 -> 658.Jan 2 01:00:34 galassia kernel: [ 312.661901] blocking signal 9: 5526 -> 723.Jan 2 01:00:34 galassia kernel: [ 312.668380] blocking signal 9: 5526 -> 764.Jan 2 01:00:34 galassia kernel: [ 312.674734] blocking signal 9: 5526 -> 766.Jan 2 01:00:34 galassia kernel: [ 312.681161] blocking signal 9: 5526 -> 777.Jan 2 01:00:34 galassia kernel: [ 312.687516] blocking signal 9: 5526 -> 933.Jan 2 01:00:34 galassia kernel: [ 312.694054] blocking signal 9: 5526 -> 3044.Jan 2 01:00:34 galassia kernel: [ 312.700509] blocking signal 9: 5526 -> 3047.Jan 2 01:00:34 galassia kernel: [ 312.706946] blocking signal 9: 5526 -> 3220.Jan 2 01:00:34 galassia kernel: [ 312.716756] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 11..Jan 2 01:00:34 galassia kernel: [ 312.716842] systemd[1]: Stopped Jo

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:yRc1sXlXEWtl/Cyfbi/tl:CcQ+ylXzi/t
MD5:	A493CC60BC136AED0E3848E680B7DB21
SHA1:	392270C9364F9E88C8F3471D01B2F5183870028C
SHA-256:	8AB3A485AF707A70E7EF07C207926E47F4ECCE586E38E5441E434F7B0BCD9E40
SHA-512:	F32A6D371EF5E35168EE4186537234898B199B63AED539C306D462E83E143AFBD2C1E3396CAABB97DD513E1DB411C37B7F4DB561880DA59733CF314848635CA5
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................9vgl>......................................

Source: wev86.elf	Virustotal: Detection: 37%			Perma Link
Source: wev86.elf	ReversingLabs: Detection: 42%

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.9291186332691
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	wev86.elf
File size:	115'116 bytes
MD5:	d18bc9eb21b477e912ba9dc5e7e885eb
SHA1:	e89565526a31bf5c94fc8cfc816e5a8c84ad0208
SHA256:	dfd01cc32d00e7b8bb9409092992c97a36e15756c74f3e1642d7b37a9a9f8453
SHA512:	fa444013bff7ac882c98dccb8f19167077df55553b4e54a8b4ed279bf351c0b523f42d94253858238bfb0597699545ad6ff8f96916b2943315c160f9c8a8e938
SSDEEP:	3072:aEw1r6FWYvmRt8V7GBSprLnIJhdOb4+I:7wt6sY+Rt8VcfQ8+I
TLSH:	3EB35BC1F683D5F1E86301B1203BAB339E36E4B9112DEA43D7BDD936AC92941DB0665C
File Content Preview:	.ELF....................d...4...........4. ...(......................w...w...............w...........H..............Q.td............................U..S.......S....h.....J..[]...$.............U......=.O...t..5...................u........t....h............

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	114716
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0x14aa6	0x0	0x6	AX	16
.fini	PROGBITS	0x805cb56	0x14b56	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x805cb80	0x14b80	0x2c53	0x0	0x2	A	32
.ctors	PROGBITS	0x80607d8	0x177d8	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x80607e4	0x177e4	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8060800	0x17800	0x47dc	0x0	0x3	WA	32
.bss	NOBITS	0x8064fe0	0x1bfdc	0x48cc	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x1bfdc	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x177d3	0x177d3	6.5907	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x177d8	0x80607d8	0x80607d8	0x4804	0x90d4	0.4154	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 2, 2025 07:58:24.808584929 CET	192.168.2.15	192.168.2.1	827b	(Port unreachable)	Destination Unreachable
Jan 2, 2025 07:59:44.819444895 CET	192.168.2.15	192.168.2.1	827b	(Port unreachable)	Destination Unreachable

Start time (UTC):	06:57:54
Start date (UTC):	02/01/2025
Path:	/tmp/wev86.elf
Arguments:	/tmp/wev86.elf
File size:	115116 bytes
MD5 hash:	d18bc9eb21b477e912ba9dc5e7e885eb

Start time (UTC):	06:57:55
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	06:58:01
Start date (UTC):	02/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	06:58:05
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:06
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:07
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:09
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	06:58:10
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfdesktop
Arguments:	xfdesktop --display :1.0 --sm-client-id 2975cc77d-4424-4c3b-abac-4708c6227ebe
File size:	473520 bytes
MD5 hash:	dfb13e1581f80065dcea16f2476f16f2

Start time (UTC):	06:58:12
Start date (UTC):	02/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	06:58:13
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:14
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:15
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:21
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:16
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report wev86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/run/systemd/inhibit/.#1CVIIDf

/run/systemd/inhibit/.#1DKngoF

/run/systemd/inhibit/.#1Kb0oSV

/run/systemd/inhibit/.#1OD6VxA

/run/systemd/inhibit/.#1Om3jNm

/run/systemd/inhibit/.#1PncyqH

/run/systemd/inhibit/.#1QwgTQU

/run/systemd/inhibit/.#1SpQcqy

/run/systemd/inhibit/.#1YfcZx4

/run/systemd/inhibit/.#1ajqOl0

/run/systemd/inhibit/.#1cfWJf5

/run/systemd/inhibit/.#1gNlEXn

/run/systemd/inhibit/.#1lRZ7eg

/run/systemd/inhibit/.#1r4UDyM

/run/systemd/inhibit/.#1rIP80N

/run/systemd/inhibit/.#1rlnH84

/run/systemd/inhibit/.#1uYDasm

/run/systemd/inhibit/.#1vJgc3m

/run/systemd/inhibit/.#1zshaA8

/run/systemd/journal/streams/.#9:65706OY0732

/run/systemd/journal/streams/.#9:65707dN6L71

/run/systemd/journal/streams/.#9:65708ORJ702

/run/systemd/journal/streams/.#9:65709Znklk4

/run/systemd/journal/streams/.#9:65710WbOhC1

/run/systemd/journal/streams/.#9:65717jkcX72

Linux Analysis Report
wev86.elf

Start time (UTC):	06:58:17
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:18
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:19
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	06:58:20
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:22
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:30
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:31
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	06:58:32
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	06:58:33
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	06:58:35
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75