Edit tour

Linux Analysis Report
wrjkngh4.elf

Overview

General Information

Sample name:	wrjkngh4.elf
Analysis ID:	1583185
MD5:	f106b210595c95bb0ab2fcab92393890
SHA1:	182b1de4f170b61406badeed332f417bd5947297
SHA256:	2e1c233cb8c158cbffc07032c63710dfeed433b4c0746601f9b7fcd2ec84cd58
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583185
Start date and time:	2025-01-02 08:00:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	wrjkngh4.elf
Detection:	MAL
Classification:	mal88.spre.troj.evad.linELF@0/188@1186/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Runtime Messages

Command:	/tmp/wrjkngh4.elf
PID:	6256
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

wrjkngh4.elf (PID: 6256, Parent: 6178, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/wrjkngh4.elf

wrjkngh4.elf New Fork (PID: 6258, Parent: 6256)

wrjkngh4.elf New Fork (PID: 6260, Parent: 6258)

gnome-session-binary New Fork (PID: 6262, Parent: 1477)

sh (PID: 6262, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6262, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

xfce4-panel New Fork (PID: 6268, Parent: 2063)

wrapper-2.0 (PID: 6268, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6269, Parent: 2063)

wrapper-2.0 (PID: 6269, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6270, Parent: 2063)

wrapper-2.0 (PID: 6270, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6271, Parent: 2063)

wrapper-2.0 (PID: 6271, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 6289, Parent: 6271)

xfpm-power-backlight-helper (PID: 6289, Parent: 6271, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 6272, Parent: 2063)

wrapper-2.0 (PID: 6272, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6273, Parent: 2063)

wrapper-2.0 (PID: 6273, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 6291, Parent: 6290)

xfconfd (PID: 6291, Parent: 6290, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 6319, Parent: 1860)

xfce4-notifyd (PID: 6319, Parent: 1860, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

gdm3 New Fork (PID: 6320, Parent: 1320)

Default (PID: 6320, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6323, Parent: 1320)

Default (PID: 6323, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

xfce4-session New Fork (PID: 6327, Parent: 1900)

xfwm4 (PID: 6327, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

xfce4-session New Fork (PID: 6328, Parent: 1900)

xfce4-panel (PID: 6328, Parent: 1900, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2b4cc744e-8b9d-436f-9a4a-312b40faa2ec

xfce4-session New Fork (PID: 6331, Parent: 1900)

rm (PID: 6331, Parent: 1900, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /home/saturnino/.cache/sessions/Thunar-2ec9153f1-6fa0-4067-96b1-e5fe875b1e51

xfce4-session New Fork (PID: 6334, Parent: 1900)

xfdesktop (PID: 6334, Parent: 1900, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542

xfce4-session New Fork (PID: 6338, Parent: 1900)

xfwm4 (PID: 6338, Parent: 1900, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c

xfce4-session New Fork (PID: 6339, Parent: 1900)

xfce4-panel (PID: 6339, Parent: 1900, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2b4cc744e-8b9d-436f-9a4a-312b40faa2ec

xfce4-session New Fork (PID: 6340, Parent: 1900)

xfdesktop (PID: 6340, Parent: 1900, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 29178b886-02e2-48f2-9471-8dbd02206542

dbus-daemon New Fork (PID: 6350, Parent: 6349)

xfconfd (PID: 6350, Parent: 6349, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 6353, Parent: 1)

journalctl (PID: 6353, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6356, Parent: 1)

dbus-daemon (PID: 6356, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 6359, Parent: 1320)

Default (PID: 6359, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6361, Parent: 1)

rsyslogd (PID: 6361, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6362, Parent: 1)

systemd-journald (PID: 6362, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6367, Parent: 1860)

pulseaudio (PID: 6367, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6370, Parent: 1)

upowerd (PID: 6370, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

gvfsd-fuse New Fork (PID: 6411, Parent: 2038)

fusermount (PID: 6411, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6423, Parent: 1860)

dbus-daemon (PID: 6423, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6424, Parent: 1)

dbus-daemon (PID: 6424, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6426, Parent: 1)

systemd-journald (PID: 6426, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6430, Parent: 1)

rsyslogd (PID: 6430, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6431, Parent: 1)

upowerd (PID: 6431, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6478, Parent: 1)

systemd-logind (PID: 6478, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6540, Parent: 1)

gpu-manager (PID: 6540, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6542, Parent: 6540)

sh (PID: 6542, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6543, Parent: 6542)

grep (PID: 6543, Parent: 6542, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6545, Parent: 6540)

sh (PID: 6545, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6546, Parent: 6545)

grep (PID: 6546, Parent: 6545, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6547, Parent: 6540)

sh (PID: 6547, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6548, Parent: 6547)

grep (PID: 6548, Parent: 6547, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6549, Parent: 6540)

sh (PID: 6549, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6550, Parent: 6549)

grep (PID: 6550, Parent: 6549, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6551, Parent: 6540)

sh (PID: 6551, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6552, Parent: 6551)

grep (PID: 6552, Parent: 6551, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6553, Parent: 6540)

sh (PID: 6553, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6554, Parent: 6553)

grep (PID: 6554, Parent: 6553, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6555, Parent: 6540)

sh (PID: 6555, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6556, Parent: 6555)

grep (PID: 6556, Parent: 6555, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6557, Parent: 6540)

sh (PID: 6557, Parent: 6540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6558, Parent: 6557)

grep (PID: 6558, Parent: 6557, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6541, Parent: 1)

agetty (PID: 6541, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6561, Parent: 1)

generate-config (PID: 6561, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6562, Parent: 6561)

pkill (PID: 6562, Parent: 6561, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6564, Parent: 1)

gdm-wait-for-drm (PID: 6564, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6567, Parent: 1)

systemd-journald (PID: 6567, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6568, Parent: 1)

dbus-daemon (PID: 6568, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6573, Parent: 1)

systemd-logind (PID: 6573, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6587, Parent: 1)

rsyslogd (PID: 6587, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6632, Parent: 1)

upowerd (PID: 6632, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6675, Parent: 1)

gpu-manager (PID: 6675, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6677, Parent: 6675)

sh (PID: 6677, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6678, Parent: 6677)

grep (PID: 6678, Parent: 6677, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6680, Parent: 6675)

sh (PID: 6680, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6681, Parent: 6680)

grep (PID: 6681, Parent: 6680, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6682, Parent: 6675)

sh (PID: 6682, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6683, Parent: 6682)

grep (PID: 6683, Parent: 6682, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6686, Parent: 6675)

sh (PID: 6686, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6687, Parent: 6686)

grep (PID: 6687, Parent: 6686, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6690, Parent: 6675)

sh (PID: 6690, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6691, Parent: 6690)

grep (PID: 6691, Parent: 6690, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6692, Parent: 6675)

sh (PID: 6692, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6693, Parent: 6692)

grep (PID: 6693, Parent: 6692, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6694, Parent: 6675)

sh (PID: 6694, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6695, Parent: 6694)

grep (PID: 6695, Parent: 6694, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6696, Parent: 6675)

sh (PID: 6696, Parent: 6675, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6697, Parent: 6696)

grep (PID: 6697, Parent: 6696, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6698, Parent: 1)

generate-config (PID: 6698, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6699, Parent: 6698)

pkill (PID: 6699, Parent: 6698, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6702, Parent: 1)

gdm-wait-for-drm (PID: 6702, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6707, Parent: 1)

systemd-journald (PID: 6707, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6712, Parent: 1)

systemd-logind (PID: 6712, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6770, Parent: 1)

rsyslogd (PID: 6770, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6771, Parent: 1)

upowerd (PID: 6771, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6810, Parent: 1)

dbus-daemon (PID: 6810, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6815, Parent: 1)

gpu-manager (PID: 6815, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6816, Parent: 6815)

sh (PID: 6816, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6817, Parent: 6816)

grep (PID: 6817, Parent: 6816, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6818, Parent: 6815)

sh (PID: 6818, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6819, Parent: 6818)

grep (PID: 6819, Parent: 6818, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6820, Parent: 6815)

sh (PID: 6820, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6821, Parent: 6820)

grep (PID: 6821, Parent: 6820, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6822, Parent: 6815)

sh (PID: 6822, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6823, Parent: 6822)

grep (PID: 6823, Parent: 6822, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6824, Parent: 6815)

sh (PID: 6824, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6825, Parent: 6824)

grep (PID: 6825, Parent: 6824, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6828, Parent: 6815)

sh (PID: 6828, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6829, Parent: 6828)

grep (PID: 6829, Parent: 6828, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6833, Parent: 6815)

sh (PID: 6833, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6834, Parent: 6833)

grep (PID: 6834, Parent: 6833, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6835, Parent: 6815)

sh (PID: 6835, Parent: 6815, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6836, Parent: 6835)

grep (PID: 6836, Parent: 6835, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6839, Parent: 1)

generate-config (PID: 6839, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6840, Parent: 6839)

pkill (PID: 6840, Parent: 6839, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6841, Parent: 1)

gdm-wait-for-drm (PID: 6841, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6846, Parent: 1)

systemd-journald (PID: 6846, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6851, Parent: 1)

dbus-daemon (PID: 6851, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6852, Parent: 1)

systemd-logind (PID: 6852, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6905, Parent: 1)

rsyslogd (PID: 6905, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6911, Parent: 1)

upowerd (PID: 6911, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6952, Parent: 1)

gpu-manager (PID: 6952, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6955, Parent: 6952)

sh (PID: 6955, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6956, Parent: 6955)

grep (PID: 6956, Parent: 6955, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6957, Parent: 6952)

sh (PID: 6957, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6958, Parent: 6957)

grep (PID: 6958, Parent: 6957, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6959, Parent: 6952)

sh (PID: 6959, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6960, Parent: 6959)

grep (PID: 6960, Parent: 6959, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6961, Parent: 6952)

sh (PID: 6961, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6962, Parent: 6961)

grep (PID: 6962, Parent: 6961, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6965, Parent: 6952)

sh (PID: 6965, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6966, Parent: 6965)

grep (PID: 6966, Parent: 6965, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6969, Parent: 6952)

sh (PID: 6969, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6971, Parent: 6969)

grep (PID: 6971, Parent: 6969, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6972, Parent: 6952)

sh (PID: 6972, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6975, Parent: 6972)

grep (PID: 6975, Parent: 6972, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6976, Parent: 6952)

sh (PID: 6976, Parent: 6952, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6977, Parent: 6976)

grep (PID: 6977, Parent: 6976, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6978, Parent: 1)

generate-config (PID: 6978, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6979, Parent: 6978)

pkill (PID: 6979, Parent: 6978, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6980, Parent: 1)

gdm-wait-for-drm (PID: 6980, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6985, Parent: 1)

systemd-journald (PID: 6985, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6990, Parent: 1)

systemd-logind (PID: 6990, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7047, Parent: 1)

rsyslogd (PID: 7047, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7048, Parent: 1)

upowerd (PID: 7048, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7088, Parent: 1)

dbus-daemon (PID: 7088, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7089, Parent: 1)

gpu-manager (PID: 7089, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7093, Parent: 7089)

sh (PID: 7093, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7095, Parent: 7093)

grep (PID: 7095, Parent: 7093, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7096, Parent: 7089)

sh (PID: 7096, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7097, Parent: 7096)

grep (PID: 7097, Parent: 7096, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7098, Parent: 7089)

sh (PID: 7098, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7099, Parent: 7098)

grep (PID: 7099, Parent: 7098, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7100, Parent: 7089)

sh (PID: 7100, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7101, Parent: 7100)

grep (PID: 7101, Parent: 7100, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7102, Parent: 7089)

sh (PID: 7102, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7103, Parent: 7102)

grep (PID: 7103, Parent: 7102, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7108, Parent: 7089)

sh (PID: 7108, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7109, Parent: 7108)

grep (PID: 7109, Parent: 7108, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7113, Parent: 7089)

sh (PID: 7113, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7114, Parent: 7113)

grep (PID: 7114, Parent: 7113, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7115, Parent: 7089)

sh (PID: 7115, Parent: 7089, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7116, Parent: 7115)

grep (PID: 7116, Parent: 7115, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7117, Parent: 1)

generate-config (PID: 7117, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7118, Parent: 7117)

pkill (PID: 7118, Parent: 7117, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7121, Parent: 1)

gdm-wait-for-drm (PID: 7121, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7124, Parent: 1)

systemd-journald (PID: 7124, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7129, Parent: 1)

systemd-logind (PID: 7129, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7131, Parent: 1)

dbus-daemon (PID: 7131, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7187, Parent: 1)

rsyslogd (PID: 7187, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7188, Parent: 1)

upowerd (PID: 7188, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7231, Parent: 1)

gpu-manager (PID: 7231, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7232, Parent: 7231)

sh (PID: 7232, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7233, Parent: 7232)

grep (PID: 7233, Parent: 7232, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7235, Parent: 7231)

sh (PID: 7235, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7236, Parent: 7235)

grep (PID: 7236, Parent: 7235, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7239, Parent: 7231)

sh (PID: 7239, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7240, Parent: 7239)

grep (PID: 7240, Parent: 7239, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7243, Parent: 7231)

sh (PID: 7243, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7244, Parent: 7243)

grep (PID: 7244, Parent: 7243, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7247, Parent: 7231)

sh (PID: 7247, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7249, Parent: 7247)

grep (PID: 7249, Parent: 7247, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7250, Parent: 7231)

sh (PID: 7250, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7251, Parent: 7250)

grep (PID: 7251, Parent: 7250, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7252, Parent: 7231)

sh (PID: 7252, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7253, Parent: 7252)

grep (PID: 7253, Parent: 7252, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7254, Parent: 7231)

sh (PID: 7254, Parent: 7231, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7255, Parent: 7254)

grep (PID: 7255, Parent: 7254, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7256, Parent: 1)

generate-config (PID: 7256, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7257, Parent: 7256)

pkill (PID: 7257, Parent: 7256, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7258, Parent: 1)

gdm-wait-for-drm (PID: 7258, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7261, Parent: 1860)

dbus-daemon (PID: 7261, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7262, Parent: 1860)

pulseaudio (PID: 7262, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7263, Parent: 1)

rtkit-daemon (PID: 7263, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7266, Parent: 1)

polkitd (PID: 7266, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7274, Parent: 1)

systemd-journald (PID: 7274, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7279, Parent: 1)

systemd-logind (PID: 7279, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7336, Parent: 1)

rsyslogd (PID: 7336, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7337, Parent: 1)

upowerd (PID: 7337, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7376, Parent: 1860)

pulseaudio (PID: 7376, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7381, Parent: 1)

dbus-daemon (PID: 7381, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7384, Parent: 1)

gpu-manager (PID: 7384, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7386, Parent: 7384)

sh (PID: 7386, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7387, Parent: 7386)

grep (PID: 7387, Parent: 7386, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7388, Parent: 7384)

sh (PID: 7388, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7389, Parent: 7388)

grep (PID: 7389, Parent: 7388, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7390, Parent: 7384)

sh (PID: 7390, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7391, Parent: 7390)

grep (PID: 7391, Parent: 7390, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7392, Parent: 7384)

sh (PID: 7392, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7393, Parent: 7392)

grep (PID: 7393, Parent: 7392, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7394, Parent: 7384)

sh (PID: 7394, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7395, Parent: 7394)

grep (PID: 7395, Parent: 7394, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7396, Parent: 7384)

sh (PID: 7396, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7397, Parent: 7396)

grep (PID: 7397, Parent: 7396, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7401, Parent: 7384)

sh (PID: 7401, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7403, Parent: 7401)

grep (PID: 7403, Parent: 7401, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7408, Parent: 7384)

sh (PID: 7408, Parent: 7384, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7409, Parent: 7408)

grep (PID: 7409, Parent: 7408, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7400, Parent: 1)

rtkit-daemon (PID: 7400, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7407, Parent: 1)

polkitd (PID: 7407, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7415, Parent: 1)

generate-config (PID: 7415, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7416, Parent: 7415)

pkill (PID: 7416, Parent: 7415, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7419, Parent: 1860)

dbus-daemon (PID: 7419, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7420, Parent: 1)

gdm-wait-for-drm (PID: 7420, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7423, Parent: 1)

systemd-journald (PID: 7423, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7428, Parent: 1)

systemd-logind (PID: 7428, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7480, Parent: 1)

rsyslogd (PID: 7480, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7486, Parent: 1)

upowerd (PID: 7486, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7526, Parent: 1860)

pulseaudio (PID: 7526, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7532, Parent: 1)

dbus-daemon (PID: 7532, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7533, Parent: 1)

gpu-manager (PID: 7533, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7535, Parent: 7533)

sh (PID: 7535, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7536, Parent: 7535)

grep (PID: 7536, Parent: 7535, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7537, Parent: 7533)

sh (PID: 7537, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7538, Parent: 7537)

grep (PID: 7538, Parent: 7537, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7539, Parent: 7533)

sh (PID: 7539, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7540, Parent: 7539)

grep (PID: 7540, Parent: 7539, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7541, Parent: 7533)

sh (PID: 7541, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7542, Parent: 7541)

grep (PID: 7542, Parent: 7541, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7543, Parent: 7533)

sh (PID: 7543, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7544, Parent: 7543)

grep (PID: 7544, Parent: 7543, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7547, Parent: 7533)

sh (PID: 7547, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7549, Parent: 7547)

grep (PID: 7549, Parent: 7547, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7555, Parent: 7533)

sh (PID: 7555, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7556, Parent: 7555)

grep (PID: 7556, Parent: 7555, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7560, Parent: 7533)

sh (PID: 7560, Parent: 7533, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7561, Parent: 7560)

grep (PID: 7561, Parent: 7560, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7548, Parent: 1)

rtkit-daemon (PID: 7548, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7554, Parent: 1)

polkitd (PID: 7554, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7564, Parent: 1)

generate-config (PID: 7564, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7565, Parent: 7564)

pkill (PID: 7565, Parent: 7564, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7568, Parent: 1860)

dbus-daemon (PID: 7568, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7569, Parent: 1)

gdm-wait-for-drm (PID: 7569, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7574, Parent: 1)

systemd-journald (PID: 7574, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7579, Parent: 1)

systemd-logind (PID: 7579, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7614, Parent: 1)

rsyslogd (PID: 7614, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7622, Parent: 1)

dbus-daemon (PID: 7622, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7623, Parent: 1)

upowerd (PID: 7623, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7662, Parent: 1860)

pulseaudio (PID: 7662, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7682, Parent: 1)

gpu-manager (PID: 7682, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7684, Parent: 7682)

sh (PID: 7684, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7685, Parent: 7684)

grep (PID: 7685, Parent: 7684, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7686, Parent: 7682)

sh (PID: 7686, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7687, Parent: 7686)

grep (PID: 7687, Parent: 7686, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7688, Parent: 7682)

sh (PID: 7688, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7689, Parent: 7688)

grep (PID: 7689, Parent: 7688, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7692, Parent: 7682)

sh (PID: 7692, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7694, Parent: 7692)

grep (PID: 7694, Parent: 7692, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7696, Parent: 7682)

sh (PID: 7696, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7697, Parent: 7696)

grep (PID: 7697, Parent: 7696, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7703, Parent: 7682)

sh (PID: 7703, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7707, Parent: 7703)

grep (PID: 7707, Parent: 7703, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7710, Parent: 7682)

sh (PID: 7710, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7711, Parent: 7710)

grep (PID: 7711, Parent: 7710, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7712, Parent: 7682)

sh (PID: 7712, Parent: 7682, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7713, Parent: 7712)

grep (PID: 7713, Parent: 7712, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7693, Parent: 1)

rtkit-daemon (PID: 7693, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7701, Parent: 1)

polkitd (PID: 7701, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7714, Parent: 1)

generate-config (PID: 7714, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7715, Parent: 7714)

pkill (PID: 7715, Parent: 7714, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7718, Parent: 1860)

dbus-daemon (PID: 7718, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7721, Parent: 1)

gdm-wait-for-drm (PID: 7721, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7724, Parent: 1)

systemd-journald (PID: 7724, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7727, Parent: 1)

dbus-daemon (PID: 7727, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7730, Parent: 1)

systemd-logind (PID: 7730, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7772, Parent: 1)

rsyslogd (PID: 7772, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7786, Parent: 1)

upowerd (PID: 7786, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 7827, Parent: 1860)

pulseaudio (PID: 7827, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7832, Parent: 1)

gpu-manager (PID: 7832, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7833, Parent: 7832)

sh (PID: 7833, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7834, Parent: 7833)

grep (PID: 7834, Parent: 7833, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7836, Parent: 7832)

sh (PID: 7836, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7837, Parent: 7836)

grep (PID: 7837, Parent: 7836, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7838, Parent: 7832)

sh (PID: 7838, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7839, Parent: 7838)

grep (PID: 7839, Parent: 7838, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7840, Parent: 7832)

sh (PID: 7840, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7841, Parent: 7840)

grep (PID: 7841, Parent: 7840, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7844, Parent: 7832)

sh (PID: 7844, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7846, Parent: 7844)

grep (PID: 7846, Parent: 7844, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7848, Parent: 7832)

sh (PID: 7848, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7852, Parent: 7848)

grep (PID: 7852, Parent: 7848, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7859, Parent: 7832)

sh (PID: 7859, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7860, Parent: 7859)

grep (PID: 7860, Parent: 7859, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7861, Parent: 7832)

sh (PID: 7861, Parent: 7832, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7862, Parent: 7861)

grep (PID: 7862, Parent: 7861, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7845, Parent: 1)

rtkit-daemon (PID: 7845, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7855, Parent: 1)

polkitd (PID: 7855, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7863, Parent: 1)

generate-config (PID: 7863, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7864, Parent: 7863)

pkill (PID: 7864, Parent: 7863, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
wrjkngh4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
wrjkngh4.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1afa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1afb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1afcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1afe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b01c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b06c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6256.1.00007fc894400000.00007fc89441e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6256.1.00007fc894400000.00007fc89441e000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1afa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1afb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1afcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1afe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b01c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b06c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b0f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: wrjkngh4.elf PID: 6256	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: wrjkngh4.elf PID: 6256	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc091:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc0f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc109:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc11d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc131:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc145:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc159:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc16d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc181:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc195:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc1a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc1bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc1d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc1e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc1f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc20d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc221:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6361)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6430)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6587)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6770)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6905)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7047)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7187)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7336)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7480)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7614)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7772)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6426)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6567)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6707)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6846)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6985)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7124)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7274)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7423)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7574)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7724)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru. [malformed]
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.83.dr, syslog.192.dr, syslog.244.dr, syslog.296.dr, syslog.523.dr, syslog.139.dr, syslog.463.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38090

System Summary

Malicious sample detected (through community Yara rule)

Source: wrjkngh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6256.1.00007fc894400000.00007fc89441e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: wrjkngh4.elf PID: 6256, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6262, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2114, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 774, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1475, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1475, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1900, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2050, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2050, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2062, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2063, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2063, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2069, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2069, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2074, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2074, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2097, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2123, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2123, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2126, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2126, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6240, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6240, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6269, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6270, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6271, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6319, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6327, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6328, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6328, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6334, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 912, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 918, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1349, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1599, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1699, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2009, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2033, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2038, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2102, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2129, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2146, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2223, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2235, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2242, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2281, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2285, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2289, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2294, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2307, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2637, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 3236, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 4534, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6088, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6350, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6356, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6360, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6361, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6362, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6367, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6370, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6423, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6424, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6426, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6429, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6430, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6431, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6478, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6564, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6567, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6568, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6574, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6587, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6632, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6702, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6707, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6712, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6770, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6771, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6810, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6841, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6852, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6905, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6906, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6911, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6980, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6985, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6990, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7047, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7048, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7049, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7088, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7121, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7124, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7129, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7131, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7187, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7188, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7189, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7258, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7261, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7262, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7263, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7266, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7274, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7279, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7336, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7337, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7338, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7376, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7381, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7400, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7407, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7419, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7420, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7423, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7428, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7480, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7486, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7526, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7527, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7532, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7548, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7554, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7568, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7569, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7574, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7579, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7614, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7622, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7623, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7661, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7662, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7693, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7701, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7718, result: successful	Jump to behavior

Source: xfce4-panel.xml.new.33.dr

OLE indicator, VBA macros: true

Source: xfce4-panel.xml.new.33.dr

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6262, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2114, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 774, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1475, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1475, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1900, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2050, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2050, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2062, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2063, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2063, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2069, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2069, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2074, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2074, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2097, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2097, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2123, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2123, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2126, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2126, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6240, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6240, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6269, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6270, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6271, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6319, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6327, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6327, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6328, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6328, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6334, result: no such process	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 796, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 912, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 918, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1349, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1599, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1699, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2009, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2033, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2038, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2096, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2102, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2129, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2146, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2180, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2223, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2226, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2235, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2242, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2275, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2281, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2285, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2289, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2294, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2307, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 2637, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 3236, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 4534, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6088, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6340, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6350, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6356, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6360, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6361, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6362, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6367, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6370, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6423, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6424, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6426, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6429, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6430, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6431, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6478, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6564, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6567, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6568, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6574, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6587, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6632, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6702, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6707, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6712, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6770, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6771, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6810, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6841, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6852, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6905, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6906, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6911, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6980, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6985, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 6990, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7047, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7048, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7049, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7088, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7121, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7124, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7129, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7131, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7187, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7188, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7189, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7258, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7261, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7262, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7263, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7266, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7274, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7279, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7336, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7337, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7338, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7376, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7381, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7400, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7407, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7419, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7420, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7423, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7428, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7480, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7486, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7526, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7527, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7532, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7548, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7554, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7568, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7569, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7574, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7579, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7614, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7622, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7623, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7661, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7662, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7693, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7701, result: successful	Jump to behavior
Source: /tmp/wrjkngh4.elf (PID: 6260)	SIGKILL sent: pid: 7718, result: successful	Jump to behavior

Source: wrjkngh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6256.1.00007fc894400000.00007fc89441e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: wrjkngh4.elf PID: 6256, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal88.spre.troj.evad.linELF@0/188@1186/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6356)	File: /proc/6356/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6411)	File: /proc/6411/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6424)	File: /proc/6424/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6568)	File: /proc/6568/mounts
Source: /usr/bin/dbus-daemon (PID: 6810)	File: /proc/6810/mounts
Source: /usr/bin/dbus-daemon (PID: 6851)	File: /proc/6851/mounts
Source: /usr/bin/dbus-daemon (PID: 7088)	File: /proc/7088/mounts
Source: /usr/bin/dbus-daemon (PID: 7131)	File: /proc/7131/mounts
Source: /usr/bin/dbus-daemon (PID: 7261)	File: /proc/7261/mounts
Source: /usr/bin/dbus-daemon (PID: 7381)	File: /proc/7381/mounts
Source: /usr/bin/dbus-daemon (PID: 7419)	File: /proc/7419/mounts
Source: /usr/bin/dbus-daemon (PID: 7532)	File: /proc/7532/mounts
Source: /usr/bin/dbus-daemon (PID: 7568)	File: /proc/7568/mounts
Source: /usr/bin/dbus-daemon (PID: 7622)	File: /proc/7622/mounts
Source: /usr/bin/dbus-daemon (PID: 7718)	File: /proc/7718/mounts
Source: /usr/bin/dbus-daemon (PID: 7727)	File: /proc/7727/mounts

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6268)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6270)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6291)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6291)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6291)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6291)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6319)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6319)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6319)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6319)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6327)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6338)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 6339)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 6340)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77953M46s74	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77954crG8X7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77955OGoKK8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77956kHJbG5	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77957CNP7l8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77958DxPBl8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77959XRXiq6	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77966RKEKW4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77975qrzsL6	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77984NDwNu7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77985cBkNH4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77986Z8es95	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:77988gtB0K8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	File: /run/systemd/journal/streams/.#9:78073i8XBJ8	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 6431)	Directory: <invalid fd (12)>/..	Jump to behavior
Source: /usr/lib/upower/upowerd (PID: 6431)	Directory: <invalid fd (11)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6478)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6478)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6478)	File: /run/systemd/seats/.#seat0pAKRt0	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6478)	File: /run/systemd/inhibit/.#1Lw17Z1	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6567)	File: /run/systemd/journal/streams/.#9:78604GfWMpK
Source: /lib/systemd/systemd-journald (PID: 6567)	File: /run/systemd/journal/streams/.#9:78611yf7mDN
Source: /lib/systemd/systemd-journald (PID: 6567)	File: /run/systemd/journal/streams/.#9:786236yDTNJ
Source: /lib/systemd/systemd-journald (PID: 6567)	File: /run/systemd/journal/streams/.#9:78624ub3GJL
Source: /lib/systemd/systemd-journald (PID: 6567)	File: /run/systemd/journal/streams/.#9:78632E91dyL
Source: /lib/systemd/systemd-journald (PID: 6567)	File: /run/systemd/journal/streams/.#9:78633hHLDMN
Source: /lib/systemd/systemd-logind (PID: 6573)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6573)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6573)	File: /run/systemd/seats/.#seat0AE6LHe
Source: /lib/systemd/systemd-logind (PID: 6573)	File: /run/systemd/inhibit/.#1KyQ5td
Source: /lib/systemd/systemd-logind (PID: 6573)	File: /run/systemd/inhibit/.#1FgbPGe
Source: /usr/lib/upower/upowerd (PID: 6632)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6632)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6707)	File: /run/systemd/journal/streams/.#9:80998eazKQk
Source: /lib/systemd/systemd-journald (PID: 6707)	File: /run/systemd/journal/streams/.#9:80999GJF5Kn
Source: /lib/systemd/systemd-journald (PID: 6707)	File: /run/systemd/journal/streams/.#9:810077eZ4Dm
Source: /lib/systemd/systemd-journald (PID: 6707)	File: /run/systemd/journal/streams/.#9:81016sAONbn
Source: /lib/systemd/systemd-journald (PID: 6707)	File: /run/systemd/journal/streams/.#9:81023jviDlk
Source: /lib/systemd/systemd-journald (PID: 6707)	File: /run/systemd/journal/streams/.#9:81105YgMT4k
Source: /lib/systemd/systemd-logind (PID: 6712)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6712)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6712)	File: /run/systemd/seats/.#seat0IKt2mI
Source: /lib/systemd/systemd-logind (PID: 6712)	File: /run/systemd/inhibit/.#1zcExVI
Source: /lib/systemd/systemd-logind (PID: 6712)	File: /run/systemd/inhibit/.#1o1RmuH
Source: /usr/lib/upower/upowerd (PID: 6771)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6771)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:81492DUI5LS
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:814932C3CzT
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:81505oiFOxT
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:81506iXiOjS
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:81514Ck6E0Q
Source: /lib/systemd/systemd-journald (PID: 6846)	File: /run/systemd/journal/streams/.#9:81515gSzejT
Source: /lib/systemd/systemd-logind (PID: 6852)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6852)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6852)	File: /run/systemd/seats/.#seat0m1rBLl
Source: /lib/systemd/systemd-logind (PID: 6852)	File: /run/systemd/inhibit/.#1ODU0qi
Source: /lib/systemd/systemd-logind (PID: 6852)	File: /run/systemd/inhibit/.#1lC5hcj
Source: /usr/lib/upower/upowerd (PID: 6911)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6911)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 6985)	File: /run/systemd/journal/streams/.#9:82821dYbOcp
Source: /lib/systemd/systemd-journald (PID: 6985)	File: /run/systemd/journal/streams/.#9:82830ewRszn
Source: /lib/systemd/systemd-journald (PID: 6985)	File: /run/systemd/journal/streams/.#9:82838p1WP7o
Source: /lib/systemd/systemd-journald (PID: 6985)	File: /run/systemd/journal/streams/.#9:82839KKekto
Source: /lib/systemd/systemd-journald (PID: 6985)	File: /run/systemd/journal/streams/.#9:82854UcZD8k
Source: /lib/systemd/systemd-journald (PID: 6985)	File: /run/systemd/journal/streams/.#9:82855SbiLcp
Source: /lib/systemd/systemd-logind (PID: 6990)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 6990)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6990)	File: /run/systemd/seats/.#seat0FZw1WM
Source: /lib/systemd/systemd-logind (PID: 6990)	File: /run/systemd/inhibit/.#1eswKrK
Source: /lib/systemd/systemd-logind (PID: 6990)	File: /run/systemd/inhibit/.#1LGAmEJ
Source: /usr/lib/upower/upowerd (PID: 7048)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7048)	Directory: <invalid fd (11)>/..
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:844704YrhHR
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84479FYL9KS
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84487N7lJoS
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:844996AoD5U
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84501ewnZvS
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84509vLU5JQ
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84594cIDvTT
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84595qMx8WU
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:84615cOCihS
Source: /lib/systemd/systemd-journald (PID: 7124)	File: /run/systemd/journal/streams/.#9:83716usJcWU
Source: /lib/systemd/systemd-logind (PID: 7129)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 7129)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7129)	File: /run/systemd/seats/.#seat0sMk6ce
Source: /lib/systemd/systemd-logind (PID: 7129)	File: /run/systemd/inhibit/.#1GgkZei
Source: /lib/systemd/systemd-logind (PID: 7129)	File: /run/systemd/inhibit/.#1PKzD3d
Source: /usr/lib/upower/upowerd (PID: 7188)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7188)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 7266)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86295VKx5ag
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86296fgWFQe
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86300j24mMb
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86303pMtKhd
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86403m2y3Ee
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86404plejjd
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86405E6p3of
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:864077LPeic
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86415ZsmoEe
Source: /lib/systemd/systemd-journald (PID: 7274)	File: /run/systemd/journal/streams/.#9:86422NNkBdd
Source: /lib/systemd/systemd-logind (PID: 7279)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 7279)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7279)	File: /run/systemd/seats/.#seat0BsytGD
Source: /lib/systemd/systemd-logind (PID: 7279)	File: /run/systemd/inhibit/.#1PkbvgB
Source: /lib/systemd/systemd-logind (PID: 7279)	File: /run/systemd/inhibit/.#1iF1WVB
Source: /usr/lib/upower/upowerd (PID: 7337)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7337)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 7407)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:870267aZShw
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:87028CANDws
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:8702972rxYs
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:87030utyNyt
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:870364UFCMu
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:88068d2oaav
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:88069bIGFdu
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:88070O5Nb3s
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:88078fbw8tv
Source: /lib/systemd/systemd-journald (PID: 7423)	File: /run/systemd/journal/streams/.#9:88079WXtuXs
Source: /lib/systemd/systemd-logind (PID: 7428)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 7428)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7428)	File: /run/systemd/seats/.#seat0DPz5GT
Source: /lib/systemd/systemd-logind (PID: 7428)	File: /run/systemd/inhibit/.#1ilknTS
Source: /lib/systemd/systemd-logind (PID: 7428)	File: /run/systemd/inhibit/.#1Pp8jKQ
Source: /usr/lib/upower/upowerd (PID: 7486)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7486)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 7554)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89453EgxA9T
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89454yQEUNW
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89460XfccNW
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89461cNkLiU
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:894625Xo89V
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89463R4m6iV
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89471sKgErV
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89472GqeNgU
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89480YFYfIT
Source: /lib/systemd/systemd-journald (PID: 7574)	File: /run/systemd/journal/streams/.#9:89487mY57NS
Source: /lib/systemd/systemd-logind (PID: 7579)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 7579)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7579)	File: /run/systemd/seats/.#seat0GFDNUi
Source: /lib/systemd/systemd-logind (PID: 7579)	File: /run/systemd/inhibit/.#1z0i9rj
Source: /lib/systemd/systemd-logind (PID: 7579)	File: /run/systemd/inhibit/.#1J1juhi
Source: /usr/lib/upower/upowerd (PID: 7623)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7623)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 7701)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7730)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd-logind (PID: 7730)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7730)	File: /run/systemd/seats/.#seat09UiAIG
Source: /lib/systemd/systemd-logind (PID: 7730)	File: /run/systemd/inhibit/.#1DW27aH
Source: /lib/systemd/systemd-logind (PID: 7730)	File: /run/systemd/inhibit/.#1T9NlLJ
Source: /usr/lib/upower/upowerd (PID: 7786)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 7786)	Directory: <invalid fd (11)>/..
Source: /usr/lib/policykit-1/polkitd (PID: 7855)	Directory: /root/.cache

Source: /usr/bin/dbus-daemon (PID: 7088)	File opened: /proc/7088/status
Source: /usr/bin/dbus-daemon (PID: 7088)	File opened: /proc/7088/attr/current
Source: /usr/bin/dbus-daemon (PID: 7088)	File opened: /proc/6990/cmdline
Source: /usr/bin/dbus-daemon (PID: 7088)	File opened: /proc/7048/cmdline
Source: /usr/bin/dbus-daemon (PID: 7088)	File opened: /proc/7049/cmdline
Source: /usr/bin/dbus-daemon (PID: 7088)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/7565/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/7565/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/7564/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/7564/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/3088/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/3088/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/230/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/230/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/231/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/231/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/111/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/232/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/232/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/112/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/112/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/233/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/233/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/113/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/113/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/234/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/234/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/1335/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/1335/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/114/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/114/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/235/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/235/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/1334/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/1334/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/115/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/115/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/236/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/236/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/116/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/116/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/237/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/237/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/117/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/117/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/910/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/910/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/118/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/118/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/119/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/119/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/6363/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/6363/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/15/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/6366/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/6366/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/16/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/16/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/17/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/17/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/18/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/18/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/120/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/120/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/121/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/121/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/122/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/122/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/243/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/243/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/123/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/123/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/2/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/124/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/124/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/3/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/3/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/125/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/125/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/4/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/4/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/126/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/126/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/248/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/248/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/6/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/6/cmdline
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/127/status
Source: /usr/bin/pkill (PID: 7565)	File opened: /proc/127/cmdline

Source: /usr/bin/gpu-manager (PID: 6542)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6545)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6547)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6549)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6551)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6553)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6555)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6557)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6677)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6680)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6682)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6686)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6690)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6692)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6694)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6696)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6816)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6818)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6820)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6822)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6824)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6828)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6833)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6835)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6955)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6957)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6959)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6961)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6965)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6969)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6972)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6976)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7093)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7096)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7098)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7100)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7102)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7108)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7113)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7115)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7232)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7235)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7239)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7243)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7247)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7250)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7252)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7254)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7386)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7388)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7390)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7392)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7394)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7396)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7401)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7408)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7535)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7537)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7539)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7541)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7543)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7547)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7555)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7560)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7684)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7686)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7688)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7692)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7696)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7703)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7710)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7712)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7833)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7836)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7838)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7840)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7844)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7848)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7859)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7861)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 6543)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6546)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6548)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6550)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6552)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6554)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6556)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6558)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6678)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6681)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6683)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6687)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6691)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6693)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6695)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6697)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6817)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6819)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6821)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6823)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6825)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6829)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6834)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6836)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6956)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6958)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6960)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6962)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6966)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6971)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6975)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6977)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7095)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7097)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7099)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7101)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7103)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7109)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7114)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7116)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7233)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7236)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7240)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7244)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7249)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7251)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7253)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7255)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7387)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7389)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7391)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7393)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7395)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7397)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7403)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7409)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7536)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7538)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7540)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7542)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7544)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7549)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7556)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7561)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7685)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7687)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7689)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7694)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7697)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7707)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7711)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7713)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7834)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7837)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7839)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7841)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7846)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7852)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7860)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7862)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 6562)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6699)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6840)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6979)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7118)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7257)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7416)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7565)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7715)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7864)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /usr/bin/xfce4-session (PID: 6331)

Rm executable: /usr/bin/rm -> rm -f /home/saturnino/.cache/sessions/Thunar-2ec9153f1-6fa0-4067-96b1-e5fe875b1e51

Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 6426)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6567)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6707)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6846)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6985)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7124)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7274)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7423)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7574)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7724)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 6541)

Reads version info: /etc/issue

Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 6361)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6430)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6430)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6540)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6587)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6587)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6675)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6770)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6770)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6815)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6905)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6905)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6952)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7047)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7047)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7089)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7187)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7187)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7231)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7336)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7336)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7384)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7480)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7480)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7533)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7614)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7614)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 7682)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7772)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 7832)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/wrjkngh4.elf (PID: 6258)

File: /tmp/wrjkngh4.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6540)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6675)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6815)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6952)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7089)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7231)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7384)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7533)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7682)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7832)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6562)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6699)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6840)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6979)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7118)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7257)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7262)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7376)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7416)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7526)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7565)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7662)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7715)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7827)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7864)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/wrjkngh4.elf (PID: 6256)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6268)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6269)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6270)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6271)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6272)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6273)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6319)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6327)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 6328)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 6334)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfwm4 (PID: 6338)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 6339)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/xfdesktop (PID: 6340)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6361)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6426)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6430)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6540)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6541)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6567)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6587)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6675)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6707)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6770)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6815)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6846)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6905)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6952)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6985)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7047)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7089)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7124)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7187)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7231)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7262)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7274)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7336)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7376)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7384)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7423)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7480)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7526)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7533)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7574)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7614)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7662)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7682)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7724)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7772)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7827)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7832)	Queries kernel information via 'uname':

Source: wrjkngh4.elf, 6256.1.0000562180603000.0000562180666000.rw-.sdmp	Binary or memory string: !V5!/etc/qemu-binfmt/sh4
Source: wrjkngh4.elf, 6256.1.00007ffdd9afe000.00007ffdd9b1f000.rw-.sdmp	Binary or memory string: \|!V/tmp/qemu-open.KrL8wh\
Source: wrjkngh4.elf, 6256.1.00007ffdd9afe000.00007ffdd9b1f000.rw-.sdmp	Binary or memory string: cx86_64/usr/bin/qemu-sh4/tmp/wrjkngh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/wrjkngh4.elf
Source: wrjkngh4.elf, 6256.1.00007ffdd9afe000.00007ffdd9b1f000.rw-.sdmp	Binary or memory string: /qemu-open.XXXXX
Source: wrjkngh4.elf, 6256.1.00007ffdd9afe000.00007ffdd9b1f000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: wrjkngh4.elf, 6256.1.0000562180603000.0000562180666000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: wrjkngh4.elf, 6256.1.00007ffdd9afe000.00007ffdd9b1f000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.KrL8wh

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: wrjkngh4.elf, type: SAMPLE
Source: Yara match	File source: 6256.1.00007fc894400000.00007fc89441e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wrjkngh4.elf PID: 6256, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: wrjkngh4.elf, type: SAMPLE
Source: Yara match	File source: 6256.1.00007fc894400000.00007fc89441e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: wrjkngh4.elf PID: 6256, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	3 Scripting	Valid Accounts	Windows Management Instrumentation	3 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
wrjkngh4.elf	40%	Virustotal		Browse
wrjkngh4.elf	39%	ReversingLabs	Linux.Exploit.Mirai
wrjkngh4.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Name	IP	Active	Malicious	Reputation
daisy.ubuntu.com	162.213.35.25	true	false	high
fingwi.cardiacpure.ru	178.215.238.112	true	false	high
fingwi.cardiacpure.ru. [malformed]	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.83.dr, syslog.192.dr, syslog.244.dr, syslog.296.dr, syslog.523.dr, syslog.139.dr, syslog.463.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.24	unknown	United States	41231	CANONICAL-ASGB	false
178.215.238.112	fingwi.cardiacpure.ru	Germany	10753	LVLT-10753US	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.24	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
178.215.238.112	ivwebcda7.elf	Get hash	malicious	Mirai	Browse
	wev86.elf	Get hash	malicious	Mirai	Browse
	jefne64.elf	Get hash	malicious	Mirai	Browse
	qbfwdbg.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	nvebfe64.elf	Get hash	malicious	Mirai	Browse
	rjnven64.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	wev86.elf	Get hash	malicious	Mirai	Browse
	jefne64.elf	Get hash	malicious	Mirai	Browse
	qbfwdbg.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	wind.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	wind.spc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	wind.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	wind.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	loligang.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	loligang.arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	B_Y_T_E_x86.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
fingwi.cardiacpure.ru	qbfwdbg.elf	Get hash	malicious	Mirai	Browse	178.215.238.112

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	wev86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	jefne64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	qbfwdbg.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
LVLT-10753US	ivwebcda7.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wev86.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	jefne64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	qbfwdbg.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	ngwa5.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	nvebfe64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	rjnven64.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
CANONICAL-ASGB	woega6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	bot.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	i.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	bot.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	bot.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	bot.ppc.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
INIT7CH	woega6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	arm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	bot.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	bot.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	bot.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	bot.ppc.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/home/saturnino/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml.new

Download File

Process:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	5128
Entropy (8bit):	4.457618060812407
Encrypted:	false
SSDEEP:	96:R14GBdYLSNUH+ZAFQrSRR6dn0tWlTDFwIfM/vfzPpjT9I3jZ/qeH2Wg:74GnYLSNUH+ZAyrSRRYn0taTDKIfMPzv
MD5:	2A2A7C34B585CDAE5E123F3C5100C253
SHA1:	E814B1B1531B25581DB76CB813C85E53E1390BA4
SHA-256:	BCA18B654D038B69B25ACDF84CFF99BF521A1B54F482F1DE2B54CE13AC219A04
SHA-512:	CEC7A3A7A6AD6C2A6D101A3BF6D89A01EBDCEB0121AA3DE1CEA024268410B39E4E9188382439C7C3FD734C66764B66B13F1D277700B00A2FCB35CB67E31996DD
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<channel name="xfce4-panel" version="1.0">. <property name="configver" type="int" value="2"/>. <property name="panels" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <property name="panel-1" type="empty">. <property name="position" type="string" value="p=6;x=0;y=0"/>. <property name="length" type="uint" value="100"/>. <property name="position-locked" type="bool" value="true"/>. <property name="icon-size" type="uint" value="16"/>. <property name="size" type="uint" value="26"/>. <property name="plugin-ids" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <value type="int" value="3"/>. <value type="int" value="4"/>. <value type="int" value="5"/>. <value type="int" value="6"/>. <value type="int" value="7"/>. <value type="int" value="8"/>. <value type="int" value="9"/>. <value type="in

/run/systemd/inhibit/.#1DW27aH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if4t0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApffApLHK7wR9n
MD5:	90845B9973E66E4FBF5F9949EA14ECF1
SHA1:	1E9469A9819523C68A6DA4FC564301EC33F6152A
SHA-256:	40A9B7DD7915A6F0C7ACAB2E5BB0D50E6AAFEB8248BDF31643C12A187651057B
SHA-512:	076B6C2094A4359C0C41210CDF6CF70F00E9A45402C3CE28F10FD2D10D3651ACB9E0B6C8E2C2ECB33C9E3BC89081493D9D01B79EA1EA24BB207D72320906DEE4
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7623.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1FgbPGe

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifwIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfwApLHK7wR9n
MD5:	E17EAE922E54D9A5762E00573A93F026
SHA1:	60A2BBD98784647899774123EA9D46BC0E00916D
SHA-256:	64D7F3665AD8F475A89AE77472F683E1FAA10CF4DA2A05995BDFC70FE82A0B34
SHA-512:	9A4D6FCC1F48585A41A7EAAED14D1D54E32349CF2BEB5C1973ED8583AD73A3DC0B133CC4C5FEE191FDDA27C2DEBC1CDFEE30D056AD865C2B6941ACB5B8DAEDA8
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6632.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1GgkZei

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if5M1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf50ApLHK7wR9n
MD5:	A2E892AFCE2B152D732615FF6659F8CD
SHA1:	58460BC7AD721925ED6E2D7BF3350F9F98BDEF60
SHA-256:	3C6370BD25A8D828DAFE9590652E1340EBDC850792C2ADD95F841F6A997E8CD3
SHA-512:	307669A8B54A628290B5E6D0D213316A830F224C0217453366F22993E12839B2BA4AE5306BBD628C23BF19B325C95C94CAC2155EB8B0579396012A3649C8DD3B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7048.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1J1juhi

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if4t0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApffApLHK7wR9n
MD5:	90845B9973E66E4FBF5F9949EA14ECF1
SHA1:	1E9469A9819523C68A6DA4FC564301EC33F6152A
SHA-256:	40A9B7DD7915A6F0C7ACAB2E5BB0D50E6AAFEB8248BDF31643C12A187651057B
SHA-512:	076B6C2094A4359C0C41210CDF6CF70F00E9A45402C3CE28F10FD2D10D3651ACB9E0B6C8E2C2ECB33C9E3BC89081493D9D01B79EA1EA24BB207D72320906DEE4
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7623.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1KyQ5td

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf3ApLHK7wR9n
MD5:	13BD543BCA223031677FC8D740129F8D
SHA1:	7F1718055C40CF525010EAA90ADCCD9276C9266F
SHA-256:	E4E7C2A53176550ADD0A4556BB140258B7C63753265F4D68AFA81D30295E424C
SHA-512:	5B17F0A6AA7A38C086390CC92053D1E229690074A8CBAB24A45A9E1507F7F7A8195225675819A188C06F9E029E644BDC7EAE9240DF36BF685D2ADAFA08CFBD86
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6431.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1LGAmEJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if5M1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf50ApLHK7wR9n
MD5:	A2E892AFCE2B152D732615FF6659F8CD
SHA1:	58460BC7AD721925ED6E2D7BF3350F9F98BDEF60
SHA-256:	3C6370BD25A8D828DAFE9590652E1340EBDC850792C2ADD95F841F6A997E8CD3
SHA-512:	307669A8B54A628290B5E6D0D213316A830F224C0217453366F22993E12839B2BA4AE5306BBD628C23BF19B325C95C94CAC2155EB8B0579396012A3649C8DD3B
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7048.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1Lw17Z1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9if3IppTMXSHK72X8/Sf9n:SbFuFyL8OAApf3ApLHK7wR9n
MD5:	13BD543BCA223031677FC8D740129F8D
SHA1:	7F1718055C40CF525010EAA90ADCCD9276C9266F
SHA-256:	E4E7C2A53176550ADD0A4556BB140258B7C63753265F4D68AFA81D30295E424C
SHA-512:	5B17F0A6AA7A38C086390CC92053D1E229690074A8CBAB24A45A9E1507F7F7A8195225675819A188C06F9E029E644BDC7EAE9240DF36BF685D2ADAFA08CFBD86
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6431.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1ODU0qi

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifGW0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfl0ApLHK7wR9n
MD5:	A6E2084E44C164CF3C0ECA9E06A5854C
SHA1:	8706C6828D208463D92C9F0C45D7DE7397895189
SHA-256:	C4DB8101B191918EEB24312FD1D82011498F4E3933627C72279DCC32DDC4A341
SHA-512:	663909660559107691DFC7756F324E3D997EA9ACF533E301E38A8A5BD1EFA41465A535A81BBB29881AEA6F4DADEBA68E97E4F145857733EE91C1AEBD9C2BABFB
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6771.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1PKzD3d

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifdIM1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfdnApLHK7wR9n
MD5:	7488E9F40F33A190F8912973605B5A56
SHA1:	897228A387B3C902F0E7384486490D3DB363EE7D
SHA-256:	7C462FDD030169135BE8FBF2D48AF833A630E4C5D918E1006D1DF429BF8811F6
SHA-512:	3942AC61A01C2048C5FD65F7D721512FF1BC7CB05B9B81E33E8080E3633583061EAE6A695ED1536EF16BB42626A2744EDA8D5310FBB1704D4491EC06A25BD099
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7188.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1PkbvgB

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifdIM1IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfdnApLHK7wR9n
MD5:	7488E9F40F33A190F8912973605B5A56
SHA1:	897228A387B3C902F0E7384486490D3DB363EE7D
SHA-256:	7C462FDD030169135BE8FBF2D48AF833A630E4C5D918E1006D1DF429BF8811F6
SHA-512:	3942AC61A01C2048C5FD65F7D721512FF1BC7CB05B9B81E33E8080E3633583061EAE6A695ED1536EF16BB42626A2744EDA8D5310FBB1704D4491EC06A25BD099
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7188.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1Pp8jKQ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifsvyAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfsvyAApLHK7wR9n
MD5:	6E0D48B33EB539EBD8455DD9C7668F28
SHA1:	6DC8A83E854ECF62DF1C04DC5E7F43D197E35C2F
SHA-256:	D4DEF047FE02E88DAC57CA276453F3D74C0F36CC461F0EFEAC7FF3E259D59F38
SHA-512:	29F2B2598D55A65185F6AA5847033FF3F05DCA96F718B6871A29F8134EB942CCC04091CE97095145778593842F85F4720AF4C080EEE28F3C066BCAC01837AF62
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7486.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1T9NlLJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifLOYYAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfLpYAApLHK7wR9n
MD5:	5555A1CA90683D3E7DED76D48A58B592
SHA1:	5BE6AB61D8E8D91A49F71BF7F4845F502AE5A528
SHA-256:	A42C04B346FD926C7B6E9FBB459D8FFA58D93BAF8DD901119AE9A22D9B3CAD68
SHA-512:	918F27EBAB775DB7D2CDB472EC778068531B826DFC4C3EA7486B7AE8068C46BD6B3C5BCD5F8B25D9346DA5578871FAF953323E9CA8C7899D08C908EF0906B005
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7786.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1eswKrK

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifqIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfqApLHK7wR9n
MD5:	FCE080967E55FB5B2B5D630D421F038E
SHA1:	ABF7E2CF62FF7D78AEB76090B00ACCA516DB9618
SHA-256:	DB5F70B185884B6BAD5376D7F5DB5B7CAA389DB56A521470130F13A93FB01546
SHA-512:	A163BF2AA79BDC4561BB2CD542B2C9771E8A453E7EB8CFAEDF3AE850CDD44F6AA2ADA29336033D76E69C81B73CD90A426D39BC74C0C5D247B787D13DC3E15672
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6911.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1iF1WVB

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifMc+0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfj+0ApLHK7wR9n
MD5:	BE3ED645AF312A3AB1980A7E4D7458FB
SHA1:	BC9768896BD5DDFBBD396A1C2664F50FAD8D9FE2
SHA-256:	CD42019B1AE1FAB73FB48D5330B62EB53100357A3427AE79CD97E37099084639
SHA-512:	D15848FC31062D0EB01D8B4127D4BA7DEBE09D71F513E4C74E6F35DEEBB91D36BDBE2F4B3FAFAAB43223A423CCB1FEF0F014BB8E3307D5DF0F9D220F4462B9B4
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7337.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1ilknTS

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifMc+0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfj+0ApLHK7wR9n
MD5:	BE3ED645AF312A3AB1980A7E4D7458FB
SHA1:	BC9768896BD5DDFBBD396A1C2664F50FAD8D9FE2
SHA-256:	CD42019B1AE1FAB73FB48D5330B62EB53100357A3427AE79CD97E37099084639
SHA-512:	D15848FC31062D0EB01D8B4127D4BA7DEBE09D71F513E4C74E6F35DEEBB91D36BDBE2F4B3FAFAAB43223A423CCB1FEF0F014BB8E3307D5DF0F9D220F4462B9B4
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7337.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1lC5hcj

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.090645391357815
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifqIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfqApLHK7wR9n
MD5:	FCE080967E55FB5B2B5D630D421F038E
SHA1:	ABF7E2CF62FF7D78AEB76090B00ACCA516DB9618
SHA-256:	DB5F70B185884B6BAD5376D7F5DB5B7CAA389DB56A521470130F13A93FB01546
SHA-512:	A163BF2AA79BDC4561BB2CD542B2C9771E8A453E7EB8CFAEDF3AE850CDD44F6AA2ADA29336033D76E69C81B73CD90A426D39BC74C0C5D247B787D13DC3E15672
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6911.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1o1RmuH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifGW0IppTMXSHK72X8/Sf9n:SbFuFyL8OAApfl0ApLHK7wR9n
MD5:	A6E2084E44C164CF3C0ECA9E06A5854C
SHA1:	8706C6828D208463D92C9F0C45D7DE7397895189
SHA-256:	C4DB8101B191918EEB24312FD1D82011498F4E3933627C72279DCC32DDC4A341
SHA-512:	663909660559107691DFC7756F324E3D997EA9ACF533E301E38A8A5BD1EFA41465A535A81BBB29881AEA6F4DADEBA68E97E4F145857733EE91C1AEBD9C2BABFB
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6771.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1z0i9rj

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifsvyAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfsvyAApLHK7wR9n
MD5:	6E0D48B33EB539EBD8455DD9C7668F28
SHA1:	6DC8A83E854ECF62DF1C04DC5E7F43D197E35C2F
SHA-256:	D4DEF047FE02E88DAC57CA276453F3D74C0F36CC461F0EFEAC7FF3E259D59F38
SHA-512:	29F2B2598D55A65185F6AA5847033FF3F05DCA96F718B6871A29F8134EB942CCC04091CE97095145778593842F85F4720AF4C080EEE28F3C066BCAC01837AF62
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=7486.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#1zcExVI

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.109910338925392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifwIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfwApLHK7wR9n
MD5:	E17EAE922E54D9A5762E00573A93F026
SHA1:	60A2BBD98784647899774123EA9D46BC0E00916D
SHA-256:	64D7F3665AD8F475A89AE77472F683E1FAA10CF4DA2A05995BDFC70FE82A0B34
SHA-512:	9A4D6FCC1F48585A41A7EAAED14D1D54E32349CF2BEB5C1973ED8583AD73A3DC0B133CC4C5FEE191FDDA27C2DEBC1CDFEE30D056AD865C2B6941ACB5B8DAEDA8
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6632.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/journal/streams/.#9:77953M46s74

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.525423258917985
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9GpQdKcGDRUIA8v8+:SbFuFyLVIg1BG+f+MEadKzyI/v8ji4s
MD5:	091E22CDD7A0B4FDC85EABBAF57E73D0
SHA1:	0AE75260CFAEA48DE27F07395742FF8A8CD52C69
SHA-256:	F0F8797D3CC41715C299BDA6DB07CA608E125467902AD5D3FFF7F667BB33099B
SHA-512:	1E641B801C01E8CD8332DB19D0DEB8FD43278CB864623EA4B30617C4920248E306FCBD942BD9F71EAFEE2C877DEDBDCB3468DDAE617B3B8AEBDD546789FA605E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=79f0d266cb594c7ea99cf4147159ceb9.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:77954crG8X7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.405862650403058
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+2AF1ojT99js1Had9:SbFuFyLVIg1BG+f+M+2AFejZ9josQu
MD5:	BDC047EAD6943163CD202D866E2C0D87
SHA1:	50BCE0E53690361B5D6BC93F45EFBF9D70341F9B
SHA-256:	DE12984529DAF811A10ABE6BA21D390B88ACB3186D2501615C05305F7589BBA4
SHA-512:	3C73CD2DA5EA9D2A2DE3C2454EE539C39769C4287472CC9F660172EB7CD8AA6104F93C9D5AAC19DDE8F6C3891E4198CA0D45A06A3F9B6A334C8F5EDBA428E50E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4021e413e59941758aa7e0bb59fe51bf.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77955OGoKK8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.391059234673619
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyKLKP3vF2jdCLKzK:qgFq6g10+f+MFKOCLAK
MD5:	F48223C5C1A02E20400AF123F79C4B9A
SHA1:	1ABD9CEDA0CDD13F75FDB7B98AC79554BA2858C9
SHA-256:	E639014BD6FC1BA60D9FC28DDC466BA057B4B9C9CBBFD4ED407905AC04263CC4
SHA-512:	1F7B6A6E42977D9CDAF17C25A943002F8CA1B2ADE8C1A7D7451D120E4244488A6B41214DD636498B5A28A47B82FC405D7B53E1092E1254163A682EB175AEFF44
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=819e6beed97c4e5c8ac5ff80a57d4cb2.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:77956kHJbG5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3446959450013685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6dBUnlWM3iZjshQJT:SbFuFyLVIg1BG+f+M6dS0TjtWL0
MD5:	9B1F03A3EE5AD7957EFB6C480E304A65
SHA1:	B0697A558D01EC288B6ACBF3AC3FB7699FC2354F
SHA-256:	59DEA07F58564214EEEC6EFE5FADCBC174756E432C968BDCC39BC55DEF01F641
SHA-512:	27190357AC13ED7750ECBFD124AEB8C9D27A126DAEEA628270CFB08C5B00AE3A59F37E2E90A852243C40FD4FE6DFB1DB48B27D351E227C25FB3C99908F207861
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=064b056fa7ef46cf93ee8110a87c88a4.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:77957CNP7l8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.420900067525218
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrzvLrbUQmrvswsjsf:SbFuFyLVIg1BG+f+Mbrbo7sZjfGt
MD5:	C82EC5244B981268B569C26578BFBB99
SHA1:	2C34589E938885CB8DE95BE007856AF270455A52
SHA-256:	10B1A9C7E84F7CBC95F9F0788905BFEEC20944059B04E0C5F1D0651D3D39D878
SHA-512:	1F70F6D82FAE19E14BCDD51C9D12384AB32B1D920D131154B51AAA4FFEA7C6B6AEA950E481CB37EDD1A5D1733DA669CA17AE9EA43E00063BC89F51DD2D400F4C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ab6f1403655844a7b68f1c03654eb262.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:77958DxPBl8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.352931673293833
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvG527HFU8DN2js1Ha:SbFuFyLVIg1BG+f+ML7lU8D0joa
MD5:	A12CC6E1F1AC460EBC7AE4EF2400AA3B
SHA1:	86FEF46B68D6BAC11D09754A03465EEC16A00040
SHA-256:	998CA07709280D2EC4B49234B0CC89233759A24BB508AA9632C74AA28BB20AC5
SHA-512:	C515A1633A84009A04202247D1B491562A4544680B1DFF85DF6C789DBF1CEA52BA0802AD64B42B717271DECDC974DDE3748BFAB741201397973758F58A782093
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e80e6b0f44b34e6e8a84c3aba2581b9f.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:77959XRXiq6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.36869601507193
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvCO3E/VpHVjAglsjx:SbFuFyLVIg1BG+f+M6O0/VN98josQu
MD5:	F9A8E9535E5C48B5CBCFFF3E4AA975D4
SHA1:	8E04BA1E8F805ACA167AFC21F05BDB563A385128
SHA-256:	17D2BC291D9641C9C6775AB0F2BD8F4CBEBD6046E849B14872A01B01046B1E18
SHA-512:	21ACBA89A10349504D844992F8FEF40740E10095053A22CC053B783D5071DB9FE34DC40762B5C08725086CF5CB95A6D83DEB61DBA29F568FBEDE65A0B5D3EFB5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e01006eaa3c44a9cac0c763e82f00b93.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77966RKEKW4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.370119688415329
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MBDRUEmlsMqjdCLKzK:qgFq6g10+f+MBD2s3CLAK
MD5:	0D8622B2A7309271160EDAD111D30F31
SHA1:	6A2143CB73B4504B78167FB7E16F2FC6D759E2CA
SHA-256:	12BD64856B518F432A9B72B7726DFE18425C42420323CB9C77F967EF20078ADE
SHA-512:	1995D0FB5E21889EDD488F6656DFE2D97946143B3B952CD0C03B932E3081A1562936034ACB972860C833AEC85961B5061E0A1E34CBF81C87EBD16B5CD06D2EE8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9f10162ae8bb4a74b3aca62726ede0c3.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:77975qrzsL6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.418712843058356
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsBBkHEehLdDGWQ9AO:SbFuFyLVIg1BG+f+MsBB2LBPQ9F2jfGt
MD5:	CC49CD5E8D62AA15A313585F834E0F13
SHA1:	9077BF82D0DDDE6E795EB7F032BC55EA22613B50
SHA-256:	999D465536C8F61B7180791C11CF4110970F0C22D127246EC5225A3708BC944B
SHA-512:	C497AA7A2C10E8C38E40E7ED736403802EF9B3DD7DC91F07A8545BAC1B1490D6EB17C3BE0D9940265C6D593FA2A944D7AA37394CBD28EAA9C4DB79E171FC1761
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fdd722547f25467f9a586a8fd87815f4.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:77984NDwNu7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.471304372280037
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyTp9KsxyZjZcHcljX+:qgFq6g10+f+MJdmAu
MD5:	250302CBAFEBD7D35FA405FDD7FEC1EC
SHA1:	D9C1FF8BA444D1E523BA13AFDB23DBB36ED0E9CC
SHA-256:	BAB474D404426F2C67F998F474E7EBB556B8EECAD34F9617B8E45BA92981B420
SHA-512:	0FC55A50BF613A056370604F09C3A0E60FD4357B8089A49C5BBC0289EAEE5A93C6FD1713D98EF176C332D5171E993EF72BFF47A31C27EFF4A86470E34B4F6FEA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=87633db9ec2e48d28722635532035c5d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77985cBkNH4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.424801022110102
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmspgcIQyqksjs2ALAXaN:SbFuFyLVIg1BAf+MsFyqljNALyAZD
MD5:	65B0C5030F88E0362AEC71A21BC750C0
SHA1:	0BEDDAAF55DE17ED882F47845E3BC06607D4FA29
SHA-256:	CC07959B3BE3DC6A0CFAAEB0FDCABE04C463E89B8F9D2EC1FAF870EC1065DD42
SHA-512:	B8C9847D3748D927D6991EECA263A18B30BBCC8ADA5B8FC7C25F0A06DF2CE51E6CA6760E22FB8485457D3FF72FB48731C3D5BDB95D2E1BB2F77EBBBDA1D4AC96
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f028124ca9dc4cc9814642f9410d45b1.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77986Z8es95

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.447719371592721
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8LmLATjdCt/rRMtq:qgFq6g10+f+M8LmyCDL
MD5:	4136397A16B4CC8261440D90A7A2ED5C
SHA1:	97406F69F0587375904254EFA2878D5C618DA3A8
SHA-256:	59DEE5FCB7AED72307AA9A111420C86C46088A0D2EF69F8C4C96180B2DA01C08
SHA-512:	30776CD9BB4E061349343A7C62EF119C12E1D90ECA0A67CF4232A74ADFE008158B73BD93EDC64DA893CD8A2660CB709AC6BC2B475C77CE8F57C7824F81E595B6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6c8899af38c740f8817cc0d40849b416.IDENTIFIER=whoopsie-upload-all.UNIT=apport-autoreport.service.

/run/systemd/journal/streams/.#9:77988gtB0K8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.354830357013571
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBWUHCOtDWYuqjswK:SbFuFyLVIg1BG+f+MoBFFNTjLkGq
MD5:	E5C3B125A351EC381C52233034DA2573
SHA1:	CBCD852A4D0E34846339459617F06550E747C441
SHA-256:	D397BB10B4A3D98AD5562574C63C403264B450B7CC557789022C19815EF09518
SHA-512:	15E37E24A231E10FADDF4BB8B7E03C1C629E4D935909A4797FBD6887FDED6204F644F7FFA058B520B681AE654F85EE397E2B2D9CB8611C85AFC75136D5D6B81B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b10e3227b5704cedb5edca8ce2b8d3dd.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:78073i8XBJ8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.482379297925687
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9txS0LQHQQ5qjs2BbQL:SbFuFyLVIg1BAf+MrkHLqjNdQIeXD
MD5:	0A25B49615655741A7ECFF263CC6E2FA
SHA1:	4341C177E17BD2746C73CE4CA2F23862ECCF816F
SHA-256:	11D04D59F5E3F00B9AF9EB8E5532B6A17695718318D82298165154A6AADC3B46
SHA-512:	9ECF9D7D14D51393CE1E7CB9F7AFE1DBCCB8E89E004C1DA92FC28A9773CB2A737DC700B0823BAFA34179A424A4FC85CA3FECC526543C239E04B6610A958820F6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=70b6829a2e9d47219ea9fbef59462b55.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78604GfWMpK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.438383422943439
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8tEWQGSkrp6LF2jsc:SbFuFyLVIg1BG+f+M8htSkuF2josQu
MD5:	6C7C93C7523956BE8907BCB4E3B5C158
SHA1:	5885450192E2318C6A90741E4CC84779520F9D76
SHA-256:	A74D74B2EE7D4C974A17506CB8D61A1E0DE9AC9BDC8460288C06820432E2BB46
SHA-512:	EE1AF81D91409BB4DCFBE843700A573E130FBC751E0AC66BF440336DFB60861BE69F8804C6745CD1B95C7DD0DFF4B06680A1D66E748182B5C151F702BE792BA9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=699bd732eddd4347ba5f7d6b8cc98826.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78611yf7mDN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.499517127259676
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mo0SVtGIjZcHcljX+:qgFq6g10+f+Moxt3mAu
MD5:	BDAB181D1EC01FD839896ADB34CFBF28
SHA1:	F99B044A7C14ABE4565B2F9CB81F1EB36EE6E8DB
SHA-256:	C7F594ACF33B74A804CE10EF010CF8774ACDC7DAA39857FB7480B991E4EE54A6
SHA-512:	FAF1EFBAE04A098E74C0B1190FD96EE6E0E0689AF61704F9AE035EBFDEED0E268FCF9C60EE8E490CC6C10CA3BD50FB3CCF90278C0521F0C6BAE2F8974D7D47F6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b47340030a8746fc93dbd308152ef696.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:786236yDTNJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.384267631323254
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+flxi7NrqjdCLKzK:qgFq6g10+f+MkS7mCLAK
MD5:	C7E8EBE1DEDBC7B03D77C4F41ABCC999
SHA1:	E5C3624D45783C760E791BDC6D7797CEFCF8D42A
SHA-256:	D8518DE7563780C1A2E9C28D39D1C9AD0CEFE77E4046D95AD62B453ADCE9A228
SHA-512:	A8A663EB01D7F740E4A143081B8B57674750CA1C76F7C2A493ABCB2BEEE4D5359FC1E3939B1F4440541FD0F7F67DFC8CECC7D4779E29DA2D5E773D5960475410
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4529db9dfc49447fa951d3070b3de80e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78624ub3GJL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.3856840628965665
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzqHEDWURWXBSkAGFt:SbFuFyLVIg1BG+f+MZDUX0bjfGt
MD5:	0D616F1D851BDC23FA9FA51D8B711C88
SHA1:	29874DA44AF85C70556EC774C38F73473A294089
SHA-256:	E568F0A0E414C108FA2C2D59654A4AE358B9EEAE15CEECDBF66A9331C3235AB6
SHA-512:	E2408B73A7ADD8F8BCA28DCCCA227E52AE218E95AE0872FE00B46CC5AB093EF1C609E51F7331ECFB21BB4DDE5CCFFE58B8DDE9B6C1A1BA581F9193F3C7C54A83
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=95d7191baf314f34a32dec324a1edec6.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:78632E91dyL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.410009845870012
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MswIZzi6jHsZjNALyAZD:qgFq6g1af+Mstu6jeIZD
MD5:	5C729FDCF358EAEF0F509EE0A8B1DEB8
SHA1:	8D92B84DAC0D397F8C2041B40C24E27A0DF7C2F3
SHA-256:	34201E0F5BA5A1B194F92FD74773C7249E891CF7D59E62E31FBCE2F143D7C4F0
SHA-512:	067719F73CCE5C7596BD31A7EDB26C922A98096CFFCB3501BA77CA11F76DE148CA2C1B79969603058515FD390A2698E0F3C16CE965C9C555400C661ECF9D5EBE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f44e6a0f79d04030831dc5a6685a5f16.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78633hHLDMN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.43333420055319
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvzcGdR/Fxbjgrxsjs2y:SbFuFyLVIg1BAf+MRdR/FxjTjNdQIeXD
MD5:	E3EDA131BB529E98A9DB0127C2809BCF
SHA1:	28649F97F849642408B8D79D8DDBBB543521589F
SHA-256:	626974CFBFFDDBDAA79C1721058568C026DD27B04A93FBDC386438F74EC3FEB9
SHA-512:	7FDCFD90D7A233249EA8EC7B53EF7C6D5421DC01E23EAA515DD6F0C78FA490BE808400ADF570BA42FA63662E03530FA7A6C8545AD0A93E1DC4844FAE7A508C1D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e691ccaca8a84ecd88b22440eb19cb30.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80998eazKQk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.49812316559772
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mj0fAmBjTjZcHcljX+:qgFq6g10+f+MjSAmzmAu
MD5:	C0D40A64D11521FB0D961C7B18BF4F0F
SHA1:	115AF82A6BB4947CF5C17204A0F581324E1CC083
SHA-256:	9114810D176A20CFC69608B5884EB76DDE9141B8CBA4203CE054BF7E6C552883
SHA-512:	44039AF59F20EDECFA7D29931C78C9BCBF9DCEB0D81B401ED1D841C65C4B5713E6017E370434BB030C2EEE2566690043AE37A85C98F8FFE7976976CD6D21FF85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1e316895d08142a79316edc7bfcbbd5b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:80999GJF5Kn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.396719989331826
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MocVwMEQaksZjdCLKzK:qgFq6g10+f+MokJ5Js3CLAK
MD5:	91256BF7531AC44D7901697F22AD19BC
SHA1:	71138477719C02111406CFDD0BE7CD606B0A8A0B
SHA-256:	14E4A75AACF3E5A045AAAE87FE0746B4D4AA51452497FA4FC32CC51034F5656D
SHA-512:	46FA18383F0C7807416BA9529DAE8461D3022D0510E0275E757FCD1B150056C1566B7A58A1BA531B1EF8F463D4D2B996DF9320AD0BD1E4D52B5D9494C5F22D44
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b6502781ab07486e8bb6ffd7c1c64184.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:810077eZ4Dm

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.360789413883102
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8SAxPhSHaD7xYuqjW:SbFuFyLVIg1BG+f+M8SAZL7xYuqjfGt
MD5:	009B70E6A6F81AEAAA73D29C99FC66AF
SHA1:	EAB6ADD0B6D3BB9FB3CEB5EFD41991AE4FE9B5ED
SHA-256:	8EA10AB376C6D0B16B390EA5EA71F88DE2B8D53F2B403CF07B83B48DD9838459
SHA-512:	583DACB4E3F5918B4AAB8027FBD862E32E51E30A5161D239AF6582DE9316476C1C3F5D09168121F8922B7F4A4F7229BB6F544A91482F91BC32E5A88320481CD2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=630eb4f0dea7411bbfc73a8e48dd37ce.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:81016sAONbn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.453564597170822
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpJuQzS54v8js1Had9:SbFuFyLVIg1BG+f+M+Fi8josQu
MD5:	69C6534984D1BC9BDDAE12E761B55017
SHA1:	4E657AA20211017DCAA3392CD0D52B697EAABDEA
SHA-256:	CAFA6024D413E5ACCEA35C075BAB6EEFE8838CF8B6235421B35BE1CB4208D511
SHA-512:	EA619A3006B811980E8478BB14D5412AB2769BD153B883C8612563E177A2A8E1F7C677339EED07F0BB704D5BFA9AA95142EB3A46786A6A02FF55923C393A3988
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c1b32fc3b06a4915854318e8e1706629.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81023jviDlk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.392036333913739
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmo35WjEUZB2rUsjs2ALl:SbFuFyLVIg1BAf+MopEBwjNALyAZD
MD5:	128BC406B0EFF4959A1763BCE87FB0CA
SHA1:	16F5041339A8A9BE3C72786F985EA1E720A6E43F
SHA-256:	B5AC5C0B06A77A1BA88BEFEFCEE58F194BAF48F6EC9C8E9A0194D5B6AC8D092B
SHA-512:	23225E08DDC40AC51C0B145CF404352FCF00747B3CB61FAB893404481810C2637982C193FAD1B0BB5973440267F6DF732337FB4BE7C48E81E3E67EA64549F819
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b081c43dc3a141f09bd380cf14ce985a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81105YgMT4k

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4922545963139955
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MQSZT2RhJ0jNdQIeXD:qgFq6g1af+MQGT2N22D
MD5:	60D447F37AF49C7094380217F5C6CC42
SHA1:	64061358D3AB71537D7B391234BF28B29F025DE3
SHA-256:	54A2446410A7F29C34A39765691B0A283DE847AC1B353E97C3A1571BAB95BFBF
SHA-512:	87CCAB87CED18EBD6E8895781C0B03EAEE2A91CB0CB953ADD8F7359B6C69DC46EC772FBAFAA3D95F00BE6D2CAF0AA7D8822EF5C134850BDD9A4DAE37EFE5AA8A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1297df667b254f69b7b63b4295eb9703.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81492DUI5LS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4183619088722565
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuQ4CRGaCHkEn5js16:SbFuFyLVIg1BG+f+Mu3Y+josQu
MD5:	AE300BA8F0C38A105285ADA7552945BD
SHA1:	F87FE409622E54441116B61CF1C708780FAD3566
SHA-256:	42DF4078B176D9695CC6F94A6F2FD51DFB9C01879875278E05448B6349F07CC1
SHA-512:	5AC69F1921A12EF888BA137278C0F0B76886683ED3677AEF92BD16B9275E2FD274CD09BC5EEB2CA3EAF2E7D5EF49DE4016C3C3C1CB7485308DDB408C5888552D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d295c0e8fd984c3488eb4dd50ba70569.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:814932C3CzT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.45610067733107
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzdBHGWiEA3RGVUsje:SbFuFyLVIg1BG+f+MmE0RMjZcHcljX+
MD5:	AC02E6DB9104ED579619ECA9A667D167
SHA1:	FE3B26B35341BCD7B6ABFEE12F0EB060CECB300A
SHA-256:	D302ABF96E9284888348CC67AAB5C9D42D368162470F4C1DC756CF0E93234EBE
SHA-512:	F5F4450DE89A14B614E4963EEE7DE154DECEDFBB3A4B981CA22891F8DD7F67C4000348B1809F77429F25C12F13D050C26F2E9921B46508860B33F53BF2D0E7F6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9e52d31392c34ff9aeb2338a01a8d35c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81505oiFOxT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.394487328530334
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7BjcjhtVRR8jsmNzi:SbFuFyLVIg1BG+f+M1cVMjdCLKzK
MD5:	260DC181C00096FD0D1E2F8B7C359597
SHA1:	4E066FC8F144783A5983A41DF069D460D8F8B82F
SHA-256:	5CFC6B8008E45420A9C22452B622813C0E383A50E9AE1C9D735411F2EE270485
SHA-512:	334EB7CC1928AA376526B1A4C3BB9C4C2BA58B07ACEC633386DAEA75E3E553473AD844C6E413BC3F92AFB814406AE8686E15B4A2BF40028D97C920CEABA452F5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11d225dea950481c9f22f19fb2d04387.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81506iXiOjS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.409569901687981
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9Ck4fnBYuxsjskGp/:SbFuFyLVIg1BG+f+M4k4vB5qjfGt
MD5:	02FE195A40B29BEDA5358DE03708CA67
SHA1:	3133CF7C756F5ED51AF97F07A5A581AA60F5734B
SHA-256:	472843C72777CC03AC9C7137CF04CE6765D422A82E363258DD6B87CB96D90392
SHA-512:	C8D890D1CD1BFFB9E9C33C86C289E8262193FA2B60400AB289B6C659C3432FC6F8B7CD7B60A91A62BB5DE1DBFF26A87C0266F540006F39294CC54BA10A663E63
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7548f542f11d4f2e877e9975147e601c.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:81514Ck6E0Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4481181504541
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+H0Tg9bQPvATjs2ALAQ:SbFuFyLVIg1BAf+M+UTg90MjNALyAZD
MD5:	90411EC639785E26E334737C757C6EF7
SHA1:	5C21620DCDF7A95AEB470A8CFEEAEFD777DCB81B
SHA-256:	6CBC3EDC202EB99E223A1E8140986E20189432393CFDE224F7443BDFA1D172B5
SHA-512:	2255D9240093773EF056D49079D4F3B8F69FA870D3647FEE57D3210A89CD4599DF4CA588CF6A316B5E023D348205EFA8481CA32737E7CF3303AE941A21043C22
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ec0ab3d6254425983c3b860d65e62b9.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81515gSzejT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.459569302701484
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M4BALkIdTd1TjNdQIeXD:qgFq6g1af+M4BALDTZ2D
MD5:	87D3D975D3F87B41EE3F293F67F6D931
SHA1:	B8EA0192C52E392FD0B57C25A12DCC4155279F15
SHA-256:	DD721FFD42E981B89CAF987A59152E1687038076AA292E9F7B5945BC9845750C
SHA-512:	4A1635B2EE828AAB5BF4F56A8CF7CC2F61C2D7A6256A2C985540113E725535507D639F6D62E89BCE16CEFB45317F3A492577201C8FE4511758F46289332CA449
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2d25135f159142a5a969806b99068de6.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82821dYbOcp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.450938891017702
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6xSd/QMmRTjZcHcljX+:qgFq6g10+f+Myu/fmjmAu
MD5:	A80D5C0FACD2FAB99D3D719E4EC5DB3D
SHA1:	0198307EEB293E6A6F768A9EB0C30F6EE070563C
SHA-256:	FE44EC6AC14AA320F6790BE6A131958884A8A5E78721B1F286BA695B7621C376
SHA-512:	12C82304B218D5AEEF7DA9E5E4C53B47BB62AE91E46729F3B4ACBAC74B5AFF89EFB5B6E500ABF8DEE72AC31319965FD9DF0E6F43CBD4B45005500D00983C2CC3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11e5c5478e86455cb26ceca7022dc5de.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:82830ewRszn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.370710808878859
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6EwXcDixXsjsmNz0/:SbFuFyLVIg1BG+f+M6E7jdCLKzK
MD5:	8EF894F7B2DC386FA8BBC5BB5802E087
SHA1:	286B6722CBA8D5738C71068076359CB6F10E82A8
SHA-256:	FC1C6CF1608696496D2428F6D85B7DF03DCB64094BA5D1B9F43F878513946C73
SHA-512:	0441E771609387FA1760961038E738B8F1FBC265558ED53BCC8A32E6EE9034E210BE784F550FF5FDD87F555F3C06E21D076CF7A91FE48D2D7D5D1CE8B0B7A71B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=045eae7a09724d9fa5405fc610662eb3.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82838p1WP7o

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.371519808713442
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9hbHB+mNPl3R0jske:SbFuFyLVIg1BG+f+MPHB+m170jfGt
MD5:	BF49433054A755B89F2A0381621B628F
SHA1:	E538397317ABDA84A4C4031E80FB669E9441350D
SHA-256:	6734E4ADFA1144B82C06EA1425718659E6FB7CD3815D47D9CCE5E6005BC6B8B0
SHA-512:	05F6D89E25B7CE0ABC77CC86EB984B6FF078EE3BBD941F7C8DE53BAE4C4ADCAD6FB8870E9A9AC97A4720841B5920CD1889F11D7679201048A17B34ABB46A7F9A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=74bc94db9eb14f4eaf10af127e390b24.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:82839KKekto

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.436204075221869
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpE2HpRf3WVsRqjs16:SbFuFyLVIg1BG+f+MDJYVGqjosQu
MD5:	B3E4ADA55BC7006BF43482CA695428D6
SHA1:	0B1B6EDA3C616556764B862D0F84B1E3A8233C68
SHA-256:	A1FF7A7B99F60CC8C17CAF11390B7EDBF12F2B12A0280AF88245D40839C09217
SHA-512:	33D99B5F51E07C0EE4838B98BC782032403BB06C856B40A14ADEFA5F4DA334BBDD7466E8B73355F2D4AAFBF8DDBFE149DEE7F0808E13EE00D6933BF3ED8ED9D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cb72e6b873aa4ff6bf309a71788cc035.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82854UcZD8k

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4345110221925195
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmp4FRcRAY0sFrxsjs2Ax:SbFuFyLVIg1BAf+MUc8jNALyAZD
MD5:	5C5A62DF200760AD340C0246D122E030
SHA1:	5D708C91FF217C1EDDD478B5592E60B86D94FF4C
SHA-256:	D111B2FB8F81A8B1BC72444440C4B9029C884C8153B608248BA6468A4E6D6E08
SHA-512:	762909788DD3C47CD0EBF49F42593E327D4F534FDA56A78BC0022120586F615CD66BB7D336360B67AB520E5CE8E0CC228428C3D769F707ECE3A2A4F9283091D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c0f5bce824964a3a8bd5b3551d20b3c0.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82855SbiLcp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.491351143302888
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/ND5VB/hRqshgrqjs2y:SbFuFyLVIg1BAf+MVdVsrqjNdQIeXD
MD5:	1C4E85BCE9A086DE6F744EAAF3E430F4
SHA1:	27BAB3AF0B2EB44D9203E21F0B2DFCBBC8125D43
SHA-256:	EAC924C167784A08C5E1781F43C126F2B51AD605DE3A8F4532E1459F66AAAEB4
SHA-512:	468F1F57A27CFEBA69399B325D921F5C946E44CDEA09FC24B31BE6E252F52CFD87D957D3F037CD9F52483BE55BC44D6439DD038086920F3398806B99C252506F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5baaf0682bd24f15ba959e14d46c7267.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83716usJcWU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.417908955076013
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M81NtKvRHdW5qjbVC:qgFq6g10+f+M81NtmLuP
MD5:	ABA9BAF6B3BFB7B3B9F8F68BCA6EC426
SHA1:	EBAC269DD3C7A433C835E2370E7BCEC7570C7A01
SHA-256:	845468A42029F4C3AE854B6233B44F4B5F5206EB2E27939AF57F00DA3B16BE0D
SHA-512:	9114C2ADF5F13AFA44D833B82C06C25E300F17A13E0415BB992293F99524DB30169D48212B0D47C1FB1C75AFFEDF4D0805909DC946ED3A1D7A69B270399D1CFE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6063d8b4c6f44257b5a376c45a686b83.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:844704YrhHR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.464822908801763
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MvoLEnH8jZcHcljX+:qgFq6g10+f+MvoLEHqmAu
MD5:	C4E64FA8851AC813B39D267D296895D2
SHA1:	7752002F82AB00EC2522E94B68EE8E53C53BBF8A
SHA-256:	D03297E84BCE2B32244A8BB96C2296CF2ED54A39ECA031473E1013AE073C3FE5
SHA-512:	8D38EE25E19C77BF9983450C47A38655CA38F009CE81C80428B351B8F6FC42988723E9B1C97FE538C5D785F45F244D03D726F75560E03253C0070898D0090213
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a802f7e677854826afaae1fe3bdfd3cf.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:84479FYL9KS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.399163027466281
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm41WYSaRvRX7cnvRqd:SbFuFyLVIg1BG+f+M4EYTRvNE0josQu
MD5:	9F37E1A1CAA8CBB11FCF4C26C05499C5
SHA1:	CA75003DF08A053BAE335FCBCB7973BBD1253D82
SHA-256:	806D1EC1557C324B787DEFE2F8ECACBF4263AFA4061359927A2F0DFDE2486C13
SHA-512:	E4521A6564965B903A280A55697948F27C663DA4427999C24675495D37C6E554E517FA93C3E6F718B03578CE70FC6BD372CCFA73461593C7A2FECF6F2F8520E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27ce5c21d76342d7b542536bc1b0eb4d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84487N7lJoS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.4301690164515115
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoAlkDmOagQ22jskGt:SbFuFyLVIg1BG+f+Mor+jfGt
MD5:	F05B7D53CEC4787234E0E4077F64F620
SHA1:	01F0FF628B33B80F769B5D9B101E1E233BE66F73
SHA-256:	48EE00F54AD92ED7126CCAEBFF7E653A26BFF0B48ACFFF91045D481A690CE569
SHA-512:	ACB8841593BA3C189D693E0103FB50BB33864A8A3A61133CB7732FE0F9D2A26D3FE19FFA6D452CD890B586141DF4D7201835EA78C1B8BCEFCEE4892B91D70AE8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=be11d51989cf49d5ba2812af0076dc76.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:844996AoD5U

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.336482849846341
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrDVHUkxHnEVcYuxsS:SbFuFyLVIg1BG+f+MtGNTjdCLKzK
MD5:	FDE6CC9C6581F1187D9E67113043D970
SHA1:	64296BF6A7675C076819BEACBE7CEA9D02EE3EDF
SHA-256:	2343431271FC4282EB70FC9FB3C5882F2E587F9AE05A6C127D97D19C57D667D2
SHA-512:	00F54E1F233F52D40F9817664DA3F587CC7F3091D8B1E3B115D04AD65DD25AB52DF9FA4D51ABB9B1A73AE291E2C6364E3FB3FBD2C6E60F72C93B8C7443984795
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a10343c0b1904d9890d3e5888b9a0f3b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84501ewnZvS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4327751746849
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpZt68wDvXsjs2ALAXaN:SbFuFyLVIg1BAf+MnpjNALyAZD
MD5:	F32A6891C335C8A41828E5C596ADA4EA
SHA1:	032364DEF08A132E8A544C2886C0AED6F5757484
SHA-256:	A1AF94A483C55096D46D7A37A951AD6BA3B852DD862508EC0B4E65118F007968
SHA-512:	7697E93D8EF496C5D7829CFF9F85358074EF1465CD7C181EDCDB502C3C97807AD6D6636E4900A4BE09074BB1728BD1AB61D688B45491E179DC308F511D59D8C3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c4e3d8ce3fa44d43a677ecb0598285c1.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:84509vLU5JQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.484976840137266
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+2Q5CLDBSFUzswsjs2y:SbFuFyLVIg1BAf+M+LCLdS24jNdQIeXD
MD5:	CC8427F7CF74789EA3897941834C5690
SHA1:	910394E1526491073694426604D7114CCE0795F4
SHA-256:	AB5A2C112FA7D1649AE43B11F3867C42C5F50B74E96B33EA41024D96479F44DD
SHA-512:	05A346607EA18BE12A2FEE447FD110B57F485A27A4EF2EC02B0D80383A1ADF1F44FFBF4F13FE638C6F6200DC280BA290B7EBB418A4D825D4E9693240AE27BBE7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4397874c563b487abc94a45d7202ad20.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:84594cIDvTT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.382220596856212
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoPQBlQhUSXiW2hgrm:SbFuFyLVIg1BG+f+MoPQzQTGuqjoa
MD5:	C846FF2A7E0575E95F3A53CE9291E8F0
SHA1:	9879B11EC7AFB28A943EFFFB39DF5CCCE3373518
SHA-256:	FC2073CC89975E05A706099668C3A3CA00F002D2CAFD7B147D2CBF77352D12DF
SHA-512:	4E667844E5618CDBCB29E340FD13124C67526E0AC35F4A763EF87F81AC7EC020F5C9BAB7FED7E6EF6D08454E2EC1997EDB7EDDBEF00C5D6524A091F7284C1CC5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b5365d8dc2154b36852995596073b1e5.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:84595qMx8WU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3581643969994515
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+78RCYbHD0vG2jshQ:SbFuFyLVIg1BG+f+M+7AhbHwxjtWL0
MD5:	D8C5F838A23E514DF011FED3F5765B8E
SHA1:	A787C3856285EF63CAC03FEAFAD6015EEAF97B6C
SHA-256:	FE29F8D0DB8C6DB15D0491B76DCA6620643227683322D09B4C7423806BF5D0BC
SHA-512:	7EED0400EE3F7A62FEB6673AA4AB3FDE0BE01619866E102F730A8B6852AF17506068AEF2826582AC6AF11AB12B0FE63E14F193D6E82AAD713B58C6863AAF09A5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4b4fd13bed39452fa62bf85b3b7ebd9e.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:84615cOCihS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.427186835187707
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7JJABQuDSAXHjsjOA:SbFuFyLVIg1BG+f+MqjSA3jNE
MD5:	A9A39880C161F3DDC5E45472AAA3B1E8
SHA1:	89DF08990BDF09F5B012DE654C71C51A2FD1AD8E
SHA-256:	681E2E00D4F3A62A2CA54320C96F5D0A23FBE30A8E29E1BF7D95167512099F1D
SHA-512:	9123ED62AAC0C54B722F9B94E29DC4D999C395919B850AE3AD9FD76CB787A4856D87ADD2BF32D9328608A703379C1F153CEE1FCDC9247FDF8A552217F7715C65
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1f0a0d687e96411dba152e25231f7e27.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:86295VKx5ag

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.511934399604491
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpgBjuSXvFrxsjsicN:SbFuFyLVIg1BG+f+MmoSkjZcHcljX+
MD5:	8110AAE6772F2E21F5C742D678D51ACC
SHA1:	9E782C31DB407B3CD7CC8D47A3B1B54AED8D0AC4
SHA-256:	88E900EADAE03AC46FDCB5033A160D61144C277A8CCDE23EF3A8977B3701E9D8
SHA-512:	3EB2EB86501D9570B6748B918AFEE4033D6ADC2196076EC493BFA2E37211438F29410E5D22A8D517ECAEACF48EE6D42D0C872113C14849E084FDBD4E94935C77
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c4f1cb9dfa08453c886c15a4d0867272.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:86296fgWFQe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.403983330821022
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpShjRxtKQGUDUWjsf:SbFuFyLVIg1BG+f+MYpRZvjfGt
MD5:	F31AB5B80BFC4A210305CE8742C2DDC2
SHA1:	96C84264140A399B004CF5A063D18DE2D589F7E9
SHA-256:	0F0C927C2AA97CD49D2B1266902C1CACF4EAB33A813B4DCA55A42BB7F73498DC
SHA-512:	34403098EBAE6C88E3EDC4CFD3CC7F12BB652C51135F4690689E959C3667945BEAACBD5F894A55DFC6364F963B89A7DDA82CB142E404E4399A9DD07E4CB95CDD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c77a6a9d310d44b4aa6c87c1f1221fa8.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:86300j24mMb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.354629184032962
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsEgP9dXHGd2Nlsjst:SbFuFyLVIg1BG+f+MsPP/b2jdCLKzK
MD5:	EE4BBC2ABDB90665DCB4B5B5B6E9BB5A
SHA1:	57A35265DEB31E12F77192AB057DC55A0EE7810E
SHA-256:	97492BF9AA5001B2DF4766C5149AFFE60278A60BD7B7CB076F54370D56471A5C
SHA-512:	F8FEB0DC56FCC98A4ECE8C002A7B6767A9F9829EF6BD706ED1A7DCC97BE5271226CC75F25AC4C56810AA798184DA6EBAEA6CACCA65024190EF49A81C9845633F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fabe161404804f86a1bc80f70d31b74c.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86303pMtKhd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.354149037945391
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmunVBYlQF2jshQJWL0:SbFuFyLVIg1BG+f+MuVBz2jtWL0
MD5:	EDEB68A92BFDC126B7CF8C897AE7C7D7
SHA1:	045D1325A3CDD5AFE200D96C8DC29E720A30D6B2
SHA-256:	01A2F59FEDB5AE1332AC6F04C11386A1E2C300ABC2F379C024F9DEF1C9F823B5
SHA-512:	982C504A6EAFA971244A886417776A035D0D3A90DA37EC92B0EDBC6773BB8D0680A9340C4EE7A3D61674CD5FD79CBB08521991837938C767DB38C283B0492322
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=deab744377dd409f801fc941df685749.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:86403m2y3Ee

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.419765261797152
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm53YzgcsUxsjs1Had9:SbFuFyLVIg1BG+f+MelDqjosQu
MD5:	C19CB6D4DF7D1730D9647B6AE06E6EF9
SHA1:	4CE280B347BAACC482771C6F0463C04AA8B32E77
SHA-256:	4AB8913838F81266D00CE604D3EE7E8D8E8822A2F7C3CBC819ED4D7786AACBA4
SHA-512:	90A96B9DC197B6A1576BBBC126438645116B8C774AE3EDD074658E36083DD0AED3E4406D989E5423E40FEB3F59A1A3E53354898C0FEDAE07E13CC56A3511BE72
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=317f41ca434b484da40c23254890c2f1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:86404plejjd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.4496625433926775
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyGA4FBYSXm0RlsMqO:SbFuFyLVIg1BG+f+MyGA4jYkLqjNE
MD5:	017909BD4718B3B9E4B81F6D5C194F5F
SHA1:	B9E6798E907223A5DEE63941E67DBE5449D14705
SHA-256:	20B1A6EF08E53EF8C6ADF9837EFD8391C75FCFAA8B550670DF63A468226C47C9
SHA-512:	163F33ED9F128005C42A2F29962BD7AE707E5BABF38EB6C6F3C8BCECFC5B0A568A977A94879F914449FCD5AAC62DE2E7D5C16853BE58052376B8EC15A8F03B34
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=88a3a9f728b24c11951be472c97a84e5.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:86405E6p3of

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.395518269877071
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7mLVAI1BFHQ3B2D8+:SbFuFyLVIg1BG+f+MqLVFLwgD8JTjbVC
MD5:	CDBA63AA7B5D2C027886881A3FD5E63C
SHA1:	DEE124D30741B7A174E7E40674E4E1FEAA696FC0
SHA-256:	09AF0CC907344A2E4846432EBEE85F9966C4CFE1B717F4B7F5102DDFE25AD93C
SHA-512:	697B8BE0B7D4A4A74EE77CE4F803D50D700A2E814B807ED525EEE9E95EA1EE266038CD5E674353D267D1B97120E5FC7D1D7547B223A3175218D58AECC0A4B4B2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1d5c90e147cd481d9b524dddef975814.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:864077LPeic

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.382159981908277
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+2bJqR4gVdCGYGATjsx:SbFuFyLVIg1BAf+M+2nQI/jNALyAZD
MD5:	71B9E278D0900A885E53B25B4C02E770
SHA1:	659B5487AFC14DD68C46BEF714264EA5B31FF2DB
SHA-256:	EF24DE7EB121B53DCE1E199BB3180DA1F4A56C16DABE635B7B5C7EAD36337D5C
SHA-512:	76AD24272A3D42B5A56CB80A01AA2960F8AB88FF44D317EB4AEFC31DC2368BA464BC6FAA7938C32AE0AA0BFEA814BAB50CB97D989C6508C5CB2FA1195957ACC1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48fe62f03ef34b1bbe116080bfac6118.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86415ZsmoEe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.386757617675959
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv6EgdEXUAglsjs1Ha:SbFuFyLVIg1BG+f+Mgd52joa
MD5:	A09CD345F7562DCE20A8EC14FA0A0B63
SHA1:	C4030282153A695DDEA9A4D798D1AEE7E2A18448
SHA-256:	D9C082459D199A4F9726BEF4ADB85A702AF8DA1CB0B52E61B793363E80927AEF
SHA-512:	572042C0ABF5BDDF778A961B7D5B066B7DC07876C1DB5C262D77168D16BB0EF0642E85C437E61595B13BEB84C2FAC23EACDC1560AA9243CEC4DC3ABE2436A3F4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e821f7395c3a4c8ebfddaa496c09a4b1.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:86422NNkBdd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.439830928121481
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmy7N2X2oJWWQSv8js2BI:SbFuFyLVIg1BAf+My7NmQSv8jNdQIeXD
MD5:	85AB93B360A3227B7C561771BAD7618E
SHA1:	465B5BBDC1DCA70FB0549CE76B21F66FD6454019
SHA-256:	C748E25AA7C42B131A76034915DEFEFBC1ED3DFEA6EDCC4FC71A1BE4FB8175BE
SHA-512:	FEA979E30BAD8EAB805E288AAB23642255D1F0C7865C93206C55E886EF9C9D1E754068E41343EAA84E9BE606C9E6EDE9F3D638C92C0586369294977D3378054A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8ba9bd7afcc44c7da0737af63bde3357.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:870267aZShw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.480881375122813
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8rnRGIA0jZcHcljX+:qgFq6g10+f+M8dGIjmAu
MD5:	AF4D8075C4091C424A1C7E8D3E2255ED
SHA1:	B94AC878A24554353A3F071C14CF54270906A810
SHA-256:	2C3A6ADCF15F98B0C2364213525AD8DAA9F37F6C0C2DDEE22CC5AD601F3BBADC
SHA-512:	7590E58CB5BA98E519D885A69ABD661FB5A531911C974C547B288CA279C1F039C08F91CFCD33FA7A2C8103695FF236F3B74A38B48BB94936FF9A785502539085
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6ea848f2bb514333a60cc85468646ac2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87028CANDws

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.376006074755121
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DSalBlBEG0gUGZsa:SbFuFyLVIg1BG+f+M8DS+BygSjfGt
MD5:	FC13000C466115495EA30596E89C827E
SHA1:	13E4DDDE581D713159E7216820209308725D1B41
SHA-256:	45E5889DA2E53A22A7ECC8AFBB7C778BEFAFA7FD45DB3D83E285E7CA51A4C5DC
SHA-512:	71E9B165B144E69E5A4D0DCA0AB734CB1D5CDE202F29C3A33712C9CDB47683D000348ECB0222C7C0915659F464642432B2F6415E23DEBD3B1D85E1013E837FEF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f71f97eefd2469eba8ae4dc01cc1c0c.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:8702972rxYs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.365972540746049
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzei2ndsWDcz8jshQJ:SbFuFyLVIg1BG+f+MKnd3A4jtWL0
MD5:	EDAFD0381581CD56622306BB9F8BD826
SHA1:	E1ABE8C5D45EF2231A215AF2376D05C14ECA7BE5
SHA-256:	0CA5C5CEFD1B774193B0FB68CD8A56D7F1D75EA90A4E210B598F296C62B73F92
SHA-512:	6635C6AF1EA298B86E6DDF7971A97E02693DD7D0CA1791F9D85154295902FC86738237470618800E1B009D9DD065E6492A0EAE210388DC582CC09FFC422ABA9E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9464ccaebdea4ee19538a67b623c419f.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:87030utyNyt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.414198220213554
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4DRDGoZMn0jdCLKzK:qgFq6g10+f+M4IoZ6mCLAK
MD5:	22C637DF439BDBE299A93943C949F5D6
SHA1:	9CC58368FE00A8C21848A4230D44AABF52170FDE
SHA-256:	9801CC68F8F2C5CE3174E8FB04633DB049BEFD16EE4546B1B0F17A85D617309D
SHA-512:	2C77623F5200C42049A18994AECC74D629329FDF030736575F7F1F1E031EFE954D844F58EBB4921CB3B30E894717015ECF6336B30D7FD2777681A42F43B402B8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2f9fe38326c548dc960907ff531dfba1.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:870364UFCMu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.389096104572048
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrNT+ORcB/UVR3wlXU:SbFuFyLVIg1BG+f+MN+V/MRTjosQu
MD5:	B5F64DE6EF50275BC797453571D0A5C4
SHA1:	80A6E5075B41E58270B66DA762F9AB22EA5AEF04
SHA-256:	BDB1E271BE3D88C25276087DF29F8E3BCB1BE0CE7D3B9DD0D88A4A55E099E0E9
SHA-512:	CFD82132A0A80AFDD48F93FFDE0580F9638DAC039CC8B3B2E1D5B6D4E74ED0BB9F77347AE9E7D6C5313B0BFB36B434C830EB90569E8DE0A11E0F429ED1F4CC0C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=af4fc9970112498fae6880a0cc08e0b0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:88068d2oaav

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.4237988726142845
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo9Z6fYn06F2jsjOdy:SbFuFyLVIg1BG+f+Mo9ZeY0W2jNE
MD5:	D13E1BC17A46A1F17B07131C2DB697FC
SHA1:	A1FB81124A548CB31EA98F618D03821C2EC077E5
SHA-256:	A67327447DA737D44DCEAACC2B63943246353B1409418214D9560573FDB67E84
SHA-512:	079B8806A7DC5161C410D38048C22B47E9F2AEACEF793A452C550A39C8262E0F99807034BE7D7CEF3CE054241945E7A52FE37CFF1EEC0567CAF4C3B0C997A552
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b5781e2b253c48d788bafad1a4cd1af5.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:88069bIGFdu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.350420160131528
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpxmVGuLHVXWGH22j0:SbFuFyLVIg1BG+f+MZm1XVW2jbVC
MD5:	351C84BF40FB3EBF2554BAAC68E375F9
SHA1:	67CB3DE8ADED4163AF96978335D7848C23EB0570
SHA-256:	622661DC810FBE3C58D819BBD9536F1A7031D031EBA865E26BACC80A85ED65C7
SHA-512:	3C1C326EBB411DB5D524EBA01840E095DB3FFCE3E2B162F844739D4F91DE8783838BC7ECF864B08DDFCCB2D92AE8E0D507637DA482ABD3E1772D1E59DE34001A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ce1bdbe0c1e546e5b02e0ab9e70ca585.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:88070O5Nb3s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.442298984208708
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuXQDBt9De1Y+sjs2ALl:SbFuFyLVIg1BAf+MumBt9D40jNALyAZD
MD5:	1B7D09CD0501814872D2AEAFF4CFA1D4
SHA1:	4A0B9D9C638E4F5B319685E8A7B8DEECFD934BD2
SHA-256:	B740E1048A1DEE91963DB75D3AD239E26D132FFD04BB68ABEA10F5310C4E4C57
SHA-512:	E260CF07D53A0DD53710EF8FE921FB1B000E38953F7E67658A62D25673198397B74231AE79AB8834E02A802F375C53BE8565F2BB91199741D17FF1D955FAE21D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d1b246a5fd654c03afcf9b5bb9a967b0.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:88078fbw8tv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.397325109937023
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmua1TBbQLXTRxsjs16:SbFuFyLVIg1BG+f+Mu4TUj8joa
MD5:	52FC9B1EC04AEE2E65CB854CC5A61FCC
SHA1:	2B9D164A70BE9E61CC3D73988BF3C9A8F7F13D1E
SHA-256:	48E6A99395D6A56B94B7A2373C1B51C8BF6680F16C32D421B595DA4A94D9B390
SHA-512:	BB595793549743FDEAAFA15174BBB0D5939F664E6E845D358DCCF6A09BF15B05B23F8031D8BF68B5ACF4A8C027C7A5C741DA9198E4DDA28792C6D2BF1DEE04F5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dc6b07cd33ce48e695a54581f2a657c0.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:88079WXtuXs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.469289427511166
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8f9k2KKF2js2BbQIeXD:SbFuFyLVIg1BAf+M8fixKF2jNdQIeXD
MD5:	0ED7A69034AF826228AD9EA9BB78A209
SHA1:	4BCBEAB975D57604BA20F3185201A3FE37C3CA7D
SHA-256:	8D92262338F63A42ED10B7025A364842F6B86FA22813A7B5AF01D62C4BAC8E82
SHA-512:	68A6E1D8C3A939A604052EE3FA7408A3C3555E90A707AC28FFD7BCAAFFE7D900B2F73F19D438CA8BFCE0A9D3F8B8B4BF9B568388440117A6729D06E8157EAE8E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=67eccf9addbb40bf905135c2e4507bf9.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89453EgxA9T

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.431331701736987
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm67xWoFl3TpjsicWmt:SbFuFyLVIg1BG+f+M6tZFFtjZcHcljX+
MD5:	143FE19E14AA89B341587E4EC251A028
SHA1:	0FFBF3F4FF12B023C090A2BD92A44C32FD82E29F
SHA-256:	18AD90D6E6B17F65AD26179193B40DB0F5C65202A62066825DC51B4686E6B4B9
SHA-512:	241B35F28E43321F24DD99E214E597274A865853692F83B3259920467714E72A7FDD2E8B3BE1837953D03327123849CC1F419AA7AE034807DD30675D3A98502C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0d139166271243d9b16cea6d6bdcba6e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89454yQEUNW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.407029679002989
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5oyJyWwAxwsjs1Ha7:SbFuFyLVIg1BG+f+MKyJyWPTjosQu
MD5:	1DE74CC0DF338FD51BAD5558DB119CF2
SHA1:	173E9141B37805FFF202D5C0606B08B2113511F4
SHA-256:	600F92A512A2912E05489BEBB73F119428BD2D6C2DC04B82011C386052D5413F
SHA-512:	1A9DFEEFE13206B98238DC20A4D7D07D3B048758143CD1854115CCF537138842E57D1BDCF1A1231FB18383C32DB5CBCE2FBAD42CDCF267DC520698D3BBFB51F4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3ade2e8a41a6439282aef4287db50270.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89460XfccNW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.38717921648904
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/wWR10TqFRAoWxszH:SbFuFyLVIg1BG+f+MY7kAogZjfGt
MD5:	A962D9495392E9F3529F23B5572045CA
SHA1:	A0B0A50DB12516738653DEC88B3F08B33A02B38F
SHA-256:	91AE1CB170165746B85FBB768CB52E9E94C6B28E6D8D4F810FD454CB9944126C
SHA-512:	4EDD1BDCFFC856CEF6E0F2B6DABD07F7A2995493894DA1F38D922FEE4F17184764819CDE0A5DDCEE98147C60381C7484DAB66E6324D29CB8EBBBD820D42A5529
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=59d23dbdb7ce460e8b4ecad9b3e198c1.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:89461cNkLiU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.360894783073798
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpyAMtmASVUKAVjshQ:SbFuFyLVIg1BG+f+MYRbjvVjtWL0
MD5:	A3834FB417B5C48D3CCABA3667962429
SHA1:	87B7506F0A0FCD7BDFC58FCD1301EFD7A3DADAEE
SHA-256:	3B19077901F9B147E18DFA2DAFBE30181B27C4614ADD0CAC50B89E3D715AE9FC
SHA-512:	F63E0FFC39AC7351C829E912BCDF79FD7FA5FDE754B17AFCDB937DB98E9682E573C62D203E39BB0A78CAD7A51042DDF22AB9352DEB13AD6A147F7ED20191A6DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ce2e10729b80455fb50ccec01c89f6ed.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:894625Xo89V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.402024811676827
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8oowUTXWZjdCLKzK:qgFq6g10+f+M8hTXW3CLAK
MD5:	AB68A814589DAB7464D1EBB578EA2381
SHA1:	270F1280332157CE40E217A9B41E32BC5110C4DD
SHA-256:	B272AA7062D62C0673C3B5C0A426EC3897F52A297E527919E4CFC93647D0BA98
SHA-512:	6B4C34FF5CD50F4454F8F1744346E06BAB71B9D8B0F3F8AC447DA1D3F88D36F75B15777C70F4A410985B6EE80663DD634332CEB577B3945155465F855FA7710D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=62ab1937d4894a128bb43cf62e3a8720.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89463R4m6iV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.390451171509208
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9B7CGGTVqxvsjsjOA:SbFuFyLVIg1BG+f+MPDOqx0jNE
MD5:	C6F546E989F9DA7CD5921730BC6FC196
SHA1:	7EC4C2952D283F92E5025FA1BAD899A7D0CF5993
SHA-256:	1F4DEB59B8BE2F3B5960E5ADDC6E5787A24293266777BDE05FEDF7CEDB4E2302
SHA-512:	A2690E9181690588D6B1CEA10ABE01639026E017A21F862170C4DEAE329F18C4EAA7195422DF3F17186AE2D58878C6637A182648084BDBC2C79ED938749A835E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=724e0443d837440c84018864a57da3fa.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:89471sKgErV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.396244048439885
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoHAavRcVBDjXXXcpJ:SbFuFyLVIg1BG+f+MoHAYRkBsJ8jbVC
MD5:	AF5E0F4F829EFE0D193D910DD4F94683
SHA1:	E83B01BAC13E274D3D7500F9EF378DECF139D18E
SHA-256:	44DD3DE9CFCEC62EE71EB216D40373F347C9684B876E525464BA32C0440A9405
SHA-512:	EA46C9395F6F4ABB27EB5D3283B68943724D7D151087C924761A461041037B8723C15B956BFD1F9F241635B1C05E562035CF5FD89B097A46E6867D74ABC14165
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bbe5e6a14e33490d8dbf22299d9b12b3.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:89472GqeNgU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.357479113328594
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7TAFec6YHRqEzsh+sj+:SbFuFyLVIg1BAf+M9YxYhTjNALyAZD
MD5:	EC50CEA4CC1B07D90B04F0B8A2F6D0B1
SHA1:	F5EABB4C0CFBD17D031F08E26505040204FFEECC
SHA-256:	099B4F55D93E307D97C0032D4DCC642537544F624A7207F155277DD4843E4219
SHA-512:	DDA20F8DC78EAC3830958C13F884D51C921A9C8B04884E9A49DD4FB5AFB70541B6B581AE7C37FD2C2C922890E33865EF114601B191642EA7E70CA52F4788082D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11ff8be4dea3448899afd3aab440ca3a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89480YFYfIT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.391265601853813
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4Gee0qE9ExZLsh+s9:SbFuFyLVIg1BG+f+M49e0qEwZL8joa
MD5:	A011D410694AAA38F738FEAF17FCE94F
SHA1:	037B21F7974B2BC198FDA68B65F33BA9FC58214E
SHA-256:	63762972B5F567F2E91C2F31FA59F27475E804259A5987ECB505F8A2CE12378E
SHA-512:	94E550956CDB63B3C8F84D752A6B5B2BD21DC8B640199FEC2FCA619D89DF05C5BE869474B68DB5E4D6BC6C013A664233EE00D3C467E12508E29E694585FDE3C6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2cd721ba26394d519a2576d3f9e4c962.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:89487mY57NS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.463984140881953
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6Y+NXGZyhdqihuqjs2y:SbFuFyLVIg1BAf+M6Y+NbqCTjNdQIeXD
MD5:	E6B9282A45E3F79A0B00CE4DA00D5815
SHA1:	51D5790B57EB4421F45134E1247E9D754732A411
SHA-256:	0440169AC8C54B20DA7785833C19FBC2F8E1620C270806C3E0F424ED4A40028A
SHA-512:	EBB9D8FE37F0D46DAC497B1BFE775097F988E13D9C97D80218335306CD5243C84D24D85B50ED2CA9D05BED1A7FC32CCAC948FBC0E685FC8F8379C2357F0B8660
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=01d4a86d257d47538602e3e24b8d942d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat09UiAIG

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0AE6LHe

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0BsytGD

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0DPz5GT

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0FZw1WM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0GFDNUi

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0IKt2mI

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0m1rBLl

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0pAKRt0

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0sMk6ce

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:uXSv:us
MD5:	CBD4F5592535B0758EBA218CC1816465
SHA1:	81E1B34D68DAC38059AECDC114F90EFA1C8E64ED
SHA-256:	73C674343F5EA6A227C81AB3D93EFDEA799A860F10839290DB916FDA969E5EA0
SHA-512:	93AB53905034CE12CCC9BD4441ED34A00A9DD9918210AEF5177CD50566CCA658294A8EEACE1073CBE8BEAA2C81BF61780B130CB5E6937AC7CD2C87F7E0A87828
Malicious:	false
Preview:	7827.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:ZG1sXlXEWtl/Fq/l:Zh+ylo/
MD5:	38B31AF3E4016A951C6EE78F0D75B313
SHA1:	85CE1EA7AD8E829AA69BFC6FC2924BD96F2B9746
SHA-256:	8E906EB6E7AD6CFB8A381C626CE8D3AAE24FA755B9A316873D3358E367A7E108
SHA-512:	FDC25FE8B28155F8C4465BEA0139F481C545661B77102C802B3F7EFB5B6CDAF4A1F823205B6C574806A00C34BA1C152A4E9C800FB3DBBCFED177FF8744C0F75E
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................9vgu.......................................

/tmp/qemu-open.KrL8wh (deleted)

Download File

Process:	/tmp/wrjkngh4.elf
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:TgksX5oHJN:TgkSaJN
MD5:	500BB981854AB7530C25A26861A73B8B
SHA1:	4F653C8FC4AEC0264017DBCD5AC7E43CE9AF025B
SHA-256:	017E9ED277BB3CC9E1DCEAFF39150957AE64102C15AB6CD8926E92F818E9EEE3
SHA-512:	4C0F5BBD326252A5B45BABD6797837E9E838A3F81D451963FFE54D63B484E1E610474F85DA66F49E9681F8074CCB4A0AD2034572C01766F303E68DBDE45230C1
Malicious:	false
Preview:	/tmp/wrjkngh4.elf.nwlrbbmqbh

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	859
Entropy (8bit):	4.852238457343094
Encrypted:	false
SSDEEP:	12:aWFUZPaV5pGifWFUZPgKGifWF2kifWFu2WFuOWFvMufWFFAvm9WFFA2+VgWFy7:adZedfdZ4IfzZfX2XO4pYAveYA2+VgZ7
MD5:	8DBC42342CBD71CA9776DBAA5596F7B2
SHA1:	7CBAEA77F10844BB56F8701CE887EB2B320566E2
SHA-256:	5C33ABB1445DA679BF1D80BE5FB1CD85140581AD8C4C7612ACE4D4E11A8A35B8
SHA-512:	DF38850DA2874701872347DD030509AE860A1FA909D8388C87B301B429829DD6CD62393E667E4C62F20977AB108108D288A75DE0A42A03B60AF981B2A2BE647F
Malicious:	false
Preview:	Jan 2 01:04:32 galassia systemd-logind[7579]: Failed to add user by file name 1000, ignoring: Invalid argument.Jan 2 01:04:32 galassia systemd-logind[7579]: Failed to add user by file name 127, ignoring: Invalid argument.Jan 2 01:04:32 galassia systemd-logind[7579]: User enumeration failed: Invalid argument.Jan 2 01:04:32 galassia systemd-logind[7579]: User of session 2 not known..Jan 2 01:04:32 galassia systemd-logind[7579]: User of session c1 not known..Jan 2 01:04:32 galassia systemd-logind[7579]: Session enumeration failed: No such file or directory.Jan 2 01:04:32 galassia systemd-logind[7579]: Watching system buttons on /dev/input/event0 (Power Button).Jan 2 01:04:32 galassia systemd-logind[7579]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Jan 2 01:04:32 galassia systemd-logind[7579]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4595260194504922
Encrypted:	false
SSDEEP:	3:F31HlRrB5q5sUXl7rB5q5sUd:F3ZaFlXa
MD5:	D7A653C417F04CDE95B01541C1E7C87D
SHA1:	63673064E8BCD2BF07185523AE01070CFA2BC3A2
SHA-256:	0E27A7F94182F64347098F770990D23F0F1368210668BE780C34F4430D865DF5
SHA-512:	2E113BE0F5B1E4DE9ADF2F09156A3A856038726CE6C2FF63943381AF8F74490AED2E06A6442ECEFB1C1011DDDE38564A9A2098E41136587B7AEABC438B3E037A
Malicious:	false
Preview:	LPKSHHRH...................$..F...@.I....................................$..F...@.I.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4595260194504922
Encrypted:	false
SSDEEP:	3:F31Hlu0b/ll:F3+0b/l
MD5:	E8A1771A35C432CF57EC38DD31ADC38D
SHA1:	9BDA26A62D5CC764DA048A6BBA01579BD4266C29
SHA-256:	C4A865F3E2493C35DBAA948DA0EF5F8139950649493EFE9B7287758567DBCBA5
SHA-512:	FCF130466E9D8443DB8FA568F167DEE8BEE4D517652C7E893C381E5A8B941403D9F77D947870F77A8FF47A7B1ABB4F11D3EF54C6C29704A9D346B3119A0775E0
Malicious:	false
Preview:	LPKSHHRH.................G.phT@...9...;J.................................G.phT@...9...;J........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	4615
Entropy (8bit):	4.73335363662687
Encrypted:	false
SSDEEP:	96:honh7Ljp27pzodd4dbWt1S4D9S21YAUwLTK2nAepc9y3X3OHDyis0Oi0:Txofd
MD5:	D340AC3856731267582636E3C9E9C807
SHA1:	A2D6CC6D4FE44044EB312B513DF5FFEB581191A7
SHA-256:	0C0564CDCF92D1D1E3D8D312EC9BFA420D5756BE12DF9BB8D9244ADF31159B01
SHA-512:	027A2896602619F0A8E4B32BB75071F4AAC6E1C2E3213F67F34BDBE594C53C76A70A401890114858AF11B0A31E40C46A6F40629529BBAAB59F1F65853C1B0A67
Malicious:	false
Preview:	Jan 2 01:04:40 galassia kernel: [ 590.678164] blocking signal 19: 6260 -> 2048.Jan 2 01:04:40 galassia kernel: [ 590.715251] blocking signal 9: 6260 -> 658.Jan 2 01:04:40 galassia kernel: [ 590.722976] blocking signal 9: 6260 -> 720.Jan 2 01:04:40 galassia kernel: [ 590.730610] blocking signal 9: 6260 -> 759.Jan 2 01:04:40 galassia kernel: [ 590.738101] blocking signal 9: 6260 -> 761.Jan 2 01:04:40 galassia kernel: [ 590.745846] blocking signal 9: 6260 -> 772.Jan 2 01:04:40 galassia kernel: [ 590.754284] blocking signal 9: 6260 -> 936.Jan 2 01:04:40 galassia kernel: [ 590.761809] blocking signal 9: 6260 -> 1334.Jan 2 01:04:40 galassia kernel: [ 590.769289] blocking signal 9: 6260 -> 1335.Jan 2 01:04:40 galassia kernel: [ 590.776892] blocking signal 9: 6260 -> 1860.Jan 2 01:04:40 galassia kernel: [ 590.784280] blocking signal 9: 6260 -> 1872.Jan 2 01:04:40 galassia kernel: [ 590.791828] blocking signal 9: 6260 -> 2048.Jan 2 01:04:40 galassia kernel: [ 591.78545

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	9898
Entropy (8bit):	4.989651585483285
Encrypted:	false
SSDEEP:	96:honUWGscSfVERxzqd5N27LJpWQi+Uf7pzodd4dbWt1S4d9Su1YPAUwLTK2nAepcN:BVud5xT+qBo2I1a
MD5:	CBE67286BBB7A011A1504AD2303DDBCC
SHA1:	48A6BAC059AD682F9699DE9556EC4DC7E7E6239C
SHA-256:	24EAE7A6A8ECF23C587307BEE307EC959AFA72872B1D317482D75A8E6132E2D9
SHA-512:	676E722E27901409A6A11D8945FDAA411C79B27CFADD093A8FF4D99C8244C09430DAF4CFD4A0A1C9E9F65376F7F1DAB6844881C979FF949D781EE588989BE17D
Malicious:	false
Preview:	Jan 2 01:04:40 galassia kernel: [ 590.678164] blocking signal 19: 6260 -> 2048.Jan 2 01:04:40 galassia kernel: [ 590.715251] blocking signal 9: 6260 -> 658.Jan 2 01:04:40 galassia kernel: [ 590.722976] blocking signal 9: 6260 -> 720.Jan 2 01:04:40 galassia kernel: [ 590.730610] blocking signal 9: 6260 -> 759.Jan 2 01:04:40 galassia kernel: [ 590.738101] blocking signal 9: 6260 -> 761.Jan 2 01:04:40 galassia kernel: [ 590.745846] blocking signal 9: 6260 -> 772.Jan 2 01:04:40 galassia kernel: [ 590.754284] blocking signal 9: 6260 -> 936.Jan 2 01:04:40 galassia kernel: [ 590.761809] blocking signal 9: 6260 -> 1334.Jan 2 01:04:40 galassia kernel: [ 590.769289] blocking signal 9: 6260 -> 1335.Jan 2 01:04:40 galassia kernel: [ 590.776892] blocking signal 9: 6260 -> 1860.Jan 2 01:04:40 galassia kernel: [ 590.784280] blocking signal 9: 6260 -> 1872.Jan 2 01:04:40 galassia kernel: [ 590.791828] blocking signal 9: 6260 -> 2048.Jan 2 01:04:40 galassia kernel: [ 590.80170

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:ZG1sXlXEWtl/Fq/l:Zh+ylo/
MD5:	38B31AF3E4016A951C6EE78F0D75B313
SHA1:	85CE1EA7AD8E829AA69BFC6FC2924BD96F2B9746
SHA-256:	8E906EB6E7AD6CFB8A381C626CE8D3AAE24FA755B9A316873D3358E367A7E108
SHA-512:	FDC25FE8B28155F8C4465BEA0139F481C545661B77102C802B3F7EFB5B6CDAF4A1F823205B6C574806A00C34BA1C152A4E9C800FB3DBBCFED177FF8744C0F75E
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................9vgu.......................................

Source: wrjkngh4.elf	Virustotal: Detection: 40%			Perma Link
Source: wrjkngh4.elf	ReversingLabs: Detection: 39%

Source: global traffic	TCP traffic: 192.168.2.23:33516 -> 178.215.238.112:33966
Source: global traffic	TCP traffic: 192.168.2.23:50028 -> 89.190.156.145:7733

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.366044470074515
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	wrjkngh4.elf
File size:	142'208 bytes
MD5:	f106b210595c95bb0ab2fcab92393890
SHA1:	182b1de4f170b61406badeed332f417bd5947297
SHA256:	2e1c233cb8c158cbffc07032c63710dfeed433b4c0746601f9b7fcd2ec84cd58
SHA512:	99625e8b10c72059ba3f6a5db68c6f928d17c4afef4ba6afbb4f6b8e8395d9a677bc3d7785ef7b78c69f71e981dfdb773522d73df89a6b6d9cd71833c3b9485f
SSDEEP:	3072:iTynZeb9XU3DGBpzXN6Na9b4/VKuR7WVPx1WBm:iTyypU3wpzN6NaaBqV7WBm
TLSH:	46D35A73D829AFA8C165D174B4348F782F9396D142875FBE69E6C2708043D8CFA45BB8
File Content Preview:	.ELF.....................@.4....)......4. ...(...............@...@...........................B...B..I..............Q.td............................././"O.n........#.@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	141768
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	4
.text	PROGBITS	0x4000e0	0xe0	0x1adc0	0x0	0x6	AX	32
.fini	PROGBITS	0x41aea0	0x1aea0	0x24	0x0	0x6	AX	4
.rodata	PROGBITS	0x41aec4	0x1aec4	0x311c	0x0	0x2	A	4
.ctors	PROGBITS	0x42e000	0x1e000	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x42e00c	0x1e00c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x42e020	0x1e020	0x4950	0x0	0x3	WA	32
.got	PROGBITS	0x432970	0x22970	0x14	0x4	0x3	WA	4
.bss	NOBITS	0x432984	0x22984	0x4590	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x22984	0x43	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x1dfe0	0x1dfe0	6.9199	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x1e000	0x42e000	0x42e000	0x4984	0x8f14	0.4588	0x6	RW	0x10000	.ctors .dtors .data .got .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 2, 2025 08:02:24.272265911 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Jan 2, 2025 08:03:44.283263922 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 2, 2025 08:01:54.039784908 CET	8.8.8.8	192.168.2.23	0x1ba5	No error (0)	fingwi.cardiacpure.ru	178.215.238.112	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:02:18.523287058 CET	1.1.1.1	192.168.2.23	0x17e7	No error (0)	daisy.ubuntu.com	162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:02:18.523287058 CET	1.1.1.1	192.168.2.23	0x17e7	No error (0)	daisy.ubuntu.com	162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:03:24.413501978 CET	1.1.1.1	192.168.2.23	0x7799	No error (0)	daisy.ubuntu.com	162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:03:24.413501978 CET	1.1.1.1	192.168.2.23	0x7799	No error (0)	daisy.ubuntu.com	162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:03:39.401982069 CET	1.1.1.1	192.168.2.23	0xe556	No error (0)	daisy.ubuntu.com	162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:03:39.401982069 CET	1.1.1.1	192.168.2.23	0xe556	No error (0)	daisy.ubuntu.com	162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:04:27.947179079 CET	1.1.1.1	192.168.2.23	0x187d	No error (0)	daisy.ubuntu.com	162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 2, 2025 08:04:27.947179079 CET	1.1.1.1	192.168.2.23	0x187d	No error (0)	daisy.ubuntu.com	162.213.35.24	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-01-02 07:02:23 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2025-01-02 07:02:23 UTC	25	IN	HTTP/1.1 100 Continue
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2025-01-02 07:02:23 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2025-01-02 07:02:23 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Thu, 02 Jan 2025 07:02:23 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	07:01:52
Start date (UTC):	02/01/2025
Path:	/tmp/wrjkngh4.elf
Arguments:	/tmp/wrjkngh4.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	07:01:53
Start date (UTC):	02/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Start time (UTC):	07:01:54
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	07:01:59
Start date (UTC):	02/01/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	07:02:00
Start date (UTC):	02/01/2025
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	07:02:02
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	07:02:03
Start date (UTC):	02/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	07:02:05
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	07:02:06
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfwm4
Arguments:	xfwm4 --display :1.0 --sm-client-id 2389ab8d9-421f-49fc-90ad-c6cc4c15ac4c
File size:	420424 bytes
MD5 hash:	59defa3c00cc30d85ed77b738d55e9da

Start time (UTC):	07:02:07
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	07:02:08
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report wrjkngh4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/home/saturnino/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml.new

/run/systemd/inhibit/.#1DW27aH

/run/systemd/inhibit/.#1FgbPGe

/run/systemd/inhibit/.#1GgkZei

/run/systemd/inhibit/.#1J1juhi

/run/systemd/inhibit/.#1KyQ5td

/run/systemd/inhibit/.#1LGAmEJ

/run/systemd/inhibit/.#1Lw17Z1

/run/systemd/inhibit/.#1ODU0qi

/run/systemd/inhibit/.#1PKzD3d

/run/systemd/inhibit/.#1PkbvgB

/run/systemd/inhibit/.#1Pp8jKQ

/run/systemd/inhibit/.#1T9NlLJ

/run/systemd/inhibit/.#1eswKrK

/run/systemd/inhibit/.#1iF1WVB

/run/systemd/inhibit/.#1ilknTS

/run/systemd/inhibit/.#1lC5hcj

/run/systemd/inhibit/.#1o1RmuH

/run/systemd/inhibit/.#1z0i9rj

/run/systemd/inhibit/.#1zcExVI

/run/systemd/journal/streams/.#9:77953M46s74

/run/systemd/journal/streams/.#9:77954crG8X7

Linux Analysis Report
wrjkngh4.elf

Start time (UTC):	07:02:10
Start date (UTC):	02/01/2025
Path:	/usr/bin/xfce4-session
Arguments:	-
File size:	264752 bytes
MD5 hash:	648919f03ad356720c8c27f5aaaf75d1

Start time (UTC):	07:02:12
Start date (UTC):	02/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	07:02:13
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	07:02:14
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	07:02:15
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	07:02:16
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	07:02:17
Start date (UTC):	02/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	07:02:18
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	07:02:19
Start date (UTC):	02/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	07:02:20
Start date (UTC):	02/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761