Deletes journal logs

Deletes systemd journal logs. Likely to evade detection.

Modifies Polkit authorization policy

Modifies rule/ action files in Polkit, possibly to grant additional privileges.

Creates/modifies Cron job

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

Deletes log files

Deletes log files on the system.

Enumerates running processes

Discovers information about currently running processes on the system

Reads CPU attributes

Reads hardware information

Accesses system info like serial numbers, manufacturer names etc.

Reads network interface configuration

Fetches information about one or more active network interfaces.

Write file to user bin folder

Writes file to system bin folder