Edit tour

Linux Analysis Report
ngwa5.elf

Overview

General Information

Sample name:	ngwa5.elf
Analysis ID:	1578564
MD5:	b3d2354bd8a1a2db55179416fd67ec5f
SHA1:	fd8620f2490a9bfe9ffce4cdffd33b41dec3cf40
SHA256:	93616b561baa0dbf7946ef615431ed2dbacafb7e14b84df4f47088bf976cfee8
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Sample tries to kill a massive number of system processes

Yara detected Mirai

Reads system files that contain records of logged in users

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "ps" command used to list the status of processes

Executes the "systemctl" command used for controlling the systemd system and service manager

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578564
Start date and time:	2024-12-19 22:21:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ngwa5.elf
Detection:	MAL
Classification:	mal100.spre.troj.evad.linELF@0/231@139/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
VT rate limit hit for: ngwa5.elf

Runtime Messages

Command:	/tmp/ngwa5.elf
PID:	5423
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

ngwa5.elf (PID: 5423, Parent: 5345, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/ngwa5.elf

ngwa5.elf New Fork (PID: 5425, Parent: 5423)

ngwa5.elf New Fork (PID: 5427, Parent: 5425)

ngwa5.elf New Fork (PID: 5589, Parent: 5427)

sh (PID: 5589, Parent: 5427, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ps -e -o pid,args="

sh New Fork (PID: 5593, Parent: 5589)

ps (PID: 5593, Parent: 5589, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps -e -o pid,args=

gnome-session-binary New Fork (PID: 5429, Parent: 1588)

sh (PID: 5429, Parent: 1588, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5429, Parent: 1588, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5434, Parent: 1)

systemd-hostnamed (PID: 5434, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5582, Parent: 1400)

Default (PID: 5582, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5586, Parent: 1400)

Default (PID: 5586, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5604, Parent: 1)

systemd-user-runtime-dir (PID: 5604, Parent: 1, MD5: d55f4b0847f88131dbcfb07435178e54) Arguments: /lib/systemd/systemd-user-runtime-dir stop 127

systemd New Fork (PID: 5692, Parent: 1)

journalctl (PID: 5692, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5713, Parent: 1)

systemd-journald (PID: 5713, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5716, Parent: 1)

journalctl (PID: 5716, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --flush

systemd New Fork (PID: 5722, Parent: 1)

dbus-daemon (PID: 5722, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5729, Parent: 1400)

Default (PID: 5729, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5732, Parent: 2935)

pulseaudio (PID: 5732, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5733, Parent: 1)

rsyslogd (PID: 5733, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5736, Parent: 1)

systemd-logind (PID: 5736, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5751, Parent: 1)

rtkit-daemon (PID: 5751, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5799, Parent: 1)

polkitd (PID: 5799, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5803, Parent: 1)

gpu-manager (PID: 5803, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5804, Parent: 5803)

sh (PID: 5804, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5806, Parent: 5804)

grep (PID: 5806, Parent: 5804, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5807, Parent: 5803)

sh (PID: 5807, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5808, Parent: 5807)

grep (PID: 5808, Parent: 5807, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5809, Parent: 5803)

sh (PID: 5809, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5810, Parent: 5809)

grep (PID: 5810, Parent: 5809, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5811, Parent: 5803)

sh (PID: 5811, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5812, Parent: 5811)

grep (PID: 5812, Parent: 5811, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5813, Parent: 5803)

sh (PID: 5813, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5814, Parent: 5813)

grep (PID: 5814, Parent: 5813, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5815, Parent: 5803)

sh (PID: 5815, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5816, Parent: 5815)

grep (PID: 5816, Parent: 5815, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5817, Parent: 5803)

sh (PID: 5817, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5818, Parent: 5817)

grep (PID: 5818, Parent: 5817, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5819, Parent: 5803)

sh (PID: 5819, Parent: 5803, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5820, Parent: 5819)

grep (PID: 5820, Parent: 5819, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5805, Parent: 1)

agetty (PID: 5805, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

gvfsd-fuse New Fork (PID: 5824, Parent: 3122)

fusermount (PID: 5824, Parent: 3122, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5828, Parent: 1)

generate-config (PID: 5828, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5829, Parent: 5828)

pkill (PID: 5829, Parent: 5828, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5830, Parent: 1)

gdm-wait-for-drm (PID: 5830, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5835, Parent: 1)

agetty (PID: 5835, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5836, Parent: 1)

rsyslogd (PID: 5836, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5840, Parent: 1)

gdm3 (PID: 5840, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

gdm3 New Fork (PID: 5901, Parent: 5840)

plymouth (PID: 5901, Parent: 5840, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: plymouth --ping

gdm3 New Fork (PID: 5917, Parent: 5840)

gdm-session-worker (PID: 5917, Parent: 5840, MD5: 692243754bd9f38fe9bd7e230b5c060a) Arguments: "gdm-session-worker [pam/gdm-launch-environment]"

systemd New Fork (PID: 5842, Parent: 1)

dbus-daemon (PID: 5842, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5846, Parent: 1)

systemd-logind (PID: 5846, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5902, Parent: 1)

accounts-daemon (PID: 5902, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 5908, Parent: 5902)

language-validate (PID: 5908, Parent: 5902, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 5909, Parent: 5908)

language-options (PID: 5909, Parent: 5908, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 5910, Parent: 5909)

sh (PID: 5910, Parent: 5909, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 5911, Parent: 5910)

locale (PID: 5911, Parent: 5910, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 5912, Parent: 5910)

grep (PID: 5912, Parent: 5910, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

systemd New Fork (PID: 5913, Parent: 1)

polkitd (PID: 5913, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5921, Parent: 1)

agetty (PID: 5921, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5922, Parent: 1)

rsyslogd (PID: 5922, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5929, Parent: 1)

gpu-manager (PID: 5929, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5932, Parent: 5929)

sh (PID: 5932, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5933, Parent: 5932)

grep (PID: 5933, Parent: 5932, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5934, Parent: 5929)

sh (PID: 5934, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5935, Parent: 5934)

grep (PID: 5935, Parent: 5934, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5938, Parent: 5929)

sh (PID: 5938, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5939, Parent: 5938)

grep (PID: 5939, Parent: 5938, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5940, Parent: 5929)

sh (PID: 5940, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5941, Parent: 5940)

grep (PID: 5941, Parent: 5940, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5942, Parent: 5929)

sh (PID: 5942, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5943, Parent: 5942)

grep (PID: 5943, Parent: 5942, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5944, Parent: 5929)

sh (PID: 5944, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5945, Parent: 5944)

grep (PID: 5945, Parent: 5944, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5946, Parent: 5929)

sh (PID: 5946, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5947, Parent: 5946)

grep (PID: 5947, Parent: 5946, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6006, Parent: 5929)

sh (PID: 6006, Parent: 5929, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6007, Parent: 6006)

grep (PID: 6007, Parent: 6006, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5937, Parent: 1)

dbus-daemon (PID: 5937, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5951, Parent: 1)

systemd-logind (PID: 5951, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6010, Parent: 1)

generate-config (PID: 6010, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6011, Parent: 6010)

pkill (PID: 6011, Parent: 6010, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6014, Parent: 1)

gdm-wait-for-drm (PID: 6014, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6019, Parent: 1)

gdm3 (PID: 6019, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

gdm3 New Fork (PID: 6022, Parent: 6019)

plymouth (PID: 6022, Parent: 6019, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: plymouth --ping

gdm3 New Fork (PID: 6036, Parent: 6019)

gdm-session-worker (PID: 6036, Parent: 6019, MD5: 692243754bd9f38fe9bd7e230b5c060a) Arguments: "gdm-session-worker [pam/gdm-launch-environment]"

gdm-session-worker New Fork (PID: 6051, Parent: 6036)

gdm-wayland-session (PID: 6051, Parent: 6036, MD5: d3def63cf1e83f7fb8a0f13b1744ff7c) Arguments: /usr/lib/gdm3/gdm-wayland-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"

gdm-wayland-session New Fork (PID: 6060, Parent: 6051)

dbus-run-session (PID: 6060, Parent: 6051, MD5: 245f3ef6a268850b33b0225a8753b7f4) Arguments: dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart

dbus-run-session New Fork (PID: 6061, Parent: 6060)

dbus-daemon (PID: 6061, Parent: 6060, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: dbus-daemon --nofork --print-address 4 --session

dbus-daemon New Fork (PID: 6067, Parent: 6061)

dbus-daemon New Fork (PID: 6068, Parent: 6067)

false (PID: 6068, Parent: 6067, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6070, Parent: 6061)

dbus-daemon New Fork (PID: 6071, Parent: 6070)

false (PID: 6071, Parent: 6070, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6072, Parent: 6061)

dbus-daemon New Fork (PID: 6073, Parent: 6072)

false (PID: 6073, Parent: 6072, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6074, Parent: 6061)

dbus-daemon New Fork (PID: 6075, Parent: 6074)

false (PID: 6075, Parent: 6074, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6076, Parent: 6061)

dbus-daemon New Fork (PID: 6077, Parent: 6076)

false (PID: 6077, Parent: 6076, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6078, Parent: 6061)

dbus-daemon New Fork (PID: 6079, Parent: 6078)

false (PID: 6079, Parent: 6078, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6083, Parent: 6061)

dbus-daemon New Fork (PID: 6084, Parent: 6083)

false (PID: 6084, Parent: 6083, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-run-session New Fork (PID: 6063, Parent: 6060)

gnome-session (PID: 6063, Parent: 6060, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: gnome-session --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary (PID: 6063, Parent: 6060, MD5: d9b90be4f7db60cb3c2d3da6a1d31bfb) Arguments: /usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary New Fork (PID: 6085, Parent: 6063)

session-migration (PID: 6085, Parent: 6063, MD5: 5227af42ebf14ac2fe2acddb002f68dc) Arguments: session-migration

gnome-session-binary New Fork (PID: 6086, Parent: 6063)

sh (PID: 6086, Parent: 6063, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell

gnome-shell (PID: 6086, Parent: 6063, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell

gdm3 New Fork (PID: 6092, Parent: 6019)

gdm-session-worker (PID: 6092, Parent: 6019, MD5: 692243754bd9f38fe9bd7e230b5c060a) Arguments: "gdm-session-worker [pam/gdm-launch-environment]"

gdm-session-worker New Fork (PID: 6099, Parent: 6092)

gdm-x-session (PID: 6099, Parent: 6092, MD5: 498a824333f1c1ec7767f4612d1887cc) Arguments: /usr/lib/gdm3/gdm-x-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"

gdm-x-session New Fork (PID: 6101, Parent: 6099)

Xorg (PID: 6101, Parent: 6099, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/bin/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3

Xorg.wrap (PID: 6101, Parent: 6099, MD5: 48993830888200ecf19dd7def0884dfd) Arguments: /usr/lib/xorg/Xorg.wrap vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3

Xorg (PID: 6101, Parent: 6099, MD5: 730cf4c45a7ee8bea88abf165463b7f8) Arguments: /usr/lib/xorg/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3

Xorg New Fork (PID: 6110, Parent: 6101)

sh (PID: 6110, Parent: 6101, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""

sh New Fork (PID: 6111, Parent: 6110)

xkbcomp (PID: 6111, Parent: 6110, MD5: c5f953aec4c00d2a1cc27acb75d62c9b) Arguments: /usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm

Xorg New Fork (PID: 6338, Parent: 6101)

sh (PID: 6338, Parent: 6101, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""

sh New Fork (PID: 6339, Parent: 6338)

xkbcomp (PID: 6339, Parent: 6338, MD5: c5f953aec4c00d2a1cc27acb75d62c9b) Arguments: /usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm

gdm-x-session New Fork (PID: 6116, Parent: 6099)

Default (PID: 6116, Parent: 6099, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/Prime/Default

gdm-x-session New Fork (PID: 6117, Parent: 6099)

dbus-run-session (PID: 6117, Parent: 6099, MD5: 245f3ef6a268850b33b0225a8753b7f4) Arguments: dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart

dbus-run-session New Fork (PID: 6118, Parent: 6117)

dbus-daemon (PID: 6118, Parent: 6117, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: dbus-daemon --nofork --print-address 4 --session

dbus-daemon New Fork (PID: 6131, Parent: 6118)

dbus-daemon New Fork (PID: 6132, Parent: 6131)

at-spi-bus-launcher (PID: 6132, Parent: 6131, MD5: 1563f274acd4e7ba530a55bdc4c95682) Arguments: /usr/libexec/at-spi-bus-launcher

at-spi-bus-launcher New Fork (PID: 6137, Parent: 6132)

dbus-daemon (PID: 6137, Parent: 6132, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 3

dbus-daemon New Fork (PID: 6498, Parent: 6137)

dbus-daemon New Fork (PID: 6499, Parent: 6498)

at-spi2-registryd (PID: 6499, Parent: 6498, MD5: 1d904c2693452edebc7ede3a9e24d440) Arguments: /usr/libexec/at-spi2-registryd --use-gnome-session

dbus-daemon New Fork (PID: 6158, Parent: 6118)

dbus-daemon New Fork (PID: 6159, Parent: 6158)

false (PID: 6159, Parent: 6158, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6161, Parent: 6118)

dbus-daemon New Fork (PID: 6162, Parent: 6161)

false (PID: 6162, Parent: 6161, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6165, Parent: 6118)

dbus-daemon New Fork (PID: 6166, Parent: 6165)

false (PID: 6166, Parent: 6165, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6167, Parent: 6118)

dbus-daemon New Fork (PID: 6168, Parent: 6167)

false (PID: 6168, Parent: 6167, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6169, Parent: 6118)

dbus-daemon New Fork (PID: 6170, Parent: 6169)

false (PID: 6170, Parent: 6169, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6171, Parent: 6118)

dbus-daemon New Fork (PID: 6172, Parent: 6171)

false (PID: 6172, Parent: 6171, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6174, Parent: 6118)

dbus-daemon New Fork (PID: 6175, Parent: 6174)

false (PID: 6175, Parent: 6174, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6340, Parent: 6118)

dbus-daemon New Fork (PID: 6341, Parent: 6340)

ibus-portal (PID: 6341, Parent: 6340, MD5: 562ad55bd9a4d54bd7b76746b01e37d3) Arguments: /usr/libexec/ibus-portal

dbus-daemon New Fork (PID: 6514, Parent: 6118)

dbus-daemon New Fork (PID: 6515, Parent: 6514)

gjs (PID: 6515, Parent: 6514, MD5: 5f3eceb792bb65c22f23d1efb4fde3ad) Arguments: /usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications

dbus-daemon New Fork (PID: 6707, Parent: 6118)

dbus-daemon New Fork (PID: 6708, Parent: 6707)

false (PID: 6708, Parent: 6707, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-run-session New Fork (PID: 6119, Parent: 6117)

gnome-session (PID: 6119, Parent: 6117, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: gnome-session --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary (PID: 6119, Parent: 6117, MD5: d9b90be4f7db60cb3c2d3da6a1d31bfb) Arguments: /usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary New Fork (PID: 6120, Parent: 6119)

gnome-session-check-accelerated (PID: 6120, Parent: 6119, MD5: a64839518af85b2b9de31aca27646396) Arguments: /usr/libexec/gnome-session-check-accelerated

gnome-session-check-accelerated New Fork (PID: 6138, Parent: 6120)

gnome-session-check-accelerated-gl-helper (PID: 6138, Parent: 6120, MD5: b1ab9a384f9e98a39ae5c36037dd5e78) Arguments: /usr/libexec/gnome-session-check-accelerated-gl-helper --print-renderer

gnome-session-check-accelerated New Fork (PID: 6147, Parent: 6120)

gnome-session-check-accelerated-gles-helper (PID: 6147, Parent: 6120, MD5: 1bd78885765a18e60c05ed1fb5fa3bf8) Arguments: /usr/libexec/gnome-session-check-accelerated-gles-helper --print-renderer

gnome-session-binary New Fork (PID: 6176, Parent: 6119)

session-migration (PID: 6176, Parent: 6119, MD5: 5227af42ebf14ac2fe2acddb002f68dc) Arguments: session-migration

gnome-session-binary New Fork (PID: 6177, Parent: 6119)

sh (PID: 6177, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell

gnome-shell (PID: 6177, Parent: 6119, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell

gnome-shell New Fork (PID: 6328, Parent: 6177)

ibus-daemon (PID: 6328, Parent: 6177, MD5: 1e00fb9860b198c73f6e364e3ff16f31) Arguments: ibus-daemon --panel disable --xim

ibus-daemon New Fork (PID: 6334, Parent: 6328)

ibus-memconf (PID: 6334, Parent: 6328, MD5: 523e939905910d06598e66385761a822) Arguments: /usr/libexec/ibus-memconf

ibus-daemon New Fork (PID: 6336, Parent: 6328)

ibus-daemon New Fork (PID: 6337, Parent: 6336)

ibus-x11 (PID: 6337, Parent: 1, MD5: 2aa1e54666191243814c2733d6992dbd) Arguments: /usr/libexec/ibus-x11 --kill-daemon

ibus-daemon New Fork (PID: 6550, Parent: 6328)

ibus-engine-simple (PID: 6550, Parent: 6328, MD5: 0238866d5e8802a0ce1b1b9af8cb1376) Arguments: /usr/libexec/ibus-engine-simple

gnome-session-binary New Fork (PID: 6528, Parent: 6119)

sh (PID: 6528, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sharing

gsd-sharing (PID: 6528, Parent: 6119, MD5: e29d9025d98590fbb69f89fdbd4438b3) Arguments: /usr/libexec/gsd-sharing

gnome-session-binary New Fork (PID: 6530, Parent: 6119)

sh (PID: 6530, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-wacom

gsd-wacom (PID: 6530, Parent: 6119, MD5: 13778dd1a23a4e94ddc17ac9caa4fcc1) Arguments: /usr/libexec/gsd-wacom

gnome-session-binary New Fork (PID: 6534, Parent: 6119)

sh (PID: 6534, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-color

gsd-color (PID: 6534, Parent: 6119, MD5: ac2861ad93ce047283e8e87cefef9a19) Arguments: /usr/libexec/gsd-color

gnome-session-binary New Fork (PID: 6536, Parent: 6119)

sh (PID: 6536, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-keyboard

gsd-keyboard (PID: 6536, Parent: 6119, MD5: 8e288fd17c80bb0a1148b964b2ac2279) Arguments: /usr/libexec/gsd-keyboard

gnome-session-binary New Fork (PID: 6537, Parent: 6119)

sh (PID: 6537, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-print-notifications

gsd-print-notifications (PID: 6537, Parent: 6119, MD5: 71539698aa691718cee775d6b9450ae2) Arguments: /usr/libexec/gsd-print-notifications

gsd-print-notifications New Fork (PID: 6572, Parent: 6537)

gsd-print-notifications New Fork (PID: 6573, Parent: 6572)

gsd-printer (PID: 6573, Parent: 1, MD5: 7995828cf98c315fd55f2ffb3b22384d) Arguments: /usr/libexec/gsd-printer

gnome-session-binary New Fork (PID: 6538, Parent: 6119)

sh (PID: 6538, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6538, Parent: 6119, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

gnome-session-binary New Fork (PID: 6540, Parent: 6119)

sh (PID: 6540, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-smartcard

gsd-smartcard (PID: 6540, Parent: 6119, MD5: ea1fbd7f62e4cd0331eae2ef754ee605) Arguments: /usr/libexec/gsd-smartcard

gnome-session-binary New Fork (PID: 6542, Parent: 6119)

sh (PID: 6542, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-datetime

gsd-datetime (PID: 6542, Parent: 6119, MD5: d80d39745740de37d6634d36e344d4bc) Arguments: /usr/libexec/gsd-datetime

gnome-session-binary New Fork (PID: 6543, Parent: 6119)

sh (PID: 6543, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys

gsd-media-keys (PID: 6543, Parent: 6119, MD5: a425448c135afb4b8bfd79cc0b6b74da) Arguments: /usr/libexec/gsd-media-keys

gnome-session-binary New Fork (PID: 6546, Parent: 6119)

sh (PID: 6546, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-screensaver-proxy

gsd-screensaver-proxy (PID: 6546, Parent: 6119, MD5: 77e309450c87dceee43f1a9e50cc0d02) Arguments: /usr/libexec/gsd-screensaver-proxy

gnome-session-binary New Fork (PID: 6548, Parent: 6119)

sh (PID: 6548, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sound

gsd-sound (PID: 6548, Parent: 6119, MD5: 4c7d3fb993463337b4a0eb5c80c760ee) Arguments: /usr/libexec/gsd-sound

gnome-session-binary New Fork (PID: 6551, Parent: 6119)

sh (PID: 6551, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-a11y-settings

gsd-a11y-settings (PID: 6551, Parent: 6119, MD5: 18e243d2cf30ecee7ea89d1462725c5c) Arguments: /usr/libexec/gsd-a11y-settings

gnome-session-binary New Fork (PID: 6555, Parent: 6119)

sh (PID: 6555, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-housekeeping

gsd-housekeeping (PID: 6555, Parent: 6119, MD5: b55f3394a84976ddb92a2915e5d76914) Arguments: /usr/libexec/gsd-housekeeping

gnome-session-binary New Fork (PID: 6558, Parent: 6119)

sh (PID: 6558, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-power

gsd-power (PID: 6558, Parent: 6119, MD5: 28b8e1b43c3e7f1db6741ea1ecd978b7) Arguments: /usr/libexec/gsd-power

gnome-session-binary New Fork (PID: 7057, Parent: 6119)

sh (PID: 7057, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/spice-vdagent

spice-vdagent (PID: 7057, Parent: 6119, MD5: 80fb7f613aa78d1b8a229dbcf4577a9d) Arguments: /usr/bin/spice-vdagent

gnome-session-binary New Fork (PID: 7060, Parent: 6119)

sh (PID: 7060, Parent: 6119, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh xbrlapi -q

xbrlapi (PID: 7060, Parent: 6119, MD5: 0cfe25df39d38af32d6265ed947ca5b9) Arguments: xbrlapi -q

gdm3 New Fork (PID: 6093, Parent: 6019)

Default (PID: 6093, Parent: 6019, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6094, Parent: 6019)

Default (PID: 6094, Parent: 6019, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6023, Parent: 1)

accounts-daemon (PID: 6023, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 6027, Parent: 6023)

language-validate (PID: 6027, Parent: 6023, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 6028, Parent: 6027)

language-options (PID: 6028, Parent: 6027, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 6029, Parent: 6028)

sh (PID: 6029, Parent: 6028, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 6030, Parent: 6029)

locale (PID: 6030, Parent: 6029, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 6031, Parent: 6029)

grep (PID: 6031, Parent: 6029, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

systemd New Fork (PID: 6032, Parent: 1)

polkitd (PID: 6032, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6042, Parent: 1)

systemd-user-runtime-dir (PID: 6042, Parent: 1, MD5: d55f4b0847f88131dbcfb07435178e54) Arguments: /lib/systemd/systemd-user-runtime-dir start 127

systemd New Fork (PID: 6044, Parent: 1)

systemd (PID: 6044, Parent: 1, MD5: 9b2bec7092a40488108543f9334aab75) Arguments: /lib/systemd/systemd --user

systemd New Fork (PID: 6046, Parent: 6044)

systemd New Fork (PID: 6047, Parent: 6046)

30-systemd-environment-d-generator (PID: 6047, Parent: 6046, MD5: 42417da8051ba8ee0eea7854c62d99ca) Arguments: /usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator

systemd New Fork (PID: 6049, Parent: 6044)

systemctl (PID: 6049, Parent: 6044, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: /bin/systemctl --user set-environment DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/127/bus

systemd New Fork (PID: 6050, Parent: 6044)

pulseaudio (PID: 6050, Parent: 6044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6055, Parent: 6044)

dbus-daemon (PID: 6055, Parent: 6044, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6385, Parent: 6044)

pulseaudio (PID: 6385, Parent: 6044, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6056, Parent: 1)

rtkit-daemon (PID: 6056, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6199, Parent: 1)

systemd-localed (PID: 6199, Parent: 1, MD5: 1244af9646256d49594f2a8203329aa9) Arguments: /lib/systemd/systemd-localed

systemd New Fork (PID: 6330, Parent: 2935)

dbus-daemon (PID: 6330, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6331, Parent: 2935)

pulseaudio (PID: 6331, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6347, Parent: 1)

upowerd (PID: 6347, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6391, Parent: 1)

geoclue (PID: 6391, Parent: 1, MD5: 30ac5455f3c598dde91dc87477fb19f7) Arguments: /usr/libexec/geoclue

systemd New Fork (PID: 6506, Parent: 1)

wpa_supplicant (PID: 6506, Parent: 1, MD5: 2a5acf2a7a908a1388a09991ed7881e1) Arguments: /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant

systemd New Fork (PID: 6508, Parent: 1)

avahi-daemon (PID: 6508, Parent: 1, MD5: 0125e88392fec809934928f8638511ff) Arguments: /usr/sbin/avahi-daemon -s

avahi-daemon New Fork (PID: 6510, Parent: 6508)

systemd New Fork (PID: 6509, Parent: 1)

packagekitd (PID: 6509, Parent: 1, MD5: 46b0c31f013b71a0eb63b1c040f11c86) Arguments: /usr/lib/packagekit/packagekitd

packagekitd New Fork (PID: 6535, Parent: 6509)

dpkg (PID: 6535, Parent: 6509, MD5: 5e18156b434fc45062eec2f28b9147be) Arguments: /usr/bin/dpkg --print-foreign-architectures

systemd New Fork (PID: 6574, Parent: 1)

systemd-hostnamed (PID: 6574, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

systemd New Fork (PID: 6746, Parent: 1)

fprintd (PID: 6746, Parent: 1, MD5: b0d8829f05cd028529b84b061b660e84) Arguments: /usr/libexec/fprintd

systemd New Fork (PID: 6860, Parent: 1)

colord (PID: 6860, Parent: 1, MD5: 70861d1b2818c9279cd4a5c9035dac1f) Arguments: /usr/libexec/colord

colord New Fork (PID: 7059, Parent: 6860)

colord-sane (PID: 7059, Parent: 6860, MD5: 5f98d754a07bf1385c3ff001cde3882e) Arguments: /usr/libexec/colord-sane

systemd New Fork (PID: 6871, Parent: 1)

ModemManager (PID: 6871, Parent: 1, MD5: 24379bf705a8ff3b2379314585843d4f) Arguments: /usr/sbin/ModemManager --filter-policy=strict

systemd New Fork (PID: 6909, Parent: 1)

systemd-localed (PID: 6909, Parent: 1, MD5: 1244af9646256d49594f2a8203329aa9) Arguments: /lib/systemd/systemd-localed

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ngwa5.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
ngwa5.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1e5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e66c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e70c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5423.1.00007fab38017000.00007fab38039000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5423.1.00007fab38017000.00007fab38039000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1e5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e66c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e70c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5427.1.00007fab38017000.00007fab38039000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5427.1.00007fab38017000.00007fab38039000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1e5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e66c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e6f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e70c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e720:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e734:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ngwa5.elf PID: 5423	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: ngwa5.elf PID: 5423	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x914:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x928:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x93c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x950:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x964:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x978:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x98c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ngwa5.elf PID: 5427	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: ngwa5.elf PID: 5427	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1c40e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c422:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c436:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c44a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c45e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c472:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c486:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c49a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c4ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c4c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c4d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c4ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c4fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c512:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c526:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c53a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c54e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c562:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c576:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c58a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1c59e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ngwa5.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: ngwa5.elf

ReversingLabs: Detection: 52%

Source: /usr/bin/ps (PID: 5593)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5732)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5829)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6101)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated (PID: 6120)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 6138)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 6147)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/gnome-shell (PID: 6177)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6050)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6385)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6331)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: ngwa5.elf

String: EOF/proc//proc/%s/cmdlinewgetcurlftpechokillbashrebootshutdownhaltpoweroff[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.cardiacpure.ru. [malformed]

Source: global traffic	TCP traffic: 192.168.2.13:44220 -> 178.215.238.25:33966
Source: global traffic	TCP traffic: 192.168.2.13:44730 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5733)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5836)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5922)	Reads hosts file: /etc/hosts	Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 5713)	Socket: unknown address family	Jump to behavior
Source: /usr/sbin/gdm3 (PID: 5840)	Socket: unknown address family	Jump to behavior
Source: /usr/sbin/gdm3 (PID: 6019)	Socket: unknown address family
Source: /usr/bin/dbus-daemon (PID: 6061)	Socket: unknown address family
Source: /usr/libexec/gnome-session-binary (PID: 6063)	Socket: unknown address family
Source: /usr/lib/xorg/Xorg (PID: 6101)	Socket: unknown address family
Source: /usr/bin/dbus-daemon (PID: 6118)	Socket: unknown address family
Source: /usr/bin/dbus-daemon (PID: 6137)	Socket: unknown address family
Source: /usr/libexec/gnome-session-binary (PID: 6119)	Socket: unknown address family
Source: /usr/bin/ibus-daemon (PID: 6328)	Socket: unknown address family
Source: /lib/systemd/systemd (PID: 6044)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru. [malformed]
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: Xorg.0.log.255.dr, syslog.125.dr	String found in binary or memory: http://wiki.x.org
Source: Xorg.0.log.255.dr, syslog.125.dr	String found in binary or memory: http://www.ubuntu.com/support)
Source: syslog.95.dr, syslog.43.dr, syslog.125.dr	String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: ngwa5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5423.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5427.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ngwa5.elf PID: 5423, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ngwa5.elf PID: 5427, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill a massive number of system processes

Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 2, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 3, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 4, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 5, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 6, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 7, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 8, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 9, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 10, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 11, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 12, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 13, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 14, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 15, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 16, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 17, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 18, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 19, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 20, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 21, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 22, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 23, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 24, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 25, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 26, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 27, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 28, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 29, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 30, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 35, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 77, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 78, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 79, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 80, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 81, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 82, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 83, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 84, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 85, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 86, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 88, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 89, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 91, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 92, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 93, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 94, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 95, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 96, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 97, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 98, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 99, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 100, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 101, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 102, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 103, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 104, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 105, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 106, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 107, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 108, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 109, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 110, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 111, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 112, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 113, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 114, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 115, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 116, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 117, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 118, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 119, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 120, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 121, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 122, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 123, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 124, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 125, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 126, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 127, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 128, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 129, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 130, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 131, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 132, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 134, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 142, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 145, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 158, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 202, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 203, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 204, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 205, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 206, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 207, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 216, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 219, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 220, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 221, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 222, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 223, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 224, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 225, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 226, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 227, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 228, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 229, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 230, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 231, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 232, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 233, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 234, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 235, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 236, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 237, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 238, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 239, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 240, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 241, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 242, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 243, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 244, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 245, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 246, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 247, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 248, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 249, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 250, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 251, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 252, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 253, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 254, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 255, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 256, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 257, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 258, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 259, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 260, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 261, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 262, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 263, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 264, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 265, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 266, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 267, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 268, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 269, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 270, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 271, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 272, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 273, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 274, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 275, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 276, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 291, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 293, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 298, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 299, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 303, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 304, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 306, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 307, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 308, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 309, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 310, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 311, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 312, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 313, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 314, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 315, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 316, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 317, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 318, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 319, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 320, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 321, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 322, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 323, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 324, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 325, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 326, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 327, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 328, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 332, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 347, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 371, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 378, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 418, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 419, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 490, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 508, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 518, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 519, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 656, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 657, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 658, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 659, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 660, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 672, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 674, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 676, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 678, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 679, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 680, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 726, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 727, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 765, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 767, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 778, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 780, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 783, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 790, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 792, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 793, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 795, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 797, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 800, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 802, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 803, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 816, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 855, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 884, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 914, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 917, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent to PID below 1000: pid: 936, result: successful	Jump to behavior

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5429, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 7, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 8, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 19, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 86, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 129, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 131, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 134, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 142, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 145, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 158, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 238, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 239, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 240, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 241, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 242, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 244, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 245, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 246, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 247, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 268, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 271, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 273, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 275, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 276, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 291, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 293, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 298, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 299, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 303, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 304, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 306, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 307, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 308, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 309, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 310, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 311, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 312, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 313, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 314, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 315, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 316, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 317, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 318, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 319, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 320, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 321, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 323, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 325, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 332, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 347, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 371, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 378, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 418, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 508, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 518, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 519, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 656, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 657, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 659, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 672, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 678, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 679, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 680, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 792, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 793, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 797, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 800, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 802, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 803, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 816, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 855, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 884, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 914, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 917, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1238, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1400, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1410, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1411, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1432, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1804, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1832, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1969, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2496, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2926, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2961, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2964, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2972, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2974, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2984, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3069, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3100, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3104, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3110, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3114, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3134, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3146, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3147, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3153, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3158, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3161, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3162, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3163, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3164, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3165, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3170, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3181, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3183, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3185, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3203, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3208, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3209, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3212, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3220, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3225, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3246, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3310, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3315, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3336, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3342, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3375, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3413, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3420, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3424, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3434, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3442, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3448, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3455, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3647, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3690, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3691, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3692, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3694, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3749, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5264, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5369, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5407, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5408, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5412, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5434, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5589, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5593, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5722, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5732, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5733, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5805, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5835, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5836, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5840, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5842, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6118)	SIGKILL sent: pid: 6131, result: successful
Source: /usr/bin/dbus-daemon (PID: 6118)	SIGKILL sent: pid: 6340, result: successful
Source: /usr/bin/dbus-daemon (PID: 6118)	SIGKILL sent: pid: 6514, result: successful
Source: /usr/bin/dbus-daemon (PID: 6137)	SIGKILL sent: pid: 6498, result: successful

Source: Initial sample	String containing 'busybox' found: BusyBox
Source: Initial sample	String containing 'busybox' found: BusyBoxps:/proc/%d/exe[killer/exe] killed process: %s ;; pid: %d

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5429, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 7, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 8, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 19, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 86, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 129, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 131, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 134, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 142, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 145, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 158, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 238, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 239, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 240, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 241, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 242, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 244, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 245, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 246, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 247, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 268, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 271, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 273, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 275, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 276, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 291, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 293, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 298, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 299, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 303, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 304, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 306, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 307, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 308, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 309, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 310, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 311, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 312, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 313, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 314, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 315, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 316, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 317, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 318, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 319, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 320, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 321, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 323, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 325, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 332, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 347, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 371, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 378, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 418, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 508, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 518, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 519, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 656, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 657, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 659, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 672, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 678, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 679, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 680, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 792, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 793, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 797, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 800, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 802, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 803, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 816, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 855, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 884, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 914, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 917, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1238, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1400, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1410, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1411, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1432, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1648, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1804, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1832, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 1969, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2496, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2926, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2961, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2964, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2972, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2974, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 2984, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3069, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3095, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3100, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3104, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3110, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3114, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3117, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3122, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3134, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3146, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3147, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3153, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3158, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3161, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3162, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3163, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3164, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3165, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3170, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3181, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3183, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3185, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3203, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3208, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3209, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3212, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3220, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3225, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3246, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3310, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3315, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3336, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3342, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3375, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3413, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3420, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3424, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3434, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3442, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3448, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3455, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3647, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3690, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3691, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3692, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3694, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 3749, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5264, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5369, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5407, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5408, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5412, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5434, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5589, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5593, result: no such process	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5722, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5732, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5733, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5805, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5835, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5836, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5840, result: successful	Jump to behavior
Source: /tmp/ngwa5.elf (PID: 5427)	SIGKILL sent: pid: 5842, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6118)	SIGKILL sent: pid: 6131, result: successful
Source: /usr/bin/dbus-daemon (PID: 6118)	SIGKILL sent: pid: 6340, result: successful
Source: /usr/bin/dbus-daemon (PID: 6118)	SIGKILL sent: pid: 6514, result: successful
Source: /usr/bin/dbus-daemon (PID: 6137)	SIGKILL sent: pid: 6498, result: successful

Source: ngwa5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5423.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5427.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ngwa5.elf PID: 5423, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ngwa5.elf PID: 5427, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.evad.linELF@0/231@139/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5722)	File: /proc/5722/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5824)	File: /proc/5824/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5842)	File: /proc/5842/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5937)	File: /proc/5937/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6061)	File: /proc/6061/mounts
Source: /usr/bin/dbus-daemon (PID: 6118)	File: /proc/6118/mounts
Source: /usr/bin/dbus-daemon (PID: 6137)	File: /proc/6137/mounts
Source: /usr/bin/gjs (PID: 6515)	File: /proc/6515/mounts
Source: /usr/bin/gnome-shell (PID: 6177)	File: /proc/6177/mounts
Source: /usr/bin/dbus-daemon (PID: 6055)	File: /proc/6055/mounts
Source: /usr/bin/dbus-daemon (PID: 6330)	File: /proc/6330/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5429)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5429)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5434)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:63066mkmg99	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:630716SkOY9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:64155bXdvQ9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:63274H0xSRc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:64553c8AwEb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:64555giek6a	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:6467915wmDd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:64412zhgK6b	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:64425aBvWAb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:64470yvQCB9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:655906KVyF9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:65600x9LhSb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:65629c7kTTa	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:65480nHWe1d	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66579al4rSb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66604BeDw69	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66628VgLgU9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66629nuqAJc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:666474scrOc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66742UwLgZ9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66743Lw8Fsc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66827wbpAOa	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66957JAoXza	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67052E0P2Ta	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67066Au0lfb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67140P4VOJb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:671491x8e2d	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66468hE0l0b	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66488pfeKLd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66489snLnDc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66505hpFsAc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66524axQ9wb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66527hfHz8d	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66529lFb9vd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66530IV7zGc	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:66531cH8QYa	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67594RzHUEb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67601iCm8Va	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67642xaNlY9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:677111LJcUd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67713mTdC1b	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67750FmL6Ha	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67752XdDyM9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67785oqqmWd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	File: /run/systemd/journal/streams/.#9:67791kcuB3b	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5736)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5736)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5736)	File: /run/systemd/seats/.#seat00unb0U	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5799)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5846)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5846)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5846)	File: /run/systemd/seats/.#seat0gjHNYf	Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5902)	Directory: /var/lib/gdm3/.pam_environment	Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5902)	Directory: /root/.cache	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5913)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat0WcQtwc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127Tp4NYc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#1279E3rqb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c1w9BhCd	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127FVx6Wd	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat0Y5uAvb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127E8Ps69	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c15E3Yfc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c1orzUwb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127B2yy1c	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (21)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (20)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat01j0f1c	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c1EscqFb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127fjwBHd	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c1Flu6v9	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c13smVIc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c1ZXzPqa	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127TRr5Qc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (20)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (19)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat0dKERla	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#1274ceK1a	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat0yWxs7a	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127cJqfXc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat0AeicVb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127SlRLBb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2hAv1m9	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127LSyIAb	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/seats/.#seat0Ip0C39	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c23SviEa	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2BdcOZa	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/users/.#127hy3j69	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2oRm5Jd	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2Qj5iHa	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (22)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (21)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2dAbwlc	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (23)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (22)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2Ii0eYa	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (24)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	Directory: <invalid fd (23)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/sessions/.#c2Stg9Za	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/inhibit/.#1w84Hy9	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/inhibit/.#27BHm7a	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/inhibit/.#3QvDkob	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/inhibit/.#4t81z2c	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5951)	File: /run/systemd/inhibit/.#5d0GyAa	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 6086)	Directory: <invalid fd (11)>/..
Source: /usr/bin/gnome-shell (PID: 6086)	Directory: <invalid fd (10)>/..
Source: /usr/lib/xorg/Xorg (PID: 6101)	Directory: <invalid fd (23)>/..
Source: /usr/lib/xorg/Xorg (PID: 6101)	Directory: <invalid fd (22)>/..
Source: /usr/libexec/gnome-session-check-accelerated (PID: 6120)	Directory: /var/lib/gdm3/.drirc
Source: /usr/libexec/gnome-session-check-accelerated (PID: 6120)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gnome-session-check-accelerated (PID: 6120)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 6138)	Directory: /var/lib/gdm3/.drirc
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 6147)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 6147)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 6147)	Directory: /var/lib/gdm3/.drirc
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: /var/lib/gdm3/.drirc
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: <invalid fd (12)>/..
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: <invalid fd (11)>/..
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: <invalid fd (14)>/..
Source: /usr/bin/gnome-shell (PID: 6177)	Directory: <invalid fd (13)>/..
Source: /usr/libexec/ibus-x11 (PID: 6337)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/ibus-x11 (PID: 6337)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-wacom (PID: 6530)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-wacom (PID: 6530)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-color (PID: 6534)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-color (PID: 6534)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-keyboard (PID: 6536)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-keyboard (PID: 6536)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-rfkill (PID: 6538)	Directory: <invalid fd (9)>/..
Source: /usr/libexec/gsd-rfkill (PID: 6538)	Directory: <invalid fd (8)>/..
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale-langpack/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale-langpack/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Directory: /usr/share/locale-langpack/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-power (PID: 6558)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-power (PID: 6558)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6023)	Directory: /var/lib/gdm3/.pam_environment
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6023)	Directory: /root/.cache
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	Directory: /root/.cache
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (15)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (14)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (19)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (23)>/..
Source: /lib/systemd/systemd (PID: 6044)	Directory: <invalid fd (22)>/..
Source: /usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator (PID: 6047)	Directory: <invalid fd (4)>/.config
Source: /usr/lib/upower/upowerd (PID: 6347)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6347)	Directory: <invalid fd (11)>/..
Source: /usr/lib/packagekit/packagekitd (PID: 6509)	Directory: /root/.cache
Source: /lib/systemd/systemd-hostnamed (PID: 6574)	Directory: <invalid fd (10)>/..
Source: /usr/libexec/colord (PID: 6860)	Directory: /var/lib/colord/.cache
Source: /usr/sbin/ModemManager (PID: 6871)	Directory: <invalid fd (12)>/..
Source: /usr/sbin/ModemManager (PID: 6871)	Directory: <invalid fd (11)>/..

Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6331/status
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6331/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6331/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/status
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/cmdline
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/status
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6177/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6385/status
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6385/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6385/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6543/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6543/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6050/status
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6050/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6050/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/1/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/1/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6534/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6534/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6119/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6119/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6536/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6536/cgroup
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6558/stat
Source: /usr/lib/policykit-1/polkitd (PID: 6032)	File opened: /proc/6558/cgroup
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/230/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/230/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/110/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/110/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/231/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/231/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/5937/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/5937/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/111/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/111/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/232/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/232/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/112/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/112/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/233/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/233/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/113/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/113/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/234/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/234/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/114/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/114/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/235/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/235/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/115/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/115/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/236/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/236/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/116/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/116/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/237/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/237/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/117/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/117/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/238/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/238/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/118/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/118/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/239/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/239/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/119/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/119/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/5930/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/5930/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/10/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/10/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/11/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/11/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/12/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/12/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/13/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/13/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/14/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/14/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/15/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/15/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/16/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/16/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/17/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/17/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/18/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/18/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/19/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/19/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/240/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/240/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/3095/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/120/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/120/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/241/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/241/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/121/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/121/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/242/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/242/cmdline	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/1/status	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	File opened: /proc/1/cmdline	Jump to behavior

Source: /tmp/ngwa5.elf (PID: 5589)	Shell command executed: sh -c "ps -e -o pid,args="	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5804)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5807)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5809)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5811)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5813)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5815)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5817)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5819)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/share/language-tools/language-options (PID: 5910)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5932)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5934)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5938)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5940)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5942)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5944)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5946)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6006)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6110)	Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
Source: /usr/lib/xorg/Xorg (PID: 6338)	Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
Source: /usr/share/language-tools/language-options (PID: 6029)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "

Source: /bin/sh (PID: 5806)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5808)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5810)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5812)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5814)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5816)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5818)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5820)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5912)	Grep executable: /usr/bin/grep -> grep -F .utf8	Jump to behavior
Source: /bin/sh (PID: 5933)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5935)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5939)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5941)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5943)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5945)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5947)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6007)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6031)	Grep executable: /usr/bin/grep -> grep -F .utf8

Source: /usr/share/gdm/generate-config (PID: 5829)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service			Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6011)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service			Jump to behavior

Source: /bin/sh (PID: 5593)

Ps executable: /usr/bin/ps -> ps -e -o pid,args=

Jump to behavior

Source: /lib/systemd/systemd (PID: 6049)

Systemctl executable: /bin/systemctl -> /bin/systemctl --user set-environment DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/127/bus

Source: /usr/bin/ps (PID: 5593)	Reads from proc file: /proc/meminfo			Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	Reads from proc file: /proc/meminfo			Jump to behavior

Source: /sbin/agetty (PID: 5805)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 5835)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 5921)	Reads version info: /etc/issue	Jump to behavior

Source: /usr/sbin/gdm3 (PID: 5840)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)	Jump to behavior
Source: /usr/sbin/gdm3 (PID: 5840)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)	Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5902)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)	Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5902)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)	Jump to behavior
Source: /usr/sbin/gdm3 (PID: 6019)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/sbin/gdm3 (PID: 6019)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6023)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6023)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)
Source: /usr/bin/pulseaudio (PID: 6050)	File: /run/user/127/pulse (bits: - usr: - grp: - all: rwx)

Source: /usr/sbin/rsyslogd (PID: 5733)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5733)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 5803)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5836)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5836)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5922)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 5922)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 5929)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/lib/xorg/Xorg (PID: 6101)	Log file created: /var/log/Xorg.0.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/ngwa5.elf (PID: 5425)

File: /tmp/ngwa5.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5803)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5929)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6101)	Truncated file: /var/log/Xorg.pid-6101.log

Source: /usr/bin/ps (PID: 5593)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5732)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5829)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6101)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated (PID: 6120)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 6138)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 6147)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/gnome-shell (PID: 6177)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6050)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6385)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6331)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/ngwa5.elf (PID: 5423)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5434)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5713)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5732)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5733)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5803)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5805)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5835)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5836)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/gdm3/gdm-session-worker (PID: 5917)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5921)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5922)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5929)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/gdm3/gdm-session-worker (PID: 6036)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-binary (PID: 6063)	Queries kernel information via 'uname':
Source: /usr/lib/gdm3/gdm-session-worker (PID: 6092)	Queries kernel information via 'uname':
Source: /usr/lib/gdm3/gdm-x-session (PID: 6099)	Queries kernel information via 'uname':
Source: /usr/lib/xorg/Xorg (PID: 6101)	Queries kernel information via 'uname':
Source: /usr/libexec/at-spi-bus-launcher (PID: 6132)	Queries kernel information via 'uname':
Source: /usr/libexec/at-spi2-registryd (PID: 6499)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-binary (PID: 6119)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated (PID: 6120)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 6138)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 6147)	Queries kernel information via 'uname':
Source: /usr/bin/gnome-shell (PID: 6177)	Queries kernel information via 'uname':
Source: /usr/libexec/ibus-x11 (PID: 6337)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-wacom (PID: 6530)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-color (PID: 6534)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-keyboard (PID: 6536)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-smartcard (PID: 6540)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-media-keys (PID: 6543)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-power (PID: 6558)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6050)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6385)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6331)	Queries kernel information via 'uname':
Source: /usr/sbin/avahi-daemon (PID: 6508)	Queries kernel information via 'uname':
Source: /usr/lib/packagekit/packagekitd (PID: 6509)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-hostnamed (PID: 6574)	Queries kernel information via 'uname':
Source: /usr/libexec/fprintd (PID: 6746)	Queries kernel information via 'uname':
Source: /usr/libexec/colord-sane (PID: 7059)	Queries kernel information via 'uname':

Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 9)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.984] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.918] (II) vmware(0): Not using default mode "1024x576" (monitor doesn't support reduced blanking)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x480": 36.0 MHz, 43.3 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.638] (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): vis: 4
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.092] (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.874] (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.996] (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.055] (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "864x486" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.949] (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.644] (II) event3 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.508] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.372] (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.560] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.698] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.268] (==) vmware(0): Using HW cursor
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.870] (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.522] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.333] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.650] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.036] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.935] (II) vmware(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.075] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.125] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.428] (**) vmware(0): Default mode "1152x864": 119.7 MHz, 77.1 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.718] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): Default visual is TrueColor
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.805] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:07 galassia /usr/lib/gdm3/gdm-x-session[6101]: (EE) vmware(0): Failed to open drm.
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.927] (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.138] (**) vmware(0): Default mode "640x360": 17.8 MHz, 22.2 kHz, 59.3 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1024x768": 65.0 MHz, 48.4 kHz, 60.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.555] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.819] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.087] (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.589] (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1024x768"x70.1 75.00 1024 1048 1184 1328 768 771 777 806 -hsync -vsync (56.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "320x175" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.448] (**) vmware(0): Default mode "1152x864": 108.0 MHz, 67.5 kHz, 75.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.227] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.545] (II) vmware(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 96.8 MHz, 63.0 kHz, 70.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.184] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:04 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware: driver for VMware SVGA: vmware0405, vmware0710
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.039] (**) vmware(0): Default mode "640x480": 25.2 MHz, 31.5 kHz, 59.9 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.866] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.922] (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:04 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) Loading /usr/lib/xorg/modules/drivers/vmware_drv.so
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 143.5 MHz, 91.5 kHz, 100.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.087] (II) vmware(0): Modeline "720x400"x85.0 35.50 720 756 828 936 400 401 404 446 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.388] (*) vmware(0): Driver mode "vmwlegacy-default-800x600": 36.3 MHz, 36.2 kHz, 60.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.810] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.129] (II) vmware(0): Modeline "640x360"x59.8 18.00 640 664 720 800 360 363 368 376 -hsync +vsync (22.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Clock range: 0.00 to 400000.00 MHz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "832x624": 57.3 MHz, 49.7 kHz, 74.6 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): DPI set to (96, 96)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.625] (II) vmware(0): Modeline "1152x864"x75.0 104.99 1152 1224 1352 1552 864 865 868 902 -hsync +vsync (67.6 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.565] (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.212] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): depth: 24
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.960] (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.359] (WW) vmware(0): Disabling 3D support.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.974] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.878] (II) vmware(0): Not using default mode "720x405" (monitor doesn't support reduced blanking)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 8)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.473] (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.005] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 241.006] (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.537] (II) vmware(0): Initialized VMware Xinerama extension.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.727] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.118] (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.642] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.197] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1024x576"x59.9 46.50 1024 1064 1160 1296 576 579 584 599 -hsync +vsync (35.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: ngwa5.elf, 5423.1.00007ffe4dc9f000.00007ffe4dcc0000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.mJEuDe
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.891] (II) vmware(0): Not using default mode "864x486" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.930] (--) vmware(0): caps: 0xFDFF83E2
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.618] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.766] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: message repeated 3 times: [ (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)]
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 105.0 MHz, 67.6 kHz, 75.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.781] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.249] (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.935] (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.404] (II) vmware(0): Modeline "1152x864"x100.0 143.47 1152 1232 1360 1568 864 865 868 915 -hsync +vsync (91.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): Will set up a driver mode with dimensions 800x600.
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "800x512" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.300] (II) vmware(0): Not using default mode "320x175" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "360x200" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.723] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x480"x85.0 36.00 640 696 752 832 480 481 484 509 -hsync -vsync (43.3 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "720x400"x85.0 35.50 720 756 828 936 400 401 404 446 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.681] (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "720x405"x59.5 22.50 720 744 808 896 405 408 413 422 -hsync +vsync (25.1 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.338] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): mheig: 885
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.321] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.508] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.833] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.450] (II) vmware(0): Not using default mode "512x384i" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.060] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.845] (II) vmware(0): Modeline "832x624"x74.6 57.28 832 864 928 1152 624 625 628 667 -hsync -vsync (49.7 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.839] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.479] (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.522] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.144] (--) vmware(0): w.blu: 8
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.662] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.857] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 230.687] (II) vmware: driver for VMware SVGA: vmware0405, vmware0710
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.157] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.981] (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.5 kHz, 75.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.715] (II) vmware(0): Modeline "1152x864"x70.0 96.77 1152 1224 1344 1536 864 865 868 900 -hsync +vsync (63.0 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: Xorg.0.log.255.dr	Binary or memory string: [ 230.276] (II) Loading /usr/lib/xorg/modules/drivers/vmware_drv.so
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.099] (--) vmware(0): bpp: 32
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 121.5 MHz, 77.5 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.829] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1024x768"x85.0 94.50 1024 1072 1168 1376 768 769 772 808 +hsync +vsync (68.7 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.457] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.315] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.911] (**) vmware(0): Default mode "800x600": 50.0 MHz, 48.1 kHz, 72.2 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.016] (II) vmware(0): Modeline "640x480"x75.0 31.50 640 656 720 840 480 481 484 500 -hsync -vsync (37.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x350"x85.1 31.50 640 672 736 832 350 382 385 445 +hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.927] (**) vmware(0): Default mode "800x600": 40.0 MHz, 37.9 kHz, 60.3 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.782] (**) vmware(0): Default mode "1024x768": 75.0 MHz, 56.5 kHz, 70.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.149] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 108.0 MHz, 67.5 kHz, 75.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.312] (II) vmware(0): Not using default mode "320x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.550] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.233] (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.623] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.435] (II) vmware(0): Modeline "1152x864"x85.0 119.65 1152 1224 1352 1552 864 865 868 907 -hsync +vsync (77.1 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.755] (II) vmware(0): Modeline "1024x768"x85.0 94.50 1024 1072 1168 1376 768 769 772 808 +hsync +vsync (68.7 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.599] (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 81.6 MHz, 53.7 kHz, 60.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x360": 17.8 MHz, 22.2 kHz, 59.3 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.009] (--) vmware(0): pbase: 0xe8000000
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.260] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.594] (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.102] (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.254] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.619] (==) vmware(0): Backing store enabled
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "832x624"x74.6 57.28 832 864 928 1152 624 625 628 667 -hsync -vsync (49.7 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.136] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.633] (II) vmware(0): Not using default mode "416x312" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.178] (==) vmware(0): DPI set to (96, 96)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x350": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.388] (--) vmware(0): VMware SVGA regs at (0x1070, 0x1071)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.991] (**) vmware(0): Default mode "640x480": 36.0 MHz, 43.3 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.910] (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1024x576" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.965] (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.740] (II) vmware(0): Not using default mode "1440x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.790] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) event2 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.980] (--) vmware(0): vram: 4194304
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.407] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.928] (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.519] (II) vmware(0): Initialized VMWARE_CTRL extension version 0.2
Source: Xorg.0.log.255.dr	Binary or memory string: [ 230.190] (==) Matched vmware as autoconfigured driver 0
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.260] (==) vmware(0): Default visual is TrueColor
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.420] (II) vmware(0): Modeline "1152x864"x85.1 121.50 1152 1216 1344 1568 864 865 868 911 +hsync -vsync (77.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.771] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.914] (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.634] (II) vmware(0): Initialized VMware Xv extension successfully.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.687] (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "960x540"x59.6 40.75 960 992 1088 1216 540 543 548 562 -hsync +vsync (33.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.377] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): Using gamma correction (1.0, 1.0, 1.0)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "800x600"x85.1 56.30 800 832 896 1048 600 601 604 631 +hsync +vsync (53.7 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.723] (**) vmware(0): Default mode "1152x864": 81.6 MHz, 53.7 kHz, 60.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.490] (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.814] (**) vmware(0): Default mode "1024x576": 46.5 MHz, 35.9 kHz, 59.9 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.695] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "vmwlegacy-default-800x600"x60.0 36.25 800 801 802 1002 600 601 602 603 (36.2 kHz ez)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.628] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.302] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x480": 25.2 MHz, 31.5 kHz, 59.9 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.403] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.795] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:05 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Creating default Display subsection in Screen section
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.097] (**) vmware(0): Default mode "640x400": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.798] (**) vmware(0): Default mode "1024x768": 65.0 MHz, 48.4 kHz, 60.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: message repeated 3 times: [ (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)]
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1440x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.625] (==) vmware(0): Silken mouse enabled
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.217] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Virtual size is 800x600 (pitch 1176)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.905] (II) vmware(0): Not using default mode "960x540" (monitor doesn't support reduced blanking)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.971] (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.073] (II) vmware(0): Modeline "720x405"x59.5 22.50 720 744 808 896 405 408 413 422 -hsync +vsync (25.1 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.171] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.292] (II) vmware(0): Clock range: 0.00 to 400000.00 MHz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.565] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.672] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.702] (**) vmware(0): Default mode "1152x864": 96.8 MHz, 63.0 kHz, 70.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.147] (II) vmware(0): Modeline "640x360"x59.3 17.75 640 688 720 800 360 363 368 374 +hsync -vsync (22.2 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.776] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.031] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x75.0 104.99 1152 1224 1352 1552 864 865 868 902 -hsync +vsync (67.6 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:04 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) Module vmware: vendor="X.Org Foundation"
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.517] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.018] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.919] (II) vmware(0): Modeline "800x600"x72.2 50.00 800 856 976 1040 600 637 643 666 +hsync +vsync (48.1 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): bpp: 32
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.954] (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.964] (II) vmware(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.331] (II) vmware(0): Not using default mode "360x200" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): pbase: 0xe8000000
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.170] (II) vmware(0): Modeline "640x350"x85.1 31.50 640 672 736 832 350 382 385 445 +hsync -vsync (37.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: ngwa5.elf, 5423.1.00007ffe4dc9f000.00007ffe4dcc0000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.mJEuDe:
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.110] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.173] (==) vmware(0): Depth 24, (==) framebuffer bpp 32
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.270] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.281] (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.804] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.255.dr	Binary or memory string: [ 241.011] (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): w.blu: 8
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.499] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.876] (**) vmware(0): Default mode "800x600": 56.3 MHz, 53.7 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.903] (II) vmware(0): Modeline "800x600"x75.0 49.50 800 816 896 1056 600 601 604 625 +hsync +vsync (46.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x360"x59.3 17.75 640 688 720 800 360 363 368 374 +hsync -vsync (22.2 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.118] (**) vmware(0): Default mode "640x360": 18.0 MHz, 22.5 kHz, 59.8 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1024x768i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.207] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.379] (WW) vmware(0): Disabling RandR12+ support.
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:07 galassia /usr/lib/gdm3/gdm-x-session[6101]: (WW) vmware(0): Disabling Render Acceleration.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.756] (II) vmware(0): Not using default mode "800x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.432] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.537] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.131] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.097] (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): Backing store enabled
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Initialized VMware Xv extension successfully.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.398] (**) vmware(0): Default mode "1152x864": 143.5 MHz, 91.5 kHz, 100.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.797] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:04 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) LoadModule: "vmware"
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:07 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): VMware SVGA regs at (0x1070, 0x1071)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x400"x85.1 31.50 640 672 736 832 400 401 404 445 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.545] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x60.0 81.62 1152 1216 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1024x768": 78.8 MHz, 60.0 kHz, 75.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.128] (--) vmware(0): w.grn: 8
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x85.1 121.50 1152 1216 1344 1568 864 865 868 911 +hsync -vsync (77.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.053] (II) vmware(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.848] (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.998] (II) vmware(0): Modeline "640x480"x85.0 36.00 640 696 752 832 480 481 484 509 -hsync -vsync (43.3 kHz d)
Source: ngwa5.elf, 5423.1.000055b2d4783000.000055b2d48b1000.rw-.sdmp, ngwa5.elf, 5427.1.000055b2d4783000.000055b2d48b1000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): Using HW cursor
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.9 kHz, 72.8 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.162] (**) vmware(0): Default mode "640x350": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.729] (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.044] (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1152x864": 119.7 MHz, 77.1 kHz, 85.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "800x600": 36.0 MHz, 35.2 kHz, 56.2 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.512] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.632] (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.275] (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.948] (**) vmware(0): Default mode "800x600": 36.0 MHz, 35.2 kHz, 56.2 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.164] (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.348] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.974] (**) vmware(0): Default mode "864x486": 32.5 MHz, 30.3 kHz, 59.9 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x480"x75.0 31.50 640 656 720 840 480 481 484 500 -hsync -vsync (37.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.341] (EE) vmware(0): Failed to open drm.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.800] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "800x600": 40.0 MHz, 37.9 kHz, 60.3 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: ngwa5.elf, 5423.1.00007ffe4dc9f000.00007ffe4dcc0000.rw-.sdmp, ngwa5.elf, 5427.1.00007ffe4dc9f000.00007ffe4dcc0000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.490] (II) vmware(0): Modeline "1152x864"x75.0 108.00 1152 1216 1344 1600 864 865 868 900 +hsync +vsync (67.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.396] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.687] (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): RGB weight 888
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.704] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.791] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.309] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.114] (--) vmware(0): w.red: 8
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.362] (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.265] (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.516] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.609] (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x360"x59.8 18.00 640 664 720 800 360 363 368 376 -hsync +vsync (22.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) event3 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.255.dr	Binary or memory string: [ 241.025] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.494] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "864x486": 32.5 MHz, 30.3 kHz, 59.9 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.461] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.943] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "720x405": 22.5 MHz, 25.1 kHz, 59.5 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) vmware(0): Silken mouse enabled
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.741] (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.428] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Initialized VMware Xinerama extension.
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (*) vmware(0): Driver mode "vmwlegacy-default-800x600": 36.3 MHz, 36.2 kHz, 60.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:07 galassia /usr/lib/gdm3/gdm-x-session[6101]: (WW) vmware(0): Disabling 3D support.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.469] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "720x400": 35.5 MHz, 37.9 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 230.923] (II) vmware(0): Creating default Display subsection in Screen section
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.107] (II) vmware(0): Modeline "640x400"x85.1 31.50 640 672 736 832 400 401 404 445 -hsync +vsync (37.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "640x480"x72.8 31.50 640 664 704 832 480 489 492 520 -hsync -vsync (37.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:04 galassia /usr/lib/gdm3/gdm-x-session[6101]: (==) Matched vmware as autoconfigured driver 0
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1024x768"x75.0 78.75 1024 1040 1136 1312 768 769 772 800 +hsync +vsync (60.0 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.424] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.464] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.951] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 9)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "800x600": 56.3 MHz, 53.7 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.858] (**) vmware(0): Default mode "960x540": 40.8 MHz, 33.5 kHz, 59.6 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.088] (--) vmware(0): depth: 24
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.669] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: message repeated 5 times: [ (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)]
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.815] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.613] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x70.0 96.77 1152 1224 1344 1536 864 865 868 900 -hsync +vsync (63.0 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.275] (==) vmware(0): Will set up a driver mode with dimensions 800x600.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.851] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.614] (**) vmware(0): Default mode "1152x864": 105.0 MHz, 67.6 kHz, 75.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.393] (II) vmware(0): Modeline "vmwlegacy-default-800x600"x60.0 36.25 800 801 802 1002 600 601 602 603 (36.2 kHz ez)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.355] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.080] (**) vmware(0): Default mode "720x400": 35.5 MHz, 37.9 kHz, 85.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.662] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 8)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.930] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.901] (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "512x384i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 230.352] (II) Module vmware: vendor="X.Org Foundation"
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.070] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): caps: 0xFDFF83E2
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.284] (==) vmware(0): Using gamma correction (1.0, 1.0, 1.0)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.895] (**) vmware(0): Default mode "800x600": 49.5 MHz, 46.9 kHz, 75.0 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.676] (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.065] (**) vmware(0): Default mode "720x405": 22.5 MHz, 25.1 kHz, 59.5 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.785] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.964] (--) vmware(0): depth: 24
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.883] (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "800x600"x72.2 50.00 800 856 976 1040 600 637 643 666 +hsync +vsync (48.1 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.709] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "864x486"x59.9 32.50 864 888 968 1072 486 489 494 506 -hsync +vsync (30.3 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.222] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.065] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.503] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.031] (II) vmware(0): Modeline "640x480"x72.8 31.50 640 664 704 832 480 489 492 520 -hsync -vsync (37.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "800x600": 50.0 MHz, 48.1 kHz, 72.2 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.527] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "960x540": 40.8 MHz, 33.5 kHz, 59.6 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.971] (--) vmware(0): bpp: 32
Source: ngwa5.elf, 5427.1.00007ffe4dc9f000.00007ffe4dcc0000.rw-.sdmp	Binary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.238] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.575] (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.922] (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1024x576": 46.5 MHz, 35.9 kHz, 59.9 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.202] (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.074] (--) vmware(0): mheig: 885
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "800x600"x75.0 49.50 800 816 896 1056 600 601 604 625 +hsync +vsync (46.9 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.411] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.382] (II) vmware(0): Virtual size is 800x600 (pitch 1176)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.570] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.454] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "720x405" (monitor doesn't support reduced blanking)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.761] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.411] (**) vmware(0): Default mode "1152x864": 121.5 MHz, 77.5 kHz, 85.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.934] (II) event2 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.833] (**) vmware(0): Default mode "832x624": 57.3 MHz, 49.7 kHz, 74.6 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: message repeated 4 times: [ (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)]
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x75.0 108.00 1152 1216 1344 1600 864 865 868 900 +hsync +vsync (67.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.420] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): w.grn: 8
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.861] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.790] (II) vmware(0): Modeline "1024x768"x70.1 75.00 1024 1048 1184 1328 768 771 777 806 -hsync -vsync (56.5 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "800x600": 49.5 MHz, 46.9 kHz, 75.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): mwidt: 1176
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.807] (II) vmware(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "416x312" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.531] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 230.244] (II) LoadModule: "vmware"
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x400": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "320x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.050] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.751] (II) vmware(0): Not using default mode "1600x1024" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.763] (**) vmware(0): Default mode "1024x768": 78.8 MHz, 60.0 kHz, 75.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:15 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.286] (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.367] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.297] (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 233.369] (WW) vmware(0): Disabling Render Acceleration.
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.159] (--) vmware(0): vis: 4
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.603] (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.082] (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.692] (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.702] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.747] (II) vmware(0): Not using default mode "720x450" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:14 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.441] (II) vmware(0): Not using default mode "1024x768i" (bad mode clock/interlace/doublescan)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "720x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.987] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.579] (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.884] (II) vmware(0): Modeline "800x600"x85.1 56.30 800 832 896 1048 600 601 604 631 +hsync +vsync (53.7 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.983] (II) vmware(0): Modeline "864x486"x59.9 32.50 864 888 968 1072 486 489 494 506 -hsync +vsync (30.3 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.024] (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.9 kHz, 72.8 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x100.0 143.47 1152 1232 1360 1568 864 865 868 915 -hsync +vsync (91.5 kHz d)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.755] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 236.009] (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.5 kHz, 75.0 Hz
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.968] (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.291] (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.847] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.584] (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "1024x768": 75.0 MHz, 56.5 kHz, 70.1 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.415] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.249] (==) vmware(0): RGB weight 888
Source: ngwa5.elf, 5423.1.000055b2d4783000.000055b2d48b1000.rw-.sdmp, ngwa5.elf, 5427.1.000055b2d4783000.000055b2d48b1000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:07 galassia /usr/lib/gdm3/gdm-x-session[6101]: (WW) vmware(0): Disabling RandR12+ support.
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.822] (II) vmware(0): Modeline "1024x576"x59.9 46.50 1024 1064 1160 1296 576 579 584 599 -hsync +vsync (35.9 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (--) vmware(0): w.red: 8
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (**) vmware(0): Default mode "640x360": 18.0 MHz, 22.5 kHz, 59.8 Hz
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.731] (II) vmware(0): Modeline "1152x864"x60.0 81.62 1152 1216 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:08 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1600x1024" (insufficient memory for mode)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.824] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 234.714] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.255.dr	Binary or memory string: [ 240.737] (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:09 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Modeline "1152x864"x85.0 119.65 1152 1224 1352 1552 864 865 868 907 -hsync +vsync (77.1 kHz d)
Source: syslog.125.dr	Binary or memory string: Dec 19 15:24:10 galassia /usr/lib/gdm3/gdm-x-session[6101]: (II) vmware(0): Initialized VMWARE_CTRL extension version 0.2
Source: Xorg.0.log.255.dr	Binary or memory string: [ 235.868] (II) vmware(0): Modeline "960x540"x59.6 40.75 960 992 1088 1216 540 543 548 562 -hsync +vsync (33.5 kHz d)

Language, Device and Operating System Detection

Reads system files that contain records of logged in users

Source: /usr/lib/accountsservice/accounts-daemon (PID: 5902)	Logged in records file read: /var/log/wtmp			Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 6023)	Logged in records file read: /var/log/wtmp

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: ngwa5.elf, type: SAMPLE
Source: Yara match	File source: 5423.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5427.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ngwa5.elf PID: 5423, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ngwa5.elf PID: 5427, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: ngwa5.elf, type: SAMPLE
Source: Yara match	File source: 5423.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5427.1.00007fab38017000.00007fab38039000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ngwa5.elf PID: 5423, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ngwa5.elf PID: 5427, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	1 Systemd Service	1 Systemd Service	1 File and Directory Permissions Modification	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	2 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	2 Scripting	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	1 System Owner/User Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Indicator Removal	NTDS	11 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	3 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ngwa5.elf	53%	ReversingLabs	Linux.Trojan.Mirai
ngwa5.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
daisy.ubuntu.com	162.213.35.24	true	false	high
raw.cardiacpure.ru	178.215.238.25	true	false	high
raw.cardiacpure.ru. [malformed]	unknown	unknown	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.rsyslog.com	syslog.95.dr, syslog.43.dr, syslog.125.dr	false	high
http://wiki.x.org	Xorg.0.log.255.dr, syslog.125.dr	false	high
http://www.ubuntu.com/support)	Xorg.0.log.255.dr, syslog.125.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
178.215.238.25	raw.cardiacpure.ru	Germany		10753	LVLT-10753US	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
178.215.238.25	wiewa64.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	Aqua.i686.elf	Get hash	malicious	Mirai	Browse
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	wiewa64.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	vkjqpc.elf	Get hash	malicious	Mirai	Browse
	wriww68k.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	wiewa64.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	njvwa4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.25
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.25
	star.ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24
	arm6.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24
raw.cardiacpure.ru	wiewa64.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	vkjqpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.4

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	wiewa64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wkb86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	njvwa4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wlw68k.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vkjqpc.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wriww68k.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	dwhdbg.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	dvwkja7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
LVLT-10753US	wiewa64.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wkb86.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	njvwa4.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	Aqua.i686.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	Employee Benefits & Bonus Docs 2024.vbs	Get hash	malicious	AsyncRAT, VenomRAT	Browse	45.88.88.7
	bot.mpsl.elf	Get hash	malicious	Mirai	Browse	94.154.174.120
	CPNSQusnwC.exe	Get hash	malicious	DCRat	Browse	45.88.91.89

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/memfd:30-systemd-environment-d-generator (deleted)

Download File

Process:	/usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	4.621490641385995
Encrypted:	false
SSDEEP:	3:+2snsY7+4VMPQnMLmPQ9JEcn8YLw6mNErZwb906izhs32Y0f/KiDXK/vi++BLiVv:Ess+4m4Mixc8Y06me6osMjDXj++yvn
MD5:	5EF9649F7C218F464C253BDC1549C046
SHA1:	07C3B1103F09E5FB0B4701E75E326D55D4FC570B
SHA-256:	B4480A805024063034CB27A4A70BCA625C46C98963A39FE18F9BE2C499F1DA40
SHA-512:	DF620669CD92538F00FEB397BA8BB0C0DC9E242BA2A3F25561DE20AE59B73AC54A15DBFBD4C43F8006FA09D0A07D9EC5DD5D395AD4746E022A17E78274DEB83B
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	QT_ACCESSIBILITY=1.PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin.XDG_DATA_DIRS=/usr/local/share/:/usr/share/:/var/lib/snapd/desktop.

/memfd:user-environment-generators (deleted)

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.657790370557215
Encrypted:	false
SSDEEP:	6:ulsT4m4Mixc8Y06me6kLT0QsMjDXj++yvn:XT5ikXT05OLj+Hvn
MD5:	769AC00395ABDA061DA4777C87620B21
SHA1:	AC12A8E0EB413395C64577FA7E514626B8F8F548
SHA-256:	75867CD2977A9A9AAB70E70CFEE3C20151F31C9B3CBDA4A81C06627C291D2C82
SHA-512:	67C2B17CDD15B7F69BE2DF4F3136E3F393C1C6F990755DFEEC1B0B4E1081A15132A8D77A1624CAD1F6255591AE54CB9135F1B94FE31D5876E2A17B215CDB78F3
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	env=QT_ACCESSIBILITY=1.env=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin.env=XDG_DATA_DIRS=/usr/local/share/:/usr/share/:/var/lib/snapd/desktop.

/proc/6068/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6071/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6073/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6075/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6077/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6079/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6084/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6132/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6159/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6162/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6166/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6168/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6170/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6172/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6175/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6341/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6499/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6515/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6708/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/run/avahi-daemon/pid

Download File

Process:	/usr/sbin/avahi-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:kt:kt
MD5:	F3EA87D8D603ECC8B8DBF387078F94F1
SHA1:	E24EC23415248D471C7B9650E0B21892529C75D5
SHA-256:	ABA88756FB875A7C0CA75BFE30BBBE9F3428376135AC3A88DE2D62BA5961CE8D
SHA-512:	F23E996740FA7ABFF87A8BFA77CE967A6B1BBEB85D05486BEA797329D0EB589106A88E3F7D30F5372FDAFBF0B7B1E086989FBFA4C794CBAB889DBFEF9891BAF9
Malicious:	false
Preview:	6508.

/run/gdm3.pid

Download File

Process:	/usr/sbin/gdm3
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:nvn:vn
MD5:	257EA6949C88AF6E0B160805B34FDAB5
SHA1:	17791584116C057F45EAAA4E03CA650EC7F9878D
SHA-256:	26B107FFC0D4267181E9887CE32D7DB3F0F48B8757AE582BA96CCEA93942341B
SHA-512:	69D9143C36D66BFDB58519A595E496E96888D0E992F90B4980F2FA5420770ED5E7D8240AB1FFEADE720CCF0BD009EE298CB6AF287FE62587A434DF97DD7239ED
Malicious:	false
Preview:	6019.

/run/systemd/inhibit/.#1w84Hy9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.123896352911406
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifZvytjAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfZvyt0ApLHK7wR9n
MD5:	AAFB2887C1C74AC8C5B91C5D1E3A2C3A
SHA1:	37968FDA44C27A2A40655AD380A58E1BEF22F606
SHA-256:	72D9FC411CFAC886882D03FA15A427C29E158943058808FA55009FC09F23B43F
SHA-512:	8BE5C5F82B1CF98D1EFB053552CDFFF2F4852285DC001F729A00A9E64F589870DB41E2C41FADFC33635B87DE41DCF79EA4D145A42ABA0242C1254D6080E81C74
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6347.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#27BHm7a

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.229502665506919
Encrypted:	false
SSDEEP:	6:SbFuFyL8NEL1QXccIRI/cIlGjdC+xt0qKLXv0Rsz:qgFqXQXTI1Ilwt0qKjcRsz
MD5:	C08893EB3A6569648DBA0AC7EEA6229E
SHA1:	A0DBB13B2D8C45C090561304C95F3C04DA001838
SHA-256:	E3F6244AD9176A2DE5068EA2526C3E0DD1197D3DB9B4DCB211F2B28F9173FA27
SHA-512:	832BDF1B53EF8EC88335B7C7361592034B9A43EFA91752539F639B100EB32D8EAE1A9B28D2FDCBFFF8D5EAD5FFCCFD1EB61385D2114F240ECC74BF5D2912D583
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=handle-power-key:handle-suspend-key:handle-hibernate-key.MODE=block.UID=127.PID=6543.WHO=gdm.WHY=GNOME handling keypresses.FIFO=/run/systemd/inhibit/2.ref.

/run/systemd/inhibit/.#3QvDkob

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	147
Entropy (8bit):	5.180533233946161
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9c++ytsiXoqKZLXviX8/SfWADv:SbFuFyL8OAAx+xt0qKLXv0RT
MD5:	26AC40234E6F10B8F32E5B358241A54D
SHA1:	5FB432D3244E23027FCF11CE3F8E06CEB537BF7A
SHA-256:	6B53C0AC33F2719ACFEEBE81316D5D91499473A4669560DBB9404F8EF50CE24A
SHA-512:	6852DC1572127A42761CA851928D8B8E1C77F68CEF0723096626E525989E512BBEB6431D9C0987F30F4930796067E524E3C5E0BE14B7859D6F79FB7B22796B95
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=127.PID=6543.WHO=gdm.WHY=GNOME handling keypresses.FIFO=/run/systemd/inhibit/3.ref.

/run/systemd/inhibit/.#4t81z2c

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.165199761184817
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9c++tY4iXulpv5RX8/SflY:SbFuFyL8OAAx+fmlpLRS
MD5:	8AEFF1AC944112F23DD0DD22E1AB3369
SHA1:	53A163477D145E3F4C046D197336A9B7AFCBF4E9
SHA-256:	3224C1A8D2733700BFC3A5E6E76D8A2B392A6BD49787AC8463B40256BB309E2B
SHA-512:	C355D7AD68ACAEBBC41F686AAF803C580245780E79B5A9B8AF4DD5F9F130CFAB82C7D2AF529E558A01893A65DA50BE3DC142427A88BD01A921382E2A7D8882AD
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=127.PID=6558.WHO=gdm.WHY=GNOME needs to lock the screen.FIFO=/run/systemd/inhibit/4.ref.

/run/systemd/inhibit/.#5d0GyAa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	164
Entropy (8bit):	4.986393731004737
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9iftWqvDkBoDWicRF2Tg+tX8/Sf5:SbFuFyL8OAApfPDjDJcjKR5
MD5:	F66BEB2A6E73674313866453D65BE070
SHA1:	B6D392768D7A7781AD9AB549DE45B5C0523FE48D
SHA-256:	A1AEB54662E49DF171D99830FC715BBE172F2208440B7921A9658D34FE4E70EE
SHA-512:	9D84224080196C280664616A3A3F9B8E020C57B883225C5AAD23FD4463BE90A517D61702A8871B113835EBB33352A0CBC72F436126DB61DF6622BA6AD3E42531
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6871.WHO=ModemManager.WHY=ModemManager needs to reset devices.FIFO=/run/systemd/inhibit/5.ref.

/run/systemd/journal/streams/.#9:63066mkmg99

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.547381092784532
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp1JWwY7PETv8js7LH:SbFuFyLVIg1BG+f+MdWu0ji4s
MD5:	87471989FA762116DE91A68025782DB4
SHA1:	A4517AB8A771376A1D223533B2C682F01E7C7FD4
SHA-256:	4B0ADCB2BBE96D58EB5A4B09A490BE93169A1AF3DA60885E9359FF7F9D0D9294
SHA-512:	3E2AEFD8A672DCF5D059E85E4E35BB0A40D7BBB417162E6D8861652E8E2E387D0C0BB5CDD6C0DB734B1B04733F26C550AF6B95ED75DF2B1053E8ABDFC274646F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cb0a61b2792246e89f59661db62133f6.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:630716SkOY9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.52303729938597
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7EopASRbdSAVQIdvH:SbFuFyLVIg1BG+f+MANQSst8ji4s
MD5:	0E7ED0D3633CFA3C565DE49F5A26EA66
SHA1:	D5A7B777C5D4189F30978D9E64E5E0C1077FE0E9
SHA-256:	0C8C6BF1901ED8F4DA8DDBAF9EE4D3FE6878997A3DA2595391D0167AF25359AE
SHA-512:	AC700DDA4470F1EA7391FA8110CA2A25B7FC53194ED171FE7D4448915D386C4E8C3B57FF789FA8BA4B4AFE5A88174A50BCF3760284B8921A641E95A23227966B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=193a1ce013e74349875794032d0b23f8.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:63274H0xSRc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.370210474161635
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy1EHr7mGmdYuxsjsO:SbFuFyLVIg1BG+f+MyO3+YuqjtWL0
MD5:	D3807AB4B32CAF6A2E7D673495C65B05
SHA1:	F7F436480D27D27D91C5ECF6A2F6F5F9CAF1203C
SHA-256:	31520E67A6ECDCD5DB1F20E06334EBADCC11FBC2244271DAE518875D37C69690
SHA-512:	E9D23B2709D98560803670E0DB162389A342232847622569FF9E16C86BDAF14BF97F0B1083FF1B384DB1A78ED72C47844424CFEA748D0360F9CF559C6BC03BDF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=846ab87eded943f1ac20351566f38e2a.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:64155bXdvQ9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.358147447777038
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr8AzSGRn7HUujDVEJ:SbFuFyLVIg1BG+f+M4URnZejosQu
MD5:	85942C1AB9154B14A012053483D0C9D1
SHA1:	723AE50F03AF108ED778DEEDB3085E93D33D8AC3
SHA-256:	7A96F09EAAD412801E89BE38353367DE2B7CCA7903FFD93E6043ABD1BE9C7BD3
SHA-512:	EDB0B469E8C898ED72EF070B148A6381026BCC3A084E5BC831743042637E43000F3D663CC9D4EFB1E746D8A2EBC68EB4279811F312C502B56A26D271FAACE64D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=abc1eeb685c44d3d8a9bab10abfc103a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:64412zhgK6b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.43332697421401
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4ASTcRUrPWSZjs2ALAQ:SbFuFyLVIg1BAf+M4FvPDjNALyAZD
MD5:	16799E2C36A3025E6032F851D22AE048
SHA1:	A6B3B30947C7AC44562013DB9C1F1C6E368A7007
SHA-256:	24F5C792361418B74A37824FB7BFBCEBE6036721202CB35740C9F7145618DBF0
SHA-512:	2E53562852A06D4E53F3508FD635AD41F9A077A973E5963DDCCEE5E6031D4FE78B3DC50AC62EDD21AFD9296CCBAA9763E4D7AC09A83F1DDB04788338A429E8FA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2ef0141a8f694b0593f9cad0cb58ba3d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:64425aBvWAb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.32894536669985
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrqzqeXpuzzMxsjswK:SbFuFyLVIg1BG+f+M2zqXHMqjLkGq
MD5:	07041E6C8286725258E551865FED2417
SHA1:	9923F0DACD8E597AC39324616790CF288D35B178
SHA-256:	41C082869B054C63F424E876A8DAF2A0EC4A7B9DEC7451448161342428EDBA96
SHA-512:	26AE049712B6AACE0EDF1964C9BD1BEE5BE3E71F7382CB77479147331790C528558F46C6DE8CF4A8FC5EAB6150AAB1803BD45EAC976C9C4C35EEEFB57B897C8B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a0e7e010a46e43b8807868fa0a680d6c.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:64470yvQCB9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.458665849690377
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4B0QAZL4QHywsjs2BbM:SbFuFyLVIg1BAf+M4B0VZejNdQIeXD
MD5:	2B0B5D232EEF017D4405C1FE6084B639
SHA1:	3583CBCC3F3F1E823AF92B46167074A5DF68BDC0
SHA-256:	69F50F34BE1714E8C3CDD87F847863F0424A440743444FE25C2E12C85F9E0F92
SHA-512:	267FBDC206ED01A32E2A4FD2748FE05511CFA864D75BC3D998FBAA34AB6D7789B0B694FC76908D791C68153F9D13434AFD29E448D6EAF2A68EFF18A6F180072A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2dfed90f15e44778a9cabadc5bb87b4b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:64553c8AwEb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.476596047282594
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MF6iBXY4Ag2jZcHcljX+:qgFq6g10+f+MR8RmAu
MD5:	02F92BD791BCB99E0DEB46D79F46D05E
SHA1:	5AD3B578A0FBD22B0FED5ADD870900B3AC076130
SHA-256:	8828417F2FFAF8F21959766EBBD7D5DCBC1B0758BD75E79C86F1AA64618CA517
SHA-512:	9DD1E30698B42319869DEEE0DA298732686D15364BB1BD119C23756457853D0728121641F56616A59BFFE0BD5DCF58F7260CF328505273147B4CF1ABE49398F3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=abd2d03d03514bf9ba39f815d72e4c23.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:64555giek6a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.461954312059592
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm97KIHzQTNRF2jsjOA:SbFuFyLVIg1BG+f+MlKITQTnF2jNE
MD5:	C6B4A406F432E99932BD11A96FD135DA
SHA1:	60FDF65A7714ABBED0FA0160190CBD1C91E98D01
SHA-256:	AB24716DFEA9F060923A1CA20894BBEC6AD49F17F98DE3BD462F8345824E5B8B
SHA-512:	E373C743A26087F07B41137EA9A555B05110A8A01CD6FC2E2293E2DAC6100943EA884171BD3E20CB670D36E7010B45932139C363EC47581BAB7884EC6FDAEA62
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=778dad4a4b36410cb9329756f40c91b9.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:6467915wmDd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.404378984852473
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4EE4SAFb6SrRpEkhM:SbFuFyLVIg1BG+f+M4rfq5Rp522jbVC
MD5:	AD927CAA281EA133FA391B82D40884CB
SHA1:	5830C8E6DB2BC37472E2227C91CFE6C787A989CB
SHA-256:	FB1A21E39C58B0E9E890352373D15C75A0FCEAD8A0A840D2D14EF9B10317E6D5
SHA-512:	1CD3E9E89246DDF179C6F6DA02380E7748E7562278C6DA36E0F1DB0D9BC9D9201513EB549ECE67CD72C127C3789FB6DD49D07F2D45DBA31EBFA2529B0EFD0F87
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2a8eaebb077e48d79f494bad84c76c62.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:65480nHWe1d

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3594198687558
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyToRHjEAhYVVcIMqS:SbFuFyLVIg1BG+f+MyTo1jpePMqjLkGq
MD5:	4B73B35B763C6B2E13431C3A450DE4C0
SHA1:	90AFE63561DA27397DF692F2C8978F1AC0B7D9E0
SHA-256:	0FBE3752DE4FE430AAE30C47C690D344CC19EADA6EBBEAEAAF73201A6508F115
SHA-512:	701B582F13E238789DA516F8F202FF14C5EE0535A702EA4197DF990B6004454D47D32D3328FBCE5107745EEB02328E53B1169A11AAE6D5B18DAD642C99E49D56
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8107ad4491f04c92aeea7820098dd905.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:655906KVyF9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.40540630831452
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmyjcGTzSnBEJhwsjs2BP:SbFuFyLVIg1BAf+MygGCnBEfZjNTZD
MD5:	2DBBF27C62BC02627DCF8E31980EEFC5
SHA1:	97CE64C9022F436FA8BE09E60055A881BC5E8379
SHA-256:	96E721757D142FBD95FC16B371A809B5C65C887CA62EF97111A8CE09A860CDFA
SHA-512:	334EDE73A6A7D222EE0670C15EC6CD54B792403B7976DEBF661A077B025E1ACB0123B299ABD4394313755487AFF8B8E1312CCE5C4ECE3C00B4922ECC086C2193
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=872cbfd4bd0849919314077aceda062c.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65600x9LhSb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.414917254175652
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyRs8QVV24MRxsjs16:SbFuFyLVIg1BG+f+My+jV2nqjosQu
MD5:	E5CC6132DEF98E429BD7BC6D1E500710
SHA1:	986841D086ADA21E0AD484B61CD484EFB8A216FA
SHA-256:	7A2D8B8016763F36756593122962F399B4DDAE9D80D1B294821ED8A333C716AE
SHA-512:	EEFA437A7ABEFEB06E7262C10681685DFB0F102BF5DEF61F66D8D5302D66FD66B6FA487FCA2DA988C447C9E7B4F9ADADA719375C9A9F05D1B555992AEBFA56EC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8edc694e17d84fcd8b1bd5009ba46713.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65629c7kTTa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.480659015417053
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5i1pcOsYM2+g2jsig:SbFuFyLVIg1BG+f+MYA6f2jZcHcljX+
MD5:	63E7EEC0D41003712241A74360447EFE
SHA1:	E2D7165910D7533F2396DB078B5B7DA6C00DF086
SHA-256:	CC194E3D4958DFA13738B7CA72A488461DDF358C81AD4F01FF145866E47CEC81
SHA-512:	BEF992BD283F2B1B12AD183351D1833E78BEB369CF9F352299AF69B3A20EE99F3B3EBBF8453BCF5B2F7D380B9284147E73E7A23010AF3E13F64251213429A05E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3eb46d00951f49f584e30c99127909fd.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66468hE0l0b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.39721834570925
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrfcQbFAnA02lsjshP:SbFuFyLVIg1BG+f+Mo+FAnAN2jbVC
MD5:	CBB65BA48E7527B1F022DEE2FEBE2C51
SHA1:	404B7877D7C09FE37EA15B6A7DF428B15D26E246
SHA-256:	7896FC05971FCD7AE9CA09F483A50028DCE7AC01F5A8CA9309683624033945EF
SHA-512:	EF4E674BAC684736CE1E4826FAAB74382BFA1CF375B3E490326DD7844B96C91C04F873D77CBFCAF718CA51074F6DD941C610AACB65F837A8431490C2AE9169DE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a88b8bc567a7443ebb62c8b0edcfcbb1.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:66488pfeKLd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.453954685693998
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmvNBMWdWcWBdaGOb:SbFuFyLVK6g7/+BG+f+M1bWcGda6jNq
MD5:	036AEBF2CCE30539ABEEF1957F5222F6
SHA1:	E74E77A661240EB4B3CCD1D5633BFED4A54ADC96
SHA-256:	4B9B5AD843DA800F2906C4E5DA11DD2CBD8699CD01EA2D36A02DF1787880E2A4
SHA-512:	812826628A81EC18E1504E8712C7EDCA5734825C2943AD6A8EE7D43C6A1267548BDDA3D1865102CEC7E90F885D6C8F9E16014329552C5B2C44E3D419FC7B028F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e46ff3c10383493da4d91b8757524a0c.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:66489snLnDc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.359563034634681
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm5TBUeV37dwRZjsz:SbFuFyLVI6g7/+BG+f+MbUelZwzjNq
MD5:	D28BCB838981518FE068D52FAA3D7BA9
SHA1:	9B6EE6A8246590E9FD2D3CA71DFBFC72294AF7AF
SHA-256:	0BCBA96DC88AB94D063B20992945F7717352634C4425286E1EFE7D218939B8C1
SHA-512:	F543B48D999C415F50E8898105534E602F76383B52916AD529D9A553DC887B2B11B2B7556FFE4128B0FDB03C0FECE33F5AA96E083B9ED63C6818448600F2DDBD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3cb45794d1ae4d50b2ad0c8dbedb0bcd.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:66505hpFsAc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.476538687288005
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu8dF432g2jZcHuWasI6m5esI61Urt:qgFq6g10+f+MbgYmuWap6eep6eB
MD5:	C55F52011C0CCD07CC059090D4966844
SHA1:	562B007B7B8995D5184897B2EBDB3369F95EA51F
SHA-256:	6B4C270621395C32C28B49F8FFFC9D613626C98C966EC5FDA0D36DCF2C2B07B1
SHA-512:	331BE01C4EBF8BA64E91812134A4B64C3A3AFBDF0EE681F2C97AFD64D10A6271C2F73A4E7444B279C9CA895350BA7F385B7E1077383A13FD998A04A11666DA13
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=db578012f8554134985ef0598c225ed3.IDENTIFIER=systemd-user-runtime-dir.UNIT=user-runtime-dir@127.service.

/run/systemd/journal/streams/.#9:66524axQ9wb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.401315065987414
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5VJTyV6nHXRSdewsy:SbFuFyLVIg1BG+f+MJSAHgeZjZcHBrt
MD5:	F7BC5AFDFE2CCB6B901F853D9C6C66C6
SHA1:	150465EA7A8236E11687AF172F6CB7A1233CFE75
SHA-256:	C50D7A098BE4C154E76DABA87F4C72E659AFF06FDAFC26CB50403DE8707FA0AB
SHA-512:	A82C76D6E28A44663B7072AF7F49B588E17FBFF7E1469A3D09E1D2C2E5F2612A5E300BC5C9BF4CFE60AB2A8E30E7938E01172C9BE2D139066524832B3A120CEE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3313ca7edf76410fb5fef5b2b472aa1a.IDENTIFIER=systemd.UNIT=user@127.service.

/run/systemd/journal/streams/.#9:66527hfHz8d

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	187
Entropy (8bit):	5.3301545518735445
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu9DiBqRiVAIsjsicz:SbFuFyLVIg1BG+f+Mu9DiwPjZcHjv
MD5:	72ED3EE0B4D425A05E0B620EFCB0179E
SHA1:	254CBDF1E3459CE842489CA57DCC24969AA9F0AA
SHA-256:	7BA900E5ED2872B21A46CDA38AC3562B4098CECAFEB8234E36CEE57C3AD45858
SHA-512:	32F0E6DED76B2BCA12AFD68E6671C71EB3C51FDBA80FE623FADA6500E4BF29805097D369BB91DC6AD2E2C09D166B22CD2BD1DE9CD7A9702FA64EACBC6C8464DE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=daf47a8e99f74ddd94425b0e23e744ea.IDENTIFIER=systemctl.

/run/systemd/journal/streams/.#9:66529lFb9vd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.346326298652735
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo2CWJAwTWBBSvF2jt:SbFuFyLVIg1BG+f+Mo2VJAwqO0jtWL0
MD5:	4E4FEF5509E4DC4E30F3E383C410C99B
SHA1:	E42CB8D7B6963278288F24C56371FD3404D3FCBB
SHA-256:	2F4CD9582EE26AC6181EE2FFA0B6240D5DE64A5E85F9A4CB4E8833475D948A3E
SHA-512:	E41055B48BD66E07DE01EF0EA78B80A320A337081B297D17CECDF95A6AAEC273A765AA14A5049AEC22CB3BDDDE3574AA19393138439B0AB116CB3BC9AB97F9AE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b942005e22734cd4a1b774366dad8a37.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:66530IV7zGc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.5027947282396354
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M+pqREut2jFQMzKaBu:qgFqo6g7/+0+f+M8xTmh
MD5:	716CE4DE38B499C06655C581FAAEDD11
SHA1:	B79769488B0B16761988678F4DE8F57EFC76C9BD
SHA-256:	582DF29F7EF4B20B918E6DC4D46CE91E40E69FB882DFF5A101CBC75618FAE4FF
SHA-512:	47B00CDE7B7C302167942558E73979812EEC7B16E3641AA590EFA00F0D52A58EFE596E2450E8DAF266CA171573CDE4C9D80713CDD3E34673C9DFC8B31149AB5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4426f60185f743f0a0b95afdefaa9522.IDENTIFIER=/usr/lib/gdm3/gdm-wayland-session.

/run/systemd/journal/streams/.#9:66531cH8QYa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.463392434789873
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MuCrdgWC1jFQMzKaBu:qgFqdg7/+0+f+MZTCrTmh
MD5:	9D627F1B885161F5FFA9879394169882
SHA1:	B2C352218FA7CE7A397725CD240A1E1D00F1F5FD
SHA-256:	3B7146168B56419EAC453D74EABF8C35F001D8AE9D6A8D4916AE36E34F420F2F
SHA-512:	F4CBAEAB62B1F1F38270E19B8BB1E30239A13C047A66E4F3C6CD1564C253156CA9E2CA5CA82BC6FEE64B963D31BFB8AAEE9D689572C349D08C5B58DCECCF071F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d5ed34e0d9c5402a85b4f953ceb3d83a.IDENTIFIER=/usr/lib/gdm3/gdm-wayland-session.

/run/systemd/journal/streams/.#9:66579al4rSb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.411205150531123
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+hUZlyF2jLTTIWTIL:qgFq6g10+f+MEUZ86EWEL
MD5:	229D48F245DFF1B3C6CFDE354A62C8A9
SHA1:	CCE1CD7350C0CFA2B90EA812C4B2EF88ADFA2E88
SHA-256:	5B059499BD65D7859688037B7BCCCD47D431D6C5F6AEF1B3715370E43B4C947F
SHA-512:	3FE8B16783F06C2427FC659C241708B477B35685B80BD7A198C05100B2CF1C1EE192496680D703F35A08B953F0218A93D9ECCF98FD5D28A9B3EF4B7363941786
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=47aade12a1bb4ea28560f0d12f38ad27.IDENTIFIER=accounts-daemon.UNIT=accounts-daemon.service.

/run/systemd/journal/streams/.#9:66604BeDw69

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.373410616337366
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzvdHVBCfEpoVglsj0:SbFuFyLVIg1BG+f+MTdHCjbVC
MD5:	FB3611C33B9ED79DCE8245B2CB00587E
SHA1:	3E6833C2F104373404C3C56FD2CCA944C4B3EAFF
SHA-256:	346A65B16F319C07E15A484796662F407F3E56473C4C415DB4E8F933B6676D0D
SHA-512:	C958F474A13561B5FFE36800ADB995F9C096B7FB488FB7310AE0A24218D8DF31CA587C91CFCB0679ED5D2AF83A3D510059C84069180242F84F4689E29671BB61
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9e2308b2913c4c3fbb81a90a0fa942a1.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:66628VgLgU9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.409057826708546
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm9zRQRmd26E2FOsQ:SbFuFyLVK6g7/+BG+f+MXQRmd2uFDjNq
MD5:	2A60DF5FEA2D5CA70F25603F8D14C637
SHA1:	A5EDF86D76E618961BA1181892F2F30DB1BA46CC
SHA-256:	7B33A6C0BE9935751AF217904518EE11C4BE12658A6FA2BA85FB1E4552874DB2
SHA-512:	6DF061D5B07A49BCE109A848DC28FF094987482F9498B30F2CA20BCBF6926125A57DA489401D0DF9A6A60498D8B325CEAA5C182BB95107A01090598257AE98DE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=798746498c854dc68f46e45a9a9bd3ec.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:66629nuqAJc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.406247152828324
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm7Qdre8DTGvXsjsz:SbFuFyLVI6g7/+BG+f+MMdy8XG0jNq
MD5:	4DBB88FB323ED01723E36C9217BD5D17
SHA1:	178DC216D1BB42B0B720C4899E9044CF18BA2325
SHA-256:	F84F140B0C61AF24FA33FCA7619DC3C4B3D94104EC8C2F894988EEA40AA28598
SHA-512:	8D9EBF157BA83B3039AA43474EBA974FA36B074FEA903C78B58585C004A236B7E2032EC4B6C580C4B151B6DE0606EC03335D7AFBE872B909A897241743F4D67C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=169042fdf8c94e759067dd6ef90e8281.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:666474scrOc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.381722799530078
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm61WTrofbBMVMxsjsV:SbFuFyLVIg1BG+f+M6irofbB8MqjLkGq
MD5:	E77C91E41E52EA5F418CCC10CD80475C
SHA1:	85B6ACEC1BD252C72DB4C28F259394A89978AF71
SHA-256:	32A9A2AC3300CD126E5F2C159EC86FE2FBB9CD08AE3AA85F969503F0F52B830B
SHA-512:	D8EA3092310A98B563AC4703B8028F1E6E68A72EBEB76C4FA6B7EC0DFC147E205068DBE647CED7F41E9B091A9C825672AEEE1355A64679D6BA1FE8BDEA2DBFD1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0a9365b7538c403ab066a94c35615cac.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:66742UwLgZ9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.37513236916032
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8tT7R6ngjMhuqjsmM:SbFuFyLVIg1BG+f+M82gQjdCLKzK
MD5:	AF87310230E706D9E9976AD0871ABFDB
SHA1:	75155F67E4DDBB7DB99D1CAB2E353898FE46689B
SHA-256:	BC4059EA2310FAAE0340F369A5EA5C2002EAEA3DC7047CA72ECF876AFD38BE34
SHA-512:	8084C45645E0EB11BB880F22A7DD25AF510D04B7824AC9752458CBD2DC9434F7D64E27EC3D0295D35562B398ED30A429A57783048B50988E01FD5AEBDAB60812
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60a57a0212e648bdbefff6b6b80575ff.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:66743Lw8Fsc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.404417010462782
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MNZQZh+XCt0jdCt/rRMtq:qgFq6g10+f+M3XC0CDL
MD5:	CADE21DB25EDE45FC9951FB382E9B81C
SHA1:	94098B356531899566214903FDD7BAC9B50F0502
SHA-256:	2F62D8F050FB1DBA988546480ABFD504E7E8375975656BBFCFB5C1227BBB75E2
SHA-512:	A626D255BC9D26AE338E394EC553503A08FC26A114D2387E468E05FFAFC3BD75B4D5CAFD0743F40E65DA6EB7E90838E06EB8F676A74148ADF413E1BA05B0BBA2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ae8ec56056ee4883ae58f399303227aa.IDENTIFIER=whoopsie-upload-all.UNIT=apport-autoreport.service.

/run/systemd/journal/streams/.#9:66827wbpAOa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.461934614228074
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvaXHD4g24KTjs1Ha7:SbFuFyLVIg1BG+f+MyT52fTjosQu
MD5:	230D16B567F96133CCB84AB15BCACF75
SHA1:	484FED0762FB83C7CB3504165E35BBD4D46A3C34
SHA-256:	C5D120A155A237986169D2264267E3856171972F4680C352528F30449C324B17
SHA-512:	B51B23FE70D93D1E37D0A7C7ED6760D81D4AF50A95835A1CECEB46FDC8FA179E370B0B00DD16B462E4C3D5D9D81B30AA2F1CC84044455D4AAD59BF75991CD20E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e65c16e58bfa462ab334ffc285f69759.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66957JAoXza

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4909975682554615
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5jWTgVYJRvsjsicWg:SbFuFyLVIg1BG+f+MZWEVrjZcHcljX+
MD5:	E20A10F4094652AC60B627D368668212
SHA1:	C37521C9898409073641E26CFE02361931AF6FA1
SHA-256:	A679A3F2CDD8C6339B5010296F3AB977996482DB553D1DF0F09AF1D289675887
SHA-512:	A1C4D46375B4BEB755B5D55EE6D312CB645084CCF604FB2EF3D0627C809AB79ACC1264C2FA08EBE5B6F74F763A8DD324E1A23DE420B6A692110C43688FB76FC9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=38ba936c3302489dbaa6949fb9d16271.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67052E0P2Ta

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.452022050779978
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M83gnLASZF2jNALyAZD:qgFq6g1af+M8cFMIZD
MD5:	5D3E7E990B1CF9130E5EC4FBE28D4354
SHA1:	74834D437899A90395AE53640FFCAE833101E13A
SHA-256:	6C4F481FDC9F654BA2E70F3BE14B14B73B0C993176E87C95CBD25718BB76B879
SHA-512:	98CCE65040511A9FDE89B6C7306A9542CCEB148035A120231A36EF4144A1F18501E84A252A7F195D6046D4A501682969DE6FA21BE494D0DBC5BD414199F4A5FA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=63b6ff827b03471da5b9ce3f71ddcc8f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67066Au0lfb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.465238465557263
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7hUNrGdiPccrqjs2BbM:SbFuFyLVIg1BAf+M7aqjNdQIeXD
MD5:	5564BD2B2FB889F2CB8783ADF5F4D143
SHA1:	A367386D7C307613BCDDFFD402733B189D7FD164
SHA-256:	A94D54468DA67291C2287B1D382F38159F5E7C9FE6CE370F568EE3FF94FD7190
SHA-512:	38CF9F19CA12F0178ABCB4DF75103C229726911D6C9E4906E3BB33279224B5F0B944A3712AAC3E50F515598CC8EE7FCE8F24343300460EF848846A46B2D3DA6C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1d21c83c2f9c4bd8baeb872b7e431897.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67140P4VOJb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.418036019781743
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+R86XD6+sjs2BZZGu:SbFuFyLVIg1BAf+M+R8NjNTZD
MD5:	20D214987487EED43F1A875CCE8FF4D9
SHA1:	21EF5F39DC19B0766EC929BBCA87F39C47EC26E6
SHA-256:	31AA77E47C894B3C62C32EE963E81AE43CB71D5006429967CA6C33DE15097F1F
SHA-512:	9FDD40E73DAAD59E81D9CFC9328D348889CFFCC9DEF780749C747C8C63E21B395B4C31ACA293317EB3753924A96E3AB6F29FB3458FF47DB9C5C8776A837A092E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=45e2de097a884d33b91186672fa4a2c1.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:671491x8e2d

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.426780688635093
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+KxRLATjLTTIWTIL:qgFq6g10+f+MnIEWEL
MD5:	087DCA40716F76A11FC882F9716B3691
SHA1:	1F7DC92AD1487675AF116D7E1DE2E7ACA5839F0E
SHA-256:	B9710CD31D5D32DFDA14E22A892EC3DEB5E11997BA8423ACD9826C0E67F52A3C
SHA-512:	5E060B04487DFD7C8F1B559EDB59E00A08A42D011217BA33C950D0FB3DCB02C9964031AC55DD69D2CB725993E5C9B2CB5BC226A814C1BBBD27B9E97DA3536B88
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=46cdb62f424e4d6a9d9d86c7a3291eb9.IDENTIFIER=accounts-daemon.UNIT=accounts-daemon.service.

/run/systemd/journal/streams/.#9:67594RzHUEb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3561905199327
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDGQeRRLEhcA5js16:SbFuFyLVIg1BG+f+MoDGhEKA5joa
MD5:	CC9DA738327928E532C5B4EF5A49A496
SHA1:	4A6EC83C1D987641A25A4016B319E1E785DCE1F5
SHA-256:	DFE85A9D5E09DDF6B87E425226F34685780FCB5BA5FD2316EF6800501125A04E
SHA-512:	F4598560821C8F3820A857A8A164642BCAF8F8BC55B82C7971029E9ECD4FE47AE80C41726FCE556D23FE9C68655E35468F5CE92E53B15977041DE085EC9E11CB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bfc50e6ae9a644f2a4d480b92a02fd85.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:67601iCm8Va

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.430012918935061
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8fUqsXXXWGUsvsjsx:SbFuFyLVIg1BG+f+M8f8H0jNE
MD5:	BAD3C10AA72F9C74B1B7FE36E43644CD
SHA1:	F1EE130BFEB5B6C42EB22676E1FCD1B0898EB016
SHA-256:	F4C81156BFEAA0303333CF8B6857A11DBAAD68ABE8D22F66C18C6C67C815AE85
SHA-512:	2DEEEAC7AAC694FED6F23D174C4529E85E2E3EFDFBC6F0F52464DA703214064015D7DA6028F3380D8BA6DB75E8416EE7124A645FD17D53EECB753127381E7146
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6224c5010eb743c293295d1e0afc1553.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:67642xaNlY9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	190
Entropy (8bit):	5.356500671731287
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm4ArXmSnTBgTUEHL:SbFuFyLVK6g7/+BG+f+M4MVlgTUEHg0Z
MD5:	60A5C2C2C6EB678F3D751C4210300224
SHA1:	025BBF0B5E9ED5B4A911366A40930967FA1B8751
SHA-256:	1DFB29DF085DD06B2CA08CB7CAF472D156F6012428EE95C483263846937EAE5F
SHA-512:	F96A68C8285A5114707557853E8FF6B774F990516D5F2139532647AED22D8370B94962FE32E5FAE81A3FD64028427C7122FA21B3A0F6548BE955A3119E246C4F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2eae8b292793420f8d364853f22858b8.IDENTIFIER=gnome-session.

/run/systemd/journal/streams/.#9:677111LJcUd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.4116683273556
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MnbbQoQQC8TjFmzXvn:qgFqo6g7/+0+f+MP7C8NQXvn
MD5:	9B2C0259B206C21E193F683CFDDE7208
SHA1:	47F66FFB870E6297A3BF49A41BC39BA60944B2C4
SHA-256:	10897E6F02C0ED45204452DC47355BFB1E1A8455E6CC14FE3C24956A531DF9F8
SHA-512:	D44354B753F5DE6C92436E12813085451295D407F580722CE83AA1FFE9D3EB9137C55EA94981979C0E0BF910A276C3E1DDCF12A28A769B5228A9B9664FB941BF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1af89a965c6a48e395d01554b189930a.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:67713mTdC1b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.44046045275467
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M4KSkRscvh2jFmzXvn:qgFqdg7/+0+f+M4JkRscvqQXvn
MD5:	75241B2F5055DAEBFEE90F4C09826D68
SHA1:	222EF23F48567540C37700B82A1529640C3400D9
SHA-256:	1FBE3F6E56F02DCD12BB494BDC43536AF58B58CF6D4752ABEE18187A0832134E
SHA-512:	AC2810DB774D03EEF9F3528D310775B09ADEC23A984F0A1A205F8C7B8B512341581CBF2F67C4B0E411CBE6048A849DDD8D1A0643BD7885E53259F9DEED8E4EBA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2166f227021f4ce6913c3936be19acfb.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:67750FmL6Ha

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.421101496173144
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M47kDd6UaY2jNq:qgFqo6g7/+0+f+M4YBStq
MD5:	099B248C343C86B49E1DBA408BDBD9CD
SHA1:	E6DAF5990AB87EDBE36312F7CA2AE55E6F8FFE7E
SHA-256:	9B1B787CFCF7833B846621725A423D2E99CF4CBD260199B92B51EC466343C4DB
SHA-512:	A8C89E3312EDBD4DBA73B86FCF136458D6BE3808D316274EDD78867993D118308576FF57BACB28CBD9EE16DA0129F81B228A097A5D536A3F0A4560F15FFCC765
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=214c0e9ed39b40f8b1f1db9235b0f92b.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:67752XdDyM9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.420886911660495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm6rZcTEEQIPD7Lvr:SbFuFyLVI6g7/+BG+f+M6rLETfL5qjNq
MD5:	403EA60FA6B52DF5E3A652CDBE07554A
SHA1:	1FA2CFB6226CBD2E4780890C9BFEF2A90AE2BB4E
SHA-256:	AD5CD1248875259321E678CFF8C6EDF188AA25751E6A325C425CE0CE7E4C5E3A
SHA-512:	222C495636DCFC018F48F7DFA962766AC986672439E2CCA8E6802C756F4260859BD641F24F7663FCC72D69FD35DA370985C9D18009914B364A1B370FEF00A8BE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00ac4f7c69654a56a2ff04b5cd372b39.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:67785oqqmWd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.506256575535782
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MygGr+jFQMzKYA9:qgFqo6g7/+0+f+Mtq8Tmt9
MD5:	6CFC585AA7E3E83025321407BC6BF398
SHA1:	12CBF678713070EC8FE6B9B1E91A2535370B878A
SHA-256:	4C84CDC47A3E96C25BB0DF220CF0F7B10ECA04F97ADFBAA404DE027B3CCCFE40
SHA-512:	7D947D796230DF569E6EB5791253FE4F1022EA7A42A56430A3432E89C29DEE6F992210DE3711142D27CF158AB92B6892F0706ECF925E274B2D8D4AACC3C7BC77
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8317be858ceb488db9f205aaf494c9b8.IDENTIFIER=/usr/lib/gdm3/gdm-x-session.

/run/systemd/journal/streams/.#9:67791kcuB3b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.497544901646195
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M4nKdEZjFQMzKYA9:qgFqdg7/+0+f+M4nvTmt9
MD5:	1B3DFFA04363A7CD6B04902AB76D58FF
SHA1:	8A3B4FD1915789502C474DF81E0D1800144746AD
SHA-256:	83248026F1CF3978A27A7BCCB4149C1D3486645867972410CE24C8B3A6E9299C
SHA-512:	50A53927554B329E4BE5CADBB3E389753DFA7D2BFC618C86AA54E774F06F35BB94A9D9589ACE284D7A0B2DB4A04FAF3253FD31E2E5FBD18BA6E8D3B29D85F84A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2998c3d0007b4f6cb8e816a64394d163.IDENTIFIER=/usr/lib/gdm3/gdm-x-session.

/run/systemd/journal/streams/.#9:67886m1KNQ9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	190
Entropy (8bit):	5.405670324390696
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmugjndpbl4d8vsMy:SbFuFyLVK6g7/+BG+f+Mu+dpq8v8jN3r
MD5:	8E08604EAA20F73110AB26A75252AB0A
SHA1:	1B05208B4D67DFBA4648BEB957147B0A3EFEBE7B
SHA-256:	A436F52138FAE8E360EA16651A548370E233E88588BF524A899DA3ECDAA69DD7
SHA-512:	CD6D4DD78AA978CE14B031DECEF32056340A1125AF8E57B0362365334D3288C910BD973F60927ED2F734961B7E905CF5B436FE54B07E5C44FCC82156410ECA19
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d9c5210f54b24885b539cd1d660788c0.IDENTIFIER=gnome-session.

/run/systemd/journal/streams/.#9:68085ARpIbc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.457394562494233
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MQTOxxI8jFmzXvn:qgFqo6g7/+0+f+MQqo2QXvn
MD5:	94F1975115EB07080AB8DB0E29021267
SHA1:	CDF35378F96E7B26AD851EE842EEFA07052AC3A8
SHA-256:	F031A6F10EF9F0947075F52812B0F422D972A751D4A02132C010A47E78BE1C65
SHA-512:	EED59D7CF179620456F31C154092C62712E77A33C69B697E27C1E587F11021786014AA442F7E10999D4619D059A5DD46C8DE714F57D8BDB0A8776A1389F03F5E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a7bb6bbd4f2545589b430fe95370c982.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:68087R6C0Zd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.351459107455767
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+Mo1/N71w0jFmzXvn:qgFqdg7/+0+f+MoxvQXvn
MD5:	A058A187E5968D881B6D92A2D61BA44B
SHA1:	B029FAC9665542CE066B070F782E1D36FC75A5AE
SHA-256:	9CA897E7076E1E5FF06E7C9949F0F0555E34AFA03A53838FA8CF17D4ED3CDB71
SHA-512:	9A10B9812C231FEF2821CCC8DDBD1C2F6BEDB2FDF9371AC9F23447A62136A51C95416C0F225E7DAB51332DC63926855A79A0DD190A2137F6008F86101ABD2B82
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b743775a94e440f0ae15ac5024024ae0.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:69035RMXJpc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.405075938972332
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+fCbJASliTjZcH5CHq:qgFq6g10+f+MjJASl0mmq
MD5:	1983BDA3178C114BFC7710829FAA581E
SHA1:	5420F54AA40BA0B38CEF3C4B84AEC46959585296
SHA-256:	C0BC935650A0FC3DA37E5E2A3202F2B0C7E50C403B8C25A170ACE21CF40D39E3
SHA-512:	D86CEE6F4EB95807AF1D2CE2E6CF53F7694AE47E3B14DC3EE6F83475ACEFF83B25955F0FC81F4D4DC4B8ED11D6F74AA7791DFE3CDBBD68E2C0FA3D3CA5B60770
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=47c056024ae249659e5ad8170604ccec.IDENTIFIER=systemd-localed.UNIT=systemd-localed.service.

/run/systemd/journal/streams/.#9:69073gDoTId

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3597409668271805
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyaApBFb8QucSQWP+Q:SbFuFyLVIg1BG+f+MyLtgvc4Tjoa
MD5:	7DF3BDDC8410B29AC5E4D12664C51F82
SHA1:	F5C76B1A6118D5EB297728DE0E9255C12F92A619
SHA-256:	A7668878A0947A5AF61C9A51EB673679F03E15C3C3067983A5B63BD1FDC971C9
SHA-512:	A0868388851DF231FA6C207F0D1EAF1371722144C51C7E49603D80E03A9DDED5264FB32ABAB0CAC421BF0FFBC3F2F93E958A2853EDF0242B82C01ADDE4212EEB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8a42ee467d204462b95999d70753a38a.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:69074eRws2b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.36707257316903
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm54fmTECSHG2jshQJT:SbFuFyLVIg1BG+f+M8aECr2jtWL0
MD5:	B9C25BC6FE6478311248F8308BC855CE
SHA1:	89B4E0B1545C7AAFDF5522C53809C8742DFF6E04
SHA-256:	3AE205E3AD18505A9B629C461D7B931C8BFC3DE2BA99C009A6E6FF4AB287D60E
SHA-512:	2368282FA57FF33917B376B1AE872F1C0815B03CA1E55A1D1FF1E789BD07DDEA2D788B766B1C53F7E24CE02C69D35A24D3A13C659F62E1872CFC5E791B43D498
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3bc280ca668e49f5864e173a52e002be.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:69140fey2gb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.434338543145528
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7DE9IJLDlDvF2jske:SbFuFyLVIg1BG+f+M1SjfGt
MD5:	5CB309906B0F9EEAD45C42D96FEA144A
SHA1:	9A43996E5EC6B204E2771F275054763778BADA12
SHA-256:	257DDE135C9AB3FD366FF50202232B7F14FD99F8DBA0924A9EA869D8ACA1B026
SHA-512:	6F852348364DCCB73B821A05CAFB5097795186CA7F0FDADD7F939A017FB1336DEB4D77FEF18499AC163F6F819148D586229D67598E1A132EF417BF94B7DDEB55
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=126b90a2b8764319872e17fba3948bcf.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:69150LKrmfb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.32959626127121
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuYAJMnHjDGswsjshQ:SbFuFyLVIg1BG+f+Mu/MnDD1jtWL0
MD5:	27AC7D081FCCDFEF50849291142512C2
SHA1:	F3F2AFD7E7B5AC1F3E3325BAB9234C135A72A8B6
SHA-256:	70775BD3AE0FCD5E8BF3FFA717FEE9D4A136FCAC9F89C25263549860147534A2
SHA-512:	933B921F6210F08C3528915FC9F54AE63AF62A075B27358468FE540AA48E31AD394D7FECBCC2D1CF3655884364575AAE54AC943112CB92784C67AB14AA1F0941
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7bece49d61e48f2a1003e8c1224aefa.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:69157T4vuE9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.437677436739368
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+hexzg2jNALQru+u:qgFq6g10+f+MQMWr
MD5:	47269502DE28C4F1A65F5B231D744624
SHA1:	8FEF1B1980B5B0CC2791750D464B1F45AF13303D
SHA-256:	FDEA109E1B86C134157FC8E14297961AD7EA3315B2744C547A9D02339711D703
SHA-512:	E28F918C238359565F299C4319ACC9287A21C047E35AE1F3734CE2BBDAF58D4484555662179C34605595BB3EEDAA708104725780762615DB8C33E0313DB0371C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=44f67e17d91b41438c3b5b64080d95d3.IDENTIFIER=geoclue.UNIT=geoclue.service.

/run/systemd/journal/streams/.#9:69200254lUc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.43620085222144
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm57RKDzU58f2x6hg2S:SbFuFyLVIg1BG+f+MbKDzN5TjdcjemEg
MD5:	8B17CEFED71DAA1F0D82407800E9262F
SHA1:	F45DA7126AC6C872B5ADDEF806F13CAD397B77FB
SHA-256:	3A0A91EAA31CD65662A8CE5B68A32F4BECD3451AC2DCF3F0DB2A0BE011F39D52
SHA-512:	9FF6963F462F9EC997A24963020AF0E25FFBD18D0ACEE02F837FB02EA03091C0862CDFA14A57B48409EBAA4F76464B0782C22C97C22C0C57000A2C38C2EEDC24
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3cc594e91f0241db88b916ab3423f834.IDENTIFIER=wpa_supplicant.UNIT=wpa_supplicant.service.

/run/systemd/journal/streams/.#9:69217gCmzWb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.33486286060504
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrCinoO8Gd0MqjswIh:SbFuFyLVIg1BG+f+M289OjLIiAvAW
MD5:	9202584A7C512F16D6AED4E47975C90C
SHA1:	3216AA6E618524D29CEB8C439BD04D02B847630D
SHA-256:	D8E770DFB42BCC1FD36D6953CCCB1A3AA402904BC44D8123AC11A5B5CA517F3E
SHA-512:	3A94D4AE5187BB806FD73E7E7ADAA6EEB719080F7B979BFF16B0ABCADB37B274239FB1D8579D2096ACC230D2C39A75DAE751F5642D6C5E1AB59D0487DDA71781
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a39ebbeeeb9c468580ca0e539aea1c64.IDENTIFIER=avahi-daemon.UNIT=avahi-daemon.service.

/run/systemd/journal/streams/.#9:69229ZCbHOc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	213
Entropy (8bit):	5.361867937068501
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmugB4nygDtqY+sjsh5:SbFuFyLVIg1BG+f+MugBbgDljuTt
MD5:	B78E2287B152F4071F87220EB35DF019
SHA1:	F6F5CDC15D1D726C588E8D8E74C1D5A09951C15B
SHA-256:	CCB8F839A04FA5ADE87005F7DD1F8496BC88D60B8D1FB3D83C06A3ED24C0832E
SHA-512:	69C204200D78B11EE0DD851035703F3087A718B86E8A6D31DDD097365F83F50C01007AD9406594301D7ACA6807D2C340933DAC12D0562437B0100DE90866DA27
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dbedc64bbacc48c4a62f441f21a5f1a2.IDENTIFIER=packagekitd.UNIT=packagekit.service.

/run/systemd/journal/streams/.#9:69297HQXoYa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.470760763358846
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M8DUTybKTjFmShmWc0vn:qgFqo6g7/+0+f+M8gTybA9kWc0vn
MD5:	5CC552BB0EDCA6E4B4AA615B9602D1CB
SHA1:	EEFA72297D630011F48D0EFF89F548150C6B085D
SHA-256:	710FFBCC373A9B8B695958EB98DDF8D608E2EA9AAD8F62F9765E70EE79B04E81
SHA-512:	C8DB5A8B3365DC8C2FA53708B2BF75CA3C55B9A30F9F65D967C6CC8DAD254FD6DCF958986196B6CB92A4B9DF5634CF58EC228C0616A36750A05AAFAE5E12B645
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f83c3b0c57c4872949afc55315d207f.IDENTIFIER=org.gnome.SettingsDaemon.Sharing.desktop.

/run/systemd/journal/streams/.#9:69299MQZD2a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.396580479914371
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MyYkjjFmShmWc0vn:qgFqdg7/+0+f+M49kWc0vn
MD5:	6609428C58C29ACB3F440E86985AE5D8
SHA1:	BE7511D7681E80FCA0C54F43E2715B12491B4426
SHA-256:	12A54AAAC6CBDCEA9C360D7C94C6B08084A54BB4C3044AC7216A5D2C1A74DE47
SHA-512:	F43EDB31C063DA27A6DE6189DDAC1051601AB91C06F9E43DDB59C7A82A7BD3FB4E57103FB40928C139F7F7301A1F846492D60357E2D37AE2730FA51359B715BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=75383527a36741feaef34973fad0824e.IDENTIFIER=org.gnome.SettingsDaemon.Sharing.desktop.

/run/systemd/journal/streams/.#9:69322miVf09

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.413512455338968
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M4hfHVd2jFmShmVxfvn:qgFqo6g7/+0+f+M4hfHVdE9kVxfvn
MD5:	730BFFC5F65BD4083C5F6A7D5BD42E4D
SHA1:	68963BB562713AC2F2AB40B586139D646D23B7BB
SHA-256:	648A0C843978A01D2182A8295989752E0517D91D8702D61C8F1A15035BA00F4B
SHA-512:	C99E5030C8B9519D038436E0AD74175B293A0157C79436008F929AF26F54574E5C3386B33ED31943BE179CB146E11FDAD5DAD9EAC1F35F2FD19E65578CB444D5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2a1f1cf0a29f4e3cbf66d74a7064fa5b.IDENTIFIER=org.gnome.SettingsDaemon.Wacom.desktop.

/run/systemd/journal/streams/.#9:69324lSk5Rb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.410358457114048
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MsjjFmShmVxfvn:qgFqdg7/+0+f+Msd9kVxfvn
MD5:	C81E2A72CF8597EA65842926A6E09D0B
SHA1:	565C7DFA65EE90F9BD1CA60443BDC9E922C55DB4
SHA-256:	4A62E659137406F5BB75DDF28F8B7EEADD98C8C990E2778181CD49E1BB128AC2
SHA-512:	EA5D03903823E5A457173AAC159EFCCB8CBF09D479C8C2BED01A93327D7DDE9276DE27DF1547AB3A751562714BB236F1460057101778A143E25A9F194481E806
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fa388a6e3f2e47b6bac2de94db778970.IDENTIFIER=org.gnome.SettingsDaemon.Wacom.desktop.

/run/systemd/journal/streams/.#9:69325dgS3od

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.436361801307541
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MMAlfeQRZZjFmShmDxfvn:qgFqo6g7/+0+f+M7eEV9kDBvn
MD5:	8DA12CEEE5253103EFFCCA802AF78B37
SHA1:	BFE7A06718E63BC8A6398A202662633C407915A8
SHA-256:	893FC0EFF2CD9F76E16042DDD3354851FC506C8F6F724D85C50B67B7CC1739B6
SHA-512:	1EA847B69B6B2363438323DE3554E2824519723CC4961BA938668D650C215BA448A9E7350AE655A57A4BFA79CCD15DCB9CFB4BEAC195F7A6F0CCAEA2BAE9F791
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=114f11eea53745b7851bf0b894fc5450.IDENTIFIER=org.gnome.SettingsDaemon.Color.desktop.

/run/systemd/journal/streams/.#9:69326B2hVca

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.38726804985664
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MYcAy4jFmShmDxfvn:qgFqdg7/+0+f+MYcAyy9kDBvn
MD5:	C18C4D1718B4495285576F3F741946B5
SHA1:	E4744D61CC7DAB5221EBFEF951CFDA71272C03C1
SHA-256:	0D32FD5EA2BF6E44BB36CF0CD716CD3209A1E27C6B162A37DC028DDB5E5978A9
SHA-512:	8E60C3A446B5B9B8A14E178921D748BAB83F14C9D0592545A809287FB9B0B514A49878E83B1C057BD123916A5DF115DB15A0F6FA253C0A1DBC2A2DE04EEF2403
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7a2e292902ee482aa33d37f011db237f.IDENTIFIER=org.gnome.SettingsDaemon.Color.desktop.

/run/systemd/journal/streams/.#9:69348WlIKJb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.418738896839404
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M0pMIUINkjFmShmxBrvn:qgFqo6g7/+0+f+M0pMIA9kxBvn
MD5:	ECA3E7FEDF9707FD3DB0E06ABC881683
SHA1:	600E1A529D5DCC9EC50345B67319993D3C384A9A
SHA-256:	1B0ED68DD717EF0FF70296FB06BA93BBBFF0559E6CF9101882706E15F22AA302
SHA-512:	00AF5668FE53FB42FF8DEC0CFF97AC911298979ED4C9868434A78E872D2549C5E445041F2EF4A253C257F1E77720AADFADC349D35E38C68B31666825278B8DAB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1f1c76162caa4eac9151e95552c7fac2.IDENTIFIER=org.gnome.SettingsDaemon.Keyboard.desktop.

/run/systemd/journal/streams/.#9:69350URYhjd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.418918254716962
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MkHSD+jFmShmxBrvn:qgFqdg7/+0+f+MkHY89kxBvn
MD5:	2F5137170BC4C580E4783AEF2491BA8B
SHA1:	60DCEBA424816189E86B7F6ABF81422971E23D7F
SHA-256:	D73FF904FAE26ECC61FEAAED46F607E78A3C3746AD206A9630D4251815F060C0
SHA-512:	5A25197F8B74196C8C4A80F434A5B82C5CD900774ABCD0C1A61F9811B3BB19F88F24F14730DDA2132A333AEE5DC556A075C3CBED37E755A19D738FA27554F4EE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9b3d7ae45b994a8792573fbd6baffa74.IDENTIFIER=org.gnome.SettingsDaemon.Keyboard.desktop.

/run/systemd/journal/streams/.#9:69351HZD4Jc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.422368821434234
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MyWKIYjjFmShm5PKJ0vn:qgFqo6g7/+0+f+M9Yd9kYJ0vn
MD5:	9E59B6A71D13101F3EC31250BAEDC3BB
SHA1:	D2C5FAE8A618F332186270F009B173C4D0EABF92
SHA-256:	4F473F407A032626FBE99FB62B6D2CB2E6331C580427F7D5AC2940CB27254631
SHA-512:	20FCEA9875A509A83E634F10B7A91AE138C19E591CE2685835610300C62AE214C59A98741EB4B197ADF98F1E35CF61FB8F3FC6353C357DD5C6DE9B25E087C6FF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8d2eb3ba871344d0ab0560c1c0ccf29e.IDENTIFIER=org.gnome.SettingsDaemon.PrintNotifications.desktop.

/run/systemd/journal/streams/.#9:69352WGAh1c

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.396717630943164
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M+Rwd3dbhBAoCm2jFmShm5PKJ0vn:qgFqdg7/+0+f+MIwZJDAZ9kYJ0vn
MD5:	D40F0E6258C7CA6F0BF98C3FA68F4F44
SHA1:	A65DD017C7FFF8FAC94F42A1088895B65DE6ABA2
SHA-256:	6075E8E4F5A2D7900B0940F40BFAD69337184B93F94424AD2178DAC44EBC5983
SHA-512:	0154DF883ACE490E2594C489356289E8FE85D9093D03757958274BE64C43F63942CAD47EECECE5B264C3611D58805B9E53F2763DD419A04D29C6E3FC057361E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48240b589c8b48ec8c3eb14ff9bc99bb.IDENTIFIER=org.gnome.SettingsDaemon.PrintNotifications.desktop.

/run/systemd/journal/streams/.#9:69353ZNZfO9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.457128316650908
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MoEYCrjFmShmatvn:qgFqo6g7/+0+f+Mo49katvn
MD5:	9DA3CA23F59ACB821F67653C5006F5E4
SHA1:	89A781146E22C4E5CFE4E803780F0506D9549ED9
SHA-256:	789B52234367D2843E6B08717BDC637437776D2C0940E7356CD468AE163902B3
SHA-512:	0D4F7301BC77F09E1E95ABDE2C9ADD9E9FF0A9A41303B4F0656862AE2D85113B2DA028E50F347E01C39F85BC92A6E5D1B3A0AA2B343D7834F334C3E037CB3057
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8c3486a630548f9bd017c3c5ba39a60.IDENTIFIER=org.gnome.SettingsDaemon.Rfkill.desktop.

/run/systemd/journal/streams/.#9:69354dKAnzd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.441955620173977
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M4j8w7Wj21jFmShmatvn:qgFqdg7/+0+f+M4mE9katvn
MD5:	58D9B4622524AC5CA774DCBD2A580DBA
SHA1:	12E6525C958E4607837A33206EBAA4E9CFDE6E86
SHA-256:	59B6A437EDD6CBBA2313FF82778235892622C6ADBF800B25BA509291A50F2628
SHA-512:	CE9F14B92F4D2B8684B55F571C437888798F3ACE6FC69FD77177B381ECE1242957F397705C18202285867351A0A9B9D4043926303FCA23BEDDDC2AB40E9DD218
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2e6afb7829de451e907f5fd044de314c.IDENTIFIER=org.gnome.SettingsDaemon.Rfkill.desktop.

/run/systemd/journal/streams/.#9:69355HGT8Y9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.391998987707185
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M+aZo1EN2jFmShmzxvvn:qgFqo6g7/+0+f+M+ak6E9kztvn
MD5:	984129F7704FEB93AE2BEB35E789F7E9
SHA1:	CB9D2458A9EE5E289C123BC45616B5F1B402F310
SHA-256:	2A84FB989EDDF687A22B48CEA5A94E97C0FCCCF5AC6C9DEA997EA3A19674EA5C
SHA-512:	0741FCAA756339EFC47E179DDA49B91C922E4DDC3D8B9DFAC472E2D5ACC7CD2169CFEBD708EE85A918725AD869D8ED16B769316840F34BDF0BECC87CF2F32969
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93e4a43936364380aeffe997f2513dfa.IDENTIFIER=org.gnome.SettingsDaemon.Smartcard.desktop.

/run/systemd/journal/streams/.#9:69356O4ToQb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.417910275564297
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M+5YUfF2jFmShmzxvvn:qgFqdg7/+0+f+MYYU9E9kztvn
MD5:	4C533D1FB167BF58A9582ED54374C39E
SHA1:	047647363F40836558D6705A883C63603C3A06FF
SHA-256:	28A6067B34BB2E0E309188FC1B3F1C862CA538534186A75376DB4E89B88F5B24
SHA-512:	3D079A3932E37F93FF8BDF663E1441C31BED28D68CB6F2ACB36316BF75D717EEAFA1FD3DD032E3A803A47890EE85BBB31DAF3C1D8EF3D6820D260FF9AA741A55
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4bf62b8aa5614e51ba434238273e3028.IDENTIFIER=org.gnome.SettingsDaemon.Smartcard.desktop.

/run/systemd/journal/streams/.#9:69357Od6nQ9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.385404789312616
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M6mOb4AqjFmShmZBvn:qgFqo6g7/+0+f+MPq4A49kZBvn
MD5:	BC7D652E6E52FD33734D46C55DD55141
SHA1:	7E9008DB6E2855D7AA4E196795EAFC3833E83F12
SHA-256:	E311D0072E897F8443F32084653093394883E15F0A498553BAC4B65856425819
SHA-512:	DB27D7FB48F46DBD1421D319FF73955295EAF7F6BF0B5445095581683013E789A4B8237B57EECA9EE8484B2FD8A2BC6B8D304648A9415CF13C21CEF613B673E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0de533c593ce461d80ca590be60fd27a.IDENTIFIER=org.gnome.SettingsDaemon.Datetime.desktop.

/run/systemd/journal/streams/.#9:69358H7mmwb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.408615933098484
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M+QSZIAT8jFmShmZBvn:qgFqdg7/+0+f+MTYIM29kZBvn
MD5:	27D79A0179DAC39F66BA959FF53E1703
SHA1:	4D94F1AC78E4781D10F1BF57EC945BF242C2DAE3
SHA-256:	26958488D946888DF7C6565AA06B7AF45B9B6D2EAD6B8446B7B96B6C96A62CF3
SHA-512:	3C1364562906CF47A744708885F8C9550989EBBCA8B288EC216B65B42F569E06EF3304D29C64CEE62F8125FA95C4A331F4F376BD53C2910595B59E2537168C90
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4cc9516d87c94869b4f9d9e32d10daa4.IDENTIFIER=org.gnome.SettingsDaemon.Datetime.desktop.

/run/systemd/journal/streams/.#9:69361kC29nd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.461566537386991
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M6AcBcXS3WtBwqjFmShmwtvn:qgFqo6g7/+0+f+MGqXSmtB79kwtvn
MD5:	4E17EE439ABFC7EAE2E0D02E0FBBC8E5
SHA1:	FBA3665BA232ED90395227FA67F17A2D4EEA6874
SHA-256:	FD314F8A10593295A2DB3E31DB46B90958DD7DFE32907907F8F36F9B53B3A99B
SHA-512:	C636CC713F6FFB1CCBB1E3D4D0FAA35A65DC3EBBA3547FA0C434694A0EAABB6A5956223876D6240CA085F938C1E310E7ABB94AF1680EAA2ABD2B341CAAD2B718
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0c29d927334f44d19c8affb9d545d1a3.IDENTIFIER=org.gnome.SettingsDaemon.MediaKeys.desktop.

/run/systemd/journal/streams/.#9:69362ZqKZPd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.411526425259815
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M+X20dB0A87Ag2jFmShmwtvn:qgFqdg7/+0+f+MqDB0+N9kwtvn
MD5:	B179D269B40100B10EE6638B4BD99FCA
SHA1:	75725A0F34B59DB503BD88D3EE7CDC43D75C9868
SHA-256:	5B13F887D9CD2414600D1AC404C259D0D379E278927A5DDA57258CC0EE5EE4A4
SHA-512:	AA7FEE6D30CF579AE6030CB58C3180AA6EBCB5A9F718E2EB348DEEE9B0F7DBC5A9AD1273A9EDD9B63FA82362BC5C2F0B30B885552A18AC6D783858347A62B611
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=45fa74ea343f47f59d274b50a1519600.IDENTIFIER=org.gnome.SettingsDaemon.MediaKeys.desktop.

/run/systemd/journal/streams/.#9:69364jOVr5b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.443008620472712
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M1yevHTjFmShmkiEovn:qgFqo6g7/+0+f+M1HN9kVEovn
MD5:	1F4F5132D4887572659A42703CC12C8A
SHA1:	88EFF6CBC7DF9D2FB8FF227D89B19BEE085DBE95
SHA-256:	638C10B07F3970A1DA002C48DD9771475FB7AF2600A673CA264416EAE65DB76E
SHA-512:	E17C096A5CD65DFF2587DEC8AA1AAF28B91028825C7EC008B16D2455A8E20C3EF136A871A1718127C0ED663AA5CE3CB7AB80CB0C3112CFE82C71C5E8347E0424
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a576f869ff8a49209acd8cd3a1260fc6.IDENTIFIER=org.gnome.SettingsDaemon.ScreensaverProxy.desktop.

/run/systemd/journal/streams/.#9:69365NVEd7a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.4945706301049135
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MsF1PAZQ+URSg0jFmShmkiEovn:qgFqdg7/+0+f+MsH4Lg+9kVEovn
MD5:	77BAE0C87517B04041142448D16B5A3C
SHA1:	DEBFF3B6D5DB0DB71EA09F25C40C938C61CE585A
SHA-256:	3EE7BAB7DB201009E0231132F07F0B59F4864490F8257461B71077A822D2A678
SHA-512:	DD9B410E2C8E061B4BD2BFE9EFB4343FA5058427B77DBF4AFBF4C3A881941E898361924BB40D8B371996145ABE3C1DAE154D02F2458BEE47E60CFEB51FE1FE1E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f798df6fe16e4657bbc23874a15d1729.IDENTIFIER=org.gnome.SettingsDaemon.ScreensaverProxy.desktop.

/run/systemd/journal/streams/.#9:69366WsTDee

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.457743966987
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MXVJrlq0MqjFmShmpvn:qgFqo6g7/+0+f+MXT5q0v9kpvn
MD5:	6AD93C6589B351743DD2715773E064DF
SHA1:	D2E1FCF352A4463B49A6DB5F598900C666DE426D
SHA-256:	54AFE44448CC5F8EDCC8CC787D3497499974382A4B6F6F72D8CDFFB3859048B1
SHA-512:	57A953EBAF29A52927DEFCC1183759194CCB355EAAE0124D44705D8F2AA9E32622660F3536B6446F9BE2AF9E65B71824DDEF2F03DE99E17E9F5AE0F96F393D46
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5b2c76b4cd1f4b9cb6f32ae41185d60e.IDENTIFIER=org.gnome.SettingsDaemon.Sound.desktop.

/run/systemd/journal/streams/.#9:693679bLYSa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.476618485545807
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MDJrWZ8v8jFmShmpvn:qgFqdg7/+0+f+MtrWKv29kpvn
MD5:	136DD45F86F4897396A12CBFF7C648A2
SHA1:	E0498B04146B42A614B03F8C5B1A23461F66A657
SHA-256:	2D033A40283184F9A2544A91D790897AADC3CF3B68B2878DD284470347CDD4A7
SHA-512:	DC9465F902467D0B46B5AE284E4C9EE6D631DDD7BA815558AE15B9F21B14514E70CD24E7131F4E2F93DB878209B094DB5EFB51E454B77B4EF1EAC3C63C45A340
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=30f87c150b884f2d9f95663c5e2f14a7.IDENTIFIER=org.gnome.SettingsDaemon.Sound.desktop.

/run/systemd/journal/streams/.#9:69386Pj1dsa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.395936036663024
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M4enMTjFmShmQmc0vn:qgFqo6g7/+0+f+M4eMN9kQmtvn
MD5:	7F4C6FB1D320E42D83778AAFC9EF70C7
SHA1:	CBAFA005FCEA2522BA81D380C508962B9AB78AD4
SHA-256:	9B53AB573F4041E0624F9283F3203490F3B70CCB6DDB1AB85DC70A97C752B3DA
SHA-512:	C457DFFD32E56E88120C24725C59005910E81F178E0107C6D9C748AE052E2A0AA2BD084E5FFEFE086720C6964CF11A96D54F5A640C336C6740EC895E11E9F634
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=25ded61dc34d4015abe57ef3c3a46d50.IDENTIFIER=org.gnome.SettingsDaemon.A11ySettings.desktop.

/run/systemd/journal/streams/.#9:69387AokBmc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.3930039942031405
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M994Uh3xMD8jFmShmQmc0vn:qgFqdg7/+0+f+Mv3xMi9kQmtvn
MD5:	13F4AE6865AF45B0AE004A80F64ED1F8
SHA1:	071D6ABDBEFBAF78B57FF18ED31BBE54C5EF7895
SHA-256:	DED5C3E2180DAB36FE4D4E4DF7A0EBF81718FA2E06299E662979AF75838822B5
SHA-512:	FE397CDAC5D4367017DC3FC80E07D5A391923CADB9C1EBF661B29864B7EBAE126A95F24EACFF28BC8668A54B940DFEFB8B50A0785B48A62760E39F33E664C67D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c026077a5bf64a4192d1eeb2e17ea4b6.IDENTIFIER=org.gnome.SettingsDaemon.A11ySettings.desktop.

/run/systemd/journal/streams/.#9:694100D3FWa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.425073433296673
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MkPIIMqjFmShmx+0vn:qgFqo6g7/+0+f+MkgIv9k40vn
MD5:	0714522491394965CE3A7E90703D1615
SHA1:	D0B67B97A6BCA34EE6234777569B2C28BBF4B3DF
SHA-256:	FAD0C269483FAC284393B3C8236D4449DA2619F6B03D9A2BE281DA54833D8DE3
SHA-512:	62BC320DA1EF9C4452E7AF97BB622303335C20FA8A4A0748478736182F47193CE136246309A61CEF3FE2F77894D75A84FB3F0BE82AB44895B5AD173317C5EA3E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1a6803f3e6254add94a477e7106789d1.IDENTIFIER=org.gnome.SettingsDaemon.Housekeeping.desktop.

/run/systemd/journal/streams/.#9:69414ViVeMb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.4551169910433215
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MoTI+E08jFmShmx+0vn:qgFqdg7/+0+f+MMIz9k40vn
MD5:	BAB806030DB059C976187A7C4559D256
SHA1:	83677C72CA871F522AE9FB8FB79CE40CDD874DE5
SHA-256:	8E55CAAF41B7388160DA51C60300DB773386F8D8BA724F4713825D7C165D53CF
SHA-512:	E7F3B4B432514E033C74F9B4BA459DB584BDF6EBE36BB75795DCDADD3362FA30E891101737294087C63DB56389561B32FD7091800992A9A547613ABFD17CA96A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=74ac96609f6f4071bb29cc72e2d6bc5d.IDENTIFIER=org.gnome.SettingsDaemon.Housekeeping.desktop.

/run/systemd/journal/streams/.#9:69415yxQXjb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.454771829307698
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MWj5UZjFmShm3vn:qgFqo6g7/+0+f+MYUv9k3vn
MD5:	76CA0DE4313DE17E3F4DC60723548D13
SHA1:	E941B4A734C7B4631F02CA3D211F94CD35453389
SHA-256:	F77F54B5E2E18F9F004FC265BD5DF14AD6C0B2CF81951BC4BE84EAE34342A148
SHA-512:	D9C9A42A3C27DD9A72391D1F277729DF5091B261547DDC7AA8476E0E911E99C945F1944F0D270F9953708A4443B831EFDFBF5439A7B6C91B5187A3A9FFDF94E1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=578008c7711043bfb450f738179592e7.IDENTIFIER=org.gnome.SettingsDaemon.Power.desktop.

/run/systemd/journal/streams/.#9:69416RxKgH9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.440383066843507
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MFi/bjFmShm3vn:qgFqdg7/+0+f+MK9k3vn
MD5:	0A82DF0D2C2C7FD76657DA9F74FC9F63
SHA1:	16EDEC0B5BAE12815D0C07773FE9560B3D46E91D
SHA-256:	BF72DC644698AB684010BC19C9843AF64C83544A5DFDA86523B30F265750B41A
SHA-512:	FB805EA84F4208889CA369DE9ECB6D32512AF7430FD3F52E49B09421C472CA047766283BFDB94C9E478A30EBF08CC28BC4D33B7879D2153DABA2C56B3CF78531
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=36ffa6d5b2e44271b6418327ee43107c.IDENTIFIER=org.gnome.SettingsDaemon.Power.desktop.

/run/systemd/journal/streams/.#9:69440YIzxec

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.439757441423152
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp8oXtbcTZiY+sjsiM:SbFuFyLVIg1BG+f+Muoiti0jZcHdzqDq
MD5:	E2981700CAFDE17BF94E17D73C8732CA
SHA1:	73942A11C297A802FA4C166C362E9670A55D645A
SHA-256:	4B0E8A273287DA7D9FB53A7154D75CD4D7BA8E03B7E2C0A4C8AC1350EE1014F2
SHA-512:	8056ED2C1B45918533F12076655B2A6A6054684567D68C1024BF42E4AEA33E3EBFA80A44E6A13C0C0676CB5E346094F294D8D325C34FE5CDFEA68B5D7154490E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c7c01fb3952e41428961ed41dea5391b.IDENTIFIER=systemd-hostnamed.UNIT=systemd-hostnamed.service.

/run/systemd/journal/streams/.#9:69482qpHSWd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.391266168102621
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+YpypdBSdHYNXNAsi:SbFuFyLVIg1BG+f+M+YspOdojXjK
MD5:	62EBDD6ABB75C4062A60B4069BBE2D40
SHA1:	FD168DF8A9080CCE5E9EC9952585EB689140BBE1
SHA-256:	B6ABF23B663CC72A0DD4E2B3FAB803F5CF9DD77971AEE43D494020E4EAAA8727
SHA-512:	CE61CA946CCA04FAE2EB31B506B4E47486B492AF16DEDFA5061904EED774D744C378DC989F7B29E283359757F92CE4C3E2CA9AE63CA95E1B99EA3DC8B27B68F3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=40491afc9f9b46b88d78bdf76d2b28d3.IDENTIFIER=fprintd.UNIT=fprintd.service.

/run/systemd/journal/streams/.#9:71071czZ8Hc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.396407171382295
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M6jySwN8jZarvn:qgFqo6g7/+0+f+M/Garvn
MD5:	E7DD2BB2AE93EE971DD41A950852D70F
SHA1:	1D4116E9DAE33D1D0FC736B28EECC80DEFB58675
SHA-256:	57A2325667DE361319808DB0D17DE5FCFC0BC6C74C29C1636925FA1BC35EDC3D
SHA-512:	6E528A127C29B9F6F19FCDE3CB80182D105ECCCCF1380BBABFC6C5A24777C656EF3B09DF40FB6CAADD0F8FFACE002B6AAE083E92B28B43ADA6FCCF0B5C119A8D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=03a12d4aeb7f4a47bf9f876243bf2ce4.IDENTIFIER=spice-vdagent.desktop.

/run/systemd/journal/streams/.#9:71072kjrK6c

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.381156918813335
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmyUdcn3rqjsiVszH:SbFuFyLVI6g7/+BG+f+MyU8GjZarvn
MD5:	2621FA9FFBCBA1711F9A79608BC2BD6A
SHA1:	35D6907F24BFCABF4703C46A36A62A503949E5BC
SHA-256:	0138020275E44C066830C5711FCD43973EFD0C206CC4CF768E3337D0DE25E28D
SHA-512:	C1AD50C5E3CA025A73BBE21898B0D73ED4BD8D7EAF30C966DA2B3A331D5D9C3DBFECEBDC98B34C25246F9AAAED02C04EC5E4B67373F84F4D70CAE05942811486
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8c88f64d21094e748c30208912ca917d.IDENTIFIER=spice-vdagent.desktop.

/run/systemd/journal/streams/.#9:71118ytw3Gb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	192
Entropy (8bit):	5.3532011837552504
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm8PDEXmiATUG6ws2:SbFuFyLVK6g7/+BG+f+M8PYXmiATqj0Z
MD5:	BFE69AF712C0EAF5A811991D531E9089
SHA1:	0CEE41FBB4499C427073F43D5714CE0489A507A9
SHA-256:	B02BFB01DC13E19D54559EFB1C7EC84BBE6DCE729771B29ED7A4ED30A3C9AFF4
SHA-512:	F8364E80C0E84DE71B78441235C21159F180EC9285EEC33A4608D11FD2F52C2A07FCB17EA8206DBFFFB202FEC57AB60645A291451E364CF1C604EE9CCE412B60
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66644fab3346460e8f0b692e51ae1cf0.IDENTIFIER=xbrlapi.desktop.

/run/systemd/journal/streams/.#9:71120nKNhkd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	192
Entropy (8bit):	5.369378172980487
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmzec6Exf2OpvXsjq:SbFuFyLVI6g7/+BG+f+Mv6EJ2Op0j02I
MD5:	63897DE14E735C259EBC15C7EFB6C686
SHA1:	536F3F1CB5A4373C9683351DE228C042B6F0EC1D
SHA-256:	5A5C6CDF181EF2DD42DC34940F91C7B48A9A78991B16328B30A21E8B84670163
SHA-512:	F19CE11DE3AEE09897F80B9EDFE4797695FA48FFF6CB8E05C59B21DBDAD76076B30A7D40D4994A72A2DB5A770213BADEC2B0D22E8B639A502B2F718927087774
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9d6a979c4b0b4c6d93ff04b3f861dc9b.IDENTIFIER=xbrlapi.desktop.

/run/systemd/journal/streams/.#9:716822kRtca

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.397002089398684
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MWOl2zs22jJKJMBNr+:qgFq6g10+f+MWqms2IK+NK
MD5:	4B75B569646ED49FA24183671F1297F8
SHA1:	B7344120D1901EEE0D54A6E82C5A08F1DA6A0B9D
SHA-256:	F8FE7648B5AA2DD95DE8270B461841F502A099ED8B77D437C2E2F037846D7225
SHA-512:	33D753641D985278F788C66BF8FD61672C6560EAC84EAD58DA1E8BBC524B23C7E5A6CCF8884D1DCAAD2D31FAB9DD899DA727E481E35291136DCD864C837E9D13
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3a82937e7c1d42179f985c11d261886f.IDENTIFIER=colord.UNIT=colord.service.

/run/systemd/journal/streams/.#9:71702LhYitb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.422198078248831
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+mQypuhMqjhD1DTu:qgFq6g10+f+MLXpuR9Tu
MD5:	9C293D1AA55B70A6B41B15CE10100093
SHA1:	97F5351D1D2ACBE05B28654D8E2D7F524690CBF8
SHA-256:	FD4873C41F7E35DAE41CFF6F47DC6F6E2F7987A95C64EFFF03729E1279BA5300
SHA-512:	004D210BEFE23C5C02F70E048B38F6CB5DB413E382302A8650C7FAC54C48DB077156C08D7E6992E5981063133B0240916C1201B13428212A69184D335F9FA826
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4bc1674cea66412bb469704e488f2d25.IDENTIFIER=ModemManager.UNIT=ModemManager.service.

/run/systemd/journal/streams/.#9:71708SB5XMd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.462888852738713
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MGHjAzHHRbjZcH5CHq:qgFq6g10+f+MrHHR5mmq
MD5:	7838A3AF11F23DC24F336F148ECE8731
SHA1:	169275DECED1EB2F0FA43BE04302161BED850532
SHA-256:	7B2A7CB0904CFCA69F40D573EF2A0B56D8BCF49938FE3F249C52CB0B9DD177EA
SHA-512:	B4897B3A77943086E01664482CA3DAC2D6E30BED1DDB1D2B442B2E8799F32792B18253708A917921185015F2AEEE031AA444C9C05C9600D1E55A7EB326C8FC05
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e1bb2fa54ef74db78b9655377bd244ab.IDENTIFIER=systemd-localed.UNIT=systemd-localed.service.

/run/systemd/seats/.#seat00unb0U

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat01j0f1c

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.960504169374753
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G88mNvt2KwshcXSv:SbFuFyLwH47Pg20ggW8Gc12rNXc
MD5:	0EDD8049A9E5176912C3C2CBE234DFDB
SHA1:	616927BAAF2CF712B1D1F7F3A8F0507CAA5EAC6C
SHA-256:	434739B0976400CCB6A6302EF461A199F0A5D77E2AF9920D50DE2D799F07E9D6
SHA-512:	171A582F760BF8F9E23DB8ED7EDCE5D88B3B6532E1A46ECB3200291F480682EC5ABAA3B4464E639410A9098CD9AA464EDF6D92CEA0D625C40AACF65FED79E3D4
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c1.ACTIVE_UID=127.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat0AeicVb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.974985332353238
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G/aQvt2ze5XSv:SbFuFyLwH47Pg20ggW8Od12z0Xc
MD5:	638FD4D562360E2AE0FE6842F6853400
SHA1:	CBDEA5AA977FAB4C2DA4C6947CFECFD4B641A644
SHA-256:	565DDE081A5672324151D2EFF5E529ACF29FA96FFCAB42C24FE8A246E929364A
SHA-512:	07CD1D41240B27E815AF85BBF6195001A672FEFA70DBF3B89AD5A128E850BA740DEEE3EA8A77A5ABFBC5ECD86F3EAFD40B5512348C1161265C90EE858DD51F86
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c2.ACTIVE_UID=127.SESSIONS=c2.UIDS=127.

/run/systemd/seats/.#seat0Ip0C39

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.974985332353238
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G/aQvt2ze5XSv:SbFuFyLwH47Pg20ggW8Od12z0Xc
MD5:	638FD4D562360E2AE0FE6842F6853400
SHA1:	CBDEA5AA977FAB4C2DA4C6947CFECFD4B641A644
SHA-256:	565DDE081A5672324151D2EFF5E529ACF29FA96FFCAB42C24FE8A246E929364A
SHA-512:	07CD1D41240B27E815AF85BBF6195001A672FEFA70DBF3B89AD5A128E850BA740DEEE3EA8A77A5ABFBC5ECD86F3EAFD40B5512348C1161265C90EE858DD51F86
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c2.ACTIVE_UID=127.SESSIONS=c2.UIDS=127.

/run/systemd/seats/.#seat0WcQtwc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Y5uAvb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.957035419463244
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+ugKQ2KwshcXSv:SbFuFyLwH47Pg20ggWunQ2rNXc
MD5:	66D114877B3B4DB3BDD8A3AD4F5E7421
SHA1:	62E0CB0F51E0E3F97BE251CB917968DFF69ED344
SHA-256:	A922628916A7DDBE2BAA33F421C82250527EA3C28E429749353A1C75C0C18860
SHA-512:	5651247FA236DCF020A3C8456E4A9A74A85C5B9B3CCE94A3CF8F85FD4D66465C9F97DF7A1822E6CA4553C02BE149F3021D58DCC0C8CB6DCF37F915BD0A158187
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat0dKERla

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.957035419463244
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+ugKQ2KwshcXSv:SbFuFyLwH47Pg20ggWunQ2rNXc
MD5:	66D114877B3B4DB3BDD8A3AD4F5E7421
SHA1:	62E0CB0F51E0E3F97BE251CB917968DFF69ED344
SHA-256:	A922628916A7DDBE2BAA33F421C82250527EA3C28E429749353A1C75C0C18860
SHA-512:	5651247FA236DCF020A3C8456E4A9A74A85C5B9B3CCE94A3CF8F85FD4D66465C9F97DF7A1822E6CA4553C02BE149F3021D58DCC0C8CB6DCF37F915BD0A158187
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat0gjHNYf

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0yWxs7a

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.957035419463244
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+ugKQ2KwshcXSv:SbFuFyLwH47Pg20ggWunQ2rNXc
MD5:	66D114877B3B4DB3BDD8A3AD4F5E7421
SHA1:	62E0CB0F51E0E3F97BE251CB917968DFF69ED344
SHA-256:	A922628916A7DDBE2BAA33F421C82250527EA3C28E429749353A1C75C0C18860
SHA-512:	5651247FA236DCF020A3C8456E4A9A74A85C5B9B3CCE94A3CF8F85FD4D66465C9F97DF7A1822E6CA4553C02BE149F3021D58DCC0C8CB6DCF37F915BD0A158187
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.SESSIONS=c1.UIDS=127.

/run/systemd/sessions/.#c13smVIc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.412808501189468
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GByRJgBoG:qgFqPuFN6IG0n99x2xayWygqG
MD5:	9B2CE330F8D8A2A8C9901EB79B9A708E
SHA1:	0F0DA7F1ECB31A71424E850834E5D10CC3AE9F0B
SHA-256:	2DCA01CFD4B4FE7DFEF7A9C9C657BD3E3025786222024E73A7582C8B8FC8105B
SHA-512:	B20992EC220BF2AFF8457C57242F0A1B3DF0EB5A0E6F1D1035048AB42C1386E867FCB55922DFBF45C4300169A053995A45096351FCA895494494690A220EEB11
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.

/run/systemd/sessions/.#c15E3Yfc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.4133763568977225
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcedL6vUKBhcIGjwn9xfx2xNIByy6GByRJgBoG:qgFqPumW8IG0n99x2xayWygqG
MD5:	8B9453BF5F46E83ED0E789872A2D15E1
SHA1:	D7CC542351E77FD8C4DC7C9448D47D9B8207B030
SHA-256:	DD1F8428D2FD5E4E3196ED62A9797AE3A8C2D3C586D1FF3373FA28C0A012B928
SHA-512:	A52D3046185100BF8145D30E28CCDB5956B207ABF330E9993C02437062AFD5DA0A61D3DCED83F15359D1EEAFABDAB0EBE1EBA716AB1096E3BAB2B30A2356887C
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=0.IS_DISPLAY=1.STATE=online.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.

/run/systemd/sessions/.#c1EscqFb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.412808501189468
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GByRJgBoG:qgFqPuFN6IG0n99x2xayWygqG
MD5:	9B2CE330F8D8A2A8C9901EB79B9A708E
SHA1:	0F0DA7F1ECB31A71424E850834E5D10CC3AE9F0B
SHA-256:	2DCA01CFD4B4FE7DFEF7A9C9C657BD3E3025786222024E73A7582C8B8FC8105B
SHA-512:	B20992EC220BF2AFF8457C57242F0A1B3DF0EB5A0E6F1D1035048AB42C1386E867FCB55922DFBF45C4300169A053995A45096351FCA895494494690A220EEB11
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.

/run/systemd/sessions/.#c1Flu6v9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.421531743100279
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GByRJgBoqL:qgFqPuFN6IG0n99x2xayWygqqL
MD5:	F930722E2A9B5F48D8DCDEA3C2838338
SHA1:	97B7AFD61FAB4CE7A47F8F6AB724276B096028BC
SHA-256:	9AF0AC061C9566BAE9295705DB3A53633FEAEF0EE1A9BCB53A7512F10371622A
SHA-512:	439C9A2053388C7C4A63615E9A7F485623568B46580A8254134F248BD9B7F66AF348572FE66D9636BB94839FC142E2174CDFC6FEEB455545AEC1021A85F4158A
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.CONTROLLER=:1.17.

/run/systemd/sessions/.#c1ZXzPqa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	288
Entropy (8bit):	5.368916118870585
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPddL32UKBhcIixfx2xNIByy6GByRJgBoG:qgFqPuFdDJIi9x2xayWygqG
MD5:	26B597493205C63E0699D05561722F61
SHA1:	03B7DCE9BBA41391D5DE87BCB1C2D09617506452
SHA-256:	E38D6443C405B4D282EB1521CF603B3128DE1BF299A418D381F120115659C668
SHA-512:	90013C9D103C35796AA20C8168C7DD0245CC69B5C44A7FD5517EBE08371A772A8A005030926D547A3DAF968FA7414F373D4862C0A65158AEDA6E9D9425A388F7
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=closing.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.

/run/systemd/sessions/.#c1orzUwb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.4133763568977225
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcedL6vUKBhcIGjwn9xfx2xNIByy6GByRJgBoG:qgFqPumW8IG0n99x2xayWygqG
MD5:	8B9453BF5F46E83ED0E789872A2D15E1
SHA1:	D7CC542351E77FD8C4DC7C9448D47D9B8207B030
SHA-256:	DD1F8428D2FD5E4E3196ED62A9797AE3A8C2D3C586D1FF3373FA28C0A012B928
SHA-512:	A52D3046185100BF8145D30E28CCDB5956B207ABF330E9993C02437062AFD5DA0A61D3DCED83F15359D1EEAFABDAB0EBE1EBA716AB1096E3BAB2B30A2356887C
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=0.IS_DISPLAY=1.STATE=online.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.

/run/systemd/sessions/.#c1w9BhCd

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	333
Entropy (8bit):	5.48048971450162
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcedVuRmUKBhcIS3xffGxfx2xNIByy6GByRJgBoG:qgFqPumVuRZI4BO9x2xayWygqG
MD5:	41156B39DA9BD0387FACDE7A7C045DE8
SHA1:	883B186A25E3D4751F6007007F3537C2372E560F
SHA-256:	565B97C75BD8255AD8AC7242C09F58BEFDDB374E7C67B54F71AD846D6714A2BE
SHA-512:	169BA850FD53EE14A32AA6A6A4D28EF64DE1493ECD1ECD7C7341D7F413B8BEACB3768EA19219A7D2EFB80BD3D02C2E1A41E9E936925A1ECE369DA49B130E3C43
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=0.IS_DISPLAY=1.STATE=opening.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.SCOPE_JOB=/org/freedesktop/systemd1/job/8738.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6036.REALTIME=1734643426004453.MONOTONIC=211778116.

/run/systemd/sessions/.#c23SviEa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.424763210353189
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEs:qgFqPuFNuCH0nI9x2xayWgzg6u
MD5:	D5958D7272B2B66892D0FC65D1FB5B73
SHA1:	5C1CA6DAD7E9046073E25870F4CBB37CA1A33299
SHA-256:	EF6A760E1D6C0053FAB830DDB26410A32DB4BF9038C5A9C76E4DC1CC58AAF997
SHA-512:	6F06A68326AFF5CF4C97A9178A66ED725B1FECAB9A1E7DA2DA078F0E7483AD757F6BB192F2D28743A0A3F0BD3BB4C59BABB27B3A18346BB701CD869FF00E7124
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.

/run/systemd/sessions/.#c2BdcOZa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.424763210353189
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEs:qgFqPuFNuCH0nI9x2xayWgzg6u
MD5:	D5958D7272B2B66892D0FC65D1FB5B73
SHA1:	5C1CA6DAD7E9046073E25870F4CBB37CA1A33299
SHA-256:	EF6A760E1D6C0053FAB830DDB26410A32DB4BF9038C5A9C76E4DC1CC58AAF997
SHA-512:	6F06A68326AFF5CF4C97A9178A66ED725B1FECAB9A1E7DA2DA078F0E7483AD757F6BB192F2D28743A0A3F0BD3BB4C59BABB27B3A18346BB701CD869FF00E7124
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.

/run/systemd/sessions/.#c2Ii0eYa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	361
Entropy (8bit):	5.454409660909672
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEek52Hon:qgFqPuFNuCH0nI9x2xayWgzg69Uo
MD5:	54E851C25A91DA1CA801CC6452601EC0
SHA1:	B1FBBEEEA1A91FE26E9F8D23025B7915D143502E
SHA-256:	2DCA6798D158F05801BF4794A0B3A258258E0531C9AD5B1E5200EB31DFB09B9C
SHA-512:	C42D5FEBF75DE9806781493028ED0D538998885929A38DCE6E37F9C841F2BB86DF60938EE8A3412426D7D918CDC67366A0E6EEA73F1E24F963764287912D5721
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.CONTROLLER=:1.21.DEVICES=13:67 13:64 13:65 .

/run/systemd/sessions/.#c2Qj5iHa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	349
Entropy (8bit):	5.434076843255117
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEek52Hi:qgFqPuFNuCH0nI9x2xayWgzg69Ui
MD5:	EB74ADFD70517EA4CFA04F52F7BDE95E
SHA1:	11E138F9ACFB2325DCE4A6A9AC3983428C2C50AD
SHA-256:	9358FB8BAE11C337CA9D56B5EB754D5F9507BE91DD07278FB06A1FC83351A8B8
SHA-512:	F77681AF7E76FE8C60EFC42A38D954139C7BE2F8E7D83AEC2666415CCE6E29098E3E63F35CA59644701EC20FD35B3218B934215A3F4C3FF2E4E0D1A26864BA49
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.CONTROLLER=:1.21.DEVICES=13:64 .

/run/systemd/sessions/.#c2Stg9Za

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	367
Entropy (8bit):	5.455138356826389
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEek52H6n:qgFqPuFNuCH0nI9x2xayWgzg69U6
MD5:	60630C6938A45355F80E8A4CA4D307BD
SHA1:	BD6FC93B165E202BBFC616417E5E20BB284AC8F7
SHA-256:	D1A93926A53E3B4E9C59FB94F5AAA4C0DED0FAF4BC0541FBB5D5B0A43A00BA42
SHA-512:	B6A70A53D2687A285FA20031D555F8DAAC35A49DD681D0629AF52332BB40D36517798B8F34624855019D1731CD341F336E366F5BC888A9FEBA0A30405CCA0AA7
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.CONTROLLER=:1.21.DEVICES=13:67 13:64 13:66 13:65 .

/run/systemd/sessions/.#c2dAbwlc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	355
Entropy (8bit):	5.448382039126344
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEek52HT3:qgFqPuFNuCH0nI9x2xayWgzg69UT3
MD5:	8002EE36FE52D9F445C004ACE347A90D
SHA1:	E919039BEC70686AD6EFF48E0F633F304E1BA0A2
SHA-256:	3F6DAD6B920BCD182A3D42A94C2F107A24119CB2EC5571E9BA1746E123C96869
SHA-512:	6C1B1EC668EC6D4B75061591BFDD007D2A8500371FE26E25E78854DD8E26F7A1D5B673C9664F089C6E59E938A6DC72C26BAD08FF7A4FCF47F55A8A6A1494C814
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.CONTROLLER=:1.21.DEVICES=13:65 13:64 .

/run/systemd/sessions/.#c2hAv1m9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	329
Entropy (8bit):	5.478689529723988
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdVuRQ/hc/Kf3xffV2Hxfx2xNIByy6GBgpBgBwKEs:qgFqPuFVuRpCvBd2H9x2xayWgzg6u
MD5:	8E8E8D86C7D95D6839FF240A401D17F3
SHA1:	0D4D21505979449D5892456FE09701A53C36739E
SHA-256:	259EDEEAFD03A749627F816FB8FFA986AFB2B7A68EE9966A043E0A8B512EFE93
SHA-512:	F0DB038D506A36C34BFF3A72509F94ADD7E96F3F1EABC641489DEBC0090BE8508DED66CD39A7E6DD9378DE8763E93D918FAD690FF9A3FA2052E44B9314CED154
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=opening.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.SCOPE_JOB=/org/freedesktop/systemd1/job/8921.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.

/run/systemd/sessions/.#c2oRm5Jd

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.4311853185531325
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBgpBgBwKEekv:qgFqPuFNuCH0nI9x2xayWgzg69v
MD5:	F84B1239094E5C39A3F1A102AA41E51D
SHA1:	4AC92D7E184F27F85121486A4977BCB1D7150B16
SHA-256:	2D583ABD72E58D4C0C430EF4980302F070C8FB1259283A7A27EB48E82CEEABD5
SHA-512:	9B862BBB9CCD3492C39EA0AEFA5FAB3A6633553452F822CD48EE9198FC203353793641F5AE4388CE67DD8F7E83D540B40A3BF433797C9CE7C733722EB0FB751F
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=6092.REALTIME=1734643440881108.MONOTONIC=226654771.CONTROLLER=:1.21.

/run/systemd/users/.#1274ceK1a

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.160415870308125
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgdL87iesnAiyaSfgBOwlQ2thQc2pb02nmD2p9rwC:qgFq30dAL/ixegjpthQHtPnmDq9x
MD5:	F3E783CBFBA793FFD7A445CC36CAAA82
SHA1:	1A931888BEBF5C4272947A8363D3F10A386B11D8
SHA-256:	3B1F6FD592BF7882412257ED44B9897E7B4AC296230DAE3BAECFE743A7DA7CFC
SHA-512:	BE9F1E091CF0E92385C17979484F800385F01F2116741DDBF9009C0253086DEF5B7F52CCA3A1812E99369C13301B51BBF81ABC268216C67523E9FF340DD6C54C
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=closing.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=.ACTIVE_SEATS=.ONLINE_SEATS=.

/run/systemd/users/.#1279E3rqb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	281
Entropy (8bit):	5.305165355160159
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0IxffDkfJgBOwlQ2thQc2pb02/g2p9rwB:qgFq30VuR8L/ibBbkBgjpthQHtPYq9M
MD5:	1F3D8BF08B1C3C199CC60C32276A2D7B
SHA1:	D5FC7092680B6E2E94E61FA4857A861241977B4F
SHA-256:	2D7C73A87441388470CE533304CB0F3F32641BCFC4F42EFE7A19B8547ACA56D2
SHA-512:	93D6B2AE8E8C99B93D8DAC44ED71F334BE2B53A4C2057B0D6C0C2D79C98C663B61AF59710FB510486CD596664DDB58B482BB0356708DBA1CE006CC62F74134B4
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/8676.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127B2yy1c

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.168662886620144
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSfgBOwlQ2thQc2pb02/g2p9rwB:qgFq30z1cL/ixegjpthQHtPYq9M
MD5:	C03D4889E035F91569505F7862BB0CA2
SHA1:	7CC8F65EF0F92679340CD4628AD5B1AFF715A897
SHA-256:	BA09A5FED0D353C520E006C40B69F0898F6004EB66E7EF4A3A257595DEC4C97C
SHA-512:	B72CA03BBAFC60659C30C0AB4AC4DEA446765F6CAEF974F456F022C6DBD24FCB6CD2DC6BD25044D7EC079B7069BE3854D8796A4274409A1FD0844D9458A424AB
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127E8Ps69

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.168662886620144
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSfgBOwlQ2thQc2pb02/g2p9rwB:qgFq30z1cL/ixegjpthQHtPYq9M
MD5:	C03D4889E035F91569505F7862BB0CA2
SHA1:	7CC8F65EF0F92679340CD4628AD5B1AFF715A897
SHA-256:	BA09A5FED0D353C520E006C40B69F0898F6004EB66E7EF4A3A257595DEC4C97C
SHA-512:	B72CA03BBAFC60659C30C0AB4AC4DEA446765F6CAEF974F456F022C6DBD24FCB6CD2DC6BD25044D7EC079B7069BE3854D8796A4274409A1FD0844D9458A424AB
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127FVx6Wd

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.3252727154202475
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0IxffEpSfgBOwlQ2thQc2pb02/g2p9rwB:qgFq30VuR8L/ibBsIgjpthQHtPYq9M
MD5:	1A8AEB97C7B07F1A133B13B276871991
SHA1:	50EB48BC8EFCA80B51E20CA9D1131C913681934A
SHA-256:	4DEAD1E2A723B0A91736A2606C17494A295F2C654F668878AA64157F642BE815
SHA-512:	F8206291057D3C252E58BAF4D8EE204A5C0884B774815F8A83E5083ACD19D570B66B37D0404A1C2AED58E989876B111A75F6E92BC15FCA7D807AE024A44451B9
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/8676.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127LSyIAb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.1900755226609965
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSaTgBOwlQ2z5c2zw02zb2owB:qgFq30z1cL/ixxTgjpz5HzwPzbA
MD5:	82305EAB5A726F70B40D680967124E57
SHA1:	16A720026A1748614064B762CE74C6893A303B5B
SHA-256:	8E27F6E0B4F210F076977C54DFB5CAA1DDBD8341DA777F09479446D0BBAF1D3F
SHA-512:	1767436C976B7F9158B7A616CEDFCF2F5369B81608C9D43C03FC08D6FCF0E1BD1BC7A5D532E2800C1AD4301BC48DA8B3FBBFD414261517E88EBDE84801AF1257
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c2.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c2.SEATS=seat0.ACTIVE_SESSIONS=c2.ONLINE_SESSIONS=c2.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127SlRLBb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	240
Entropy (8bit):	5.168628079740033
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiRJgBOwlQ2z5c2zw02zb2owB:qgFq30z1cL/iRJgjpz5HzwPzbA
MD5:	D5AF5891C347BD4F6C29F34262259A18
SHA1:	A77B8EDC3DA9D3EA233DFA83AC3C912894C2F6D9
SHA-256:	2FB5733B0544BD6818F33F89C2C52632BEFA290244F6AF9B2F65D0600AFD815F
SHA-512:	F438BD768154A9701BEE3613C511CD11F8241433D1BABB6F52F3B5F744DAF5CCE97E979B12109C45A151275408E21BBFFAA23789175FA697FF837239D1A8A539
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c2.SEATS=seat0.ACTIVE_SESSIONS=c2.ONLINE_SESSIONS=c2.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127TRr5Qc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	245
Entropy (8bit):	5.178175845232715
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgdL87iesnAiyaSfgBOwlQ2thQc2x9sS02nmD2owC:qgFq30dAL/ixegjpthQHxbPnmDd
MD5:	ED8F5855686CE7B28977B99CFE43F402
SHA1:	E5D115BCF4AADA2C8BC9699C92328D6D33B908E0
SHA-256:	04DEF87AFE42EEE0494CDBA5BC558819768C3B4C0E11407813E8BE34AADD1FA5
SHA-512:	D86A6F072A99C75CFA23C190326AB03DA308581D228FF8C34DC8BF6C3BEB292E1C01188C38CB580B654F9DC6D33311F59BDAE9A8E42014F292A035669DAFF9D2
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=closing.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=.ACTIVE_SEATS=seat0.ONLINE_SEATS=.

/run/systemd/users/.#127Tp4NYc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	4.928997328913428
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs5BuSgVuMI2sKiYiesnAv/XS12K2hwEY8mTQ2pJi22sQ2KkmD2pi:SbFuFyL3BVgVuR257iesnAi12thQc2p4
MD5:	065A3AD1A34A9903F536410ECA748105
SHA1:	21CD684DF60D569FA96EEEB66A0819EAC1B2B1A4
SHA-256:	E80554BF0FF4E32C61D4FA3054F8EFB27A26F1C37C91AE4EA94445C400693941
SHA-512:	DB3C42E893640BAEE9F0001BDE6E93ED40CC33198AC2B47328F577D3C71E2C2E986AAAFEF5BD8ADBC639B5C24ADF715D87034AE24B697331FF6FEC5962630064
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127cJqfXc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.160415870308125
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgdL87iesnAiyaSfgBOwlQ2thQc2pb02nmD2p9rwC:qgFq30dAL/ixegjpthQHtPnmDq9x
MD5:	F3E783CBFBA793FFD7A445CC36CAAA82
SHA1:	1A931888BEBF5C4272947A8363D3F10A386B11D8
SHA-256:	3B1F6FD592BF7882412257ED44B9897E7B4AC296230DAE3BAECFE743A7DA7CFC
SHA-512:	BE9F1E091CF0E92385C17979484F800385F01F2116741DDBF9009C0253086DEF5B7F52CCA3A1812E99369C13301B51BBF81ABC268216C67523E9FF340DD6C54C
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=closing.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=.ACTIVE_SEATS=.ONLINE_SEATS=.

/run/systemd/users/.#127fjwBHd

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.162932458946625
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgNz7iesnAiyaSfgBOwlQ2thQc2x9sS02/g2owB:qgFq30NzL/ixegjpthQHxbPYA
MD5:	BC51FC8B34F3E316AA52A698BC188F23
SHA1:	4A87BE3BE149028B90A93616814EB9BDE00E7EC6
SHA-256:	C938D65C2948F5F0D3AEB0C23268F919F234701D319B80CCAB1B69FB9D8865BD
SHA-512:	F0C1D79CDC994F8AAB4E7C66FD42E693DFBEBC6CD81C5E490885B5676D567A3E4289FB98DBCA4ACA020362AF914903B6F1F589D58B434E26A056973503804CE7
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=active.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=c1.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127hy3j69

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.174139267680916
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgNz7iesnAiyaSaTgBOwlQ2z5c2zw02zb2owB:qgFq30NzL/ixxTgjpz5HzwPzbA
MD5:	F6EEBEDC7FE44EE5946D597CD720D6FE
SHA1:	84A6E6A0BDA1B6C77DC335E8196A433B2665DACB
SHA-256:	7B8A0EB3230657A89A9044AB92D42BE880BB81D239BBC710359A5BBEBD1A6FBB
SHA-512:	9CF69B2C7B68D9304313EE8FFC67D062E74D775EB53425C366B87462AE90B20B82BADC3F89F09969D3C2A586650F8CF9BE5785FE429A644D0248369A14A4C8B0
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=active.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c2.REALTIME=1734643425969818.MONOTONIC=211743481.SESSIONS=c2.SEATS=seat0.ACTIVE_SESSIONS=c2.ONLINE_SESSIONS=c2.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:d2:o
MD5:	93A3EE69A4211C63D767C4BE90AB7231
SHA1:	01F563550CF8BA137B13407DBFF8C6F791061CFC
SHA-256:	15C935F05EC38A894F73109ED5691198D02E2C7666C74B17AE786284AAA605A3
SHA-512:	65A4A983AA50CBA3261AC4072D4BD2860E5EBBB1318FB38A0704374D90E51A42AB0007676D20E61EB21E42AD54DDB1FB40487CC6A7A23F8F753C91CBC9EF663C
Malicious:	false
Preview:	6331.

/run/user/127/ICEauthority

Download File

Process:	/usr/libexec/gnome-session-binary
File Type:	data
Category:	dropped
Size (bytes):	652
Entropy (8bit):	5.885164260770852
Encrypted:	false
SSDEEP:	12:OxPae8YveY+aeZxPLeXzveY+LJveY+LW8xPLQLjveY+ae0UxPaebi:HHeatLZBki
MD5:	0B1A728ED799A26450CB1FCBBA4A61B1
SHA1:	2F65687E7E41928C3DF0F2FED4BD55F1BDE8281B
SHA-256:	8DC5748D23FBB6DD5F3274455B891A0764C13761562286F9240AF65F98AC84CA
SHA-512:	3F9E5A71994D933F884997F8FD64D0FD23A8D5E430D4555FF0D886A47C0DFCFC1CC632B82C73A4E5EE082E66659692417B4B18DF794D63D141766A6569C9BACB
Malicious:	false
Preview:	..XSMP...!unix/galassia:/tmp/.ICE-unix/6119..MIT-MAGIC-COOKIE-1..6..'..Z.E...1],...XSMP...#local/galassia:@/tmp/.ICE-unix/6119..MIT-MAGIC-COOKIE-1..Hr>.*7O...3gA.....ICE...!unix/galassia:/tmp/.ICE-unix/6063..MIT-MAGIC-COOKIE-1..q.+.^..o....8/...ICE...#local/galassia:@/tmp/.ICE-unix/6063..MIT-MAGIC-COOKIE-1....q...".<z...Oy..XSMP...#local/galassia:@/tmp/.ICE-unix/6063..MIT-MAGIC-COOKIE-1...B#...7...<v.a.@..XSMP...!unix/galassia:/tmp/.ICE-unix/6063..MIT-MAGIC-COOKIE-1.....1.......U...ICE...#local/galassia:@/tmp/.ICE-unix/6119..MIT-MAGIC-COOKIE-1..jF.Z......~....}..ICE...!unix/galassia:/tmp/.ICE-unix/6119..MIT-MAGIC-COOKIE-1...#.....U.._.:.

/run/user/127/dconf/user

Download File

Process:	/usr/libexec/gsd-power
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Preview:	.

/run/user/127/gdm/Xauthority

Download File

Process:	/usr/lib/gdm3/gdm-x-session
File Type:	X11 Xauthority data
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.867910171814256
Encrypted:	false
SSDEEP:	3:rg/WFllasO93hRimOyuEgWFllasO93hRimOyun:rg/WFl2xETEgWFl2xETn
MD5:	E0C9B1120BFA07F62586C2F8AF9109CF
SHA1:	76FA49DB90EAF02E012486B309DFE27FC371EC13
SHA-256:	5DCC1E6BA42B43C7B08B1890D470FD692FFA1805BC3DF4A88BA7C4BD267F4A8B
SHA-512:	32479543A432AA677FFE59DF180EE879099EE737BCBB458FB237A5A41E9AECA244BA4FAE53215AC8127C1AF185738D9B6B21238EE7DC922E95DCCD0153CF5468
Malicious:	false
Preview:	....galassia....MIT-MAGIC-COOKIE-1..Y.XE.b..1.G.........galassia....MIT-MAGIC-COOKIE-1..Y.XE.b..1.G.....

/run/user/127/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:W6:W6
MD5:	E381DAB478CBC9A4533BCB88293599D9
SHA1:	E8E72518A1C2497742A95BBC161E27212A376B10
SHA-256:	E29379F882FE727713B4AB8264DC238637D597AA8C9D9ECB5F7FE2E6C1AE3547
SHA-512:	8FD33A6F5C50746964D83A19C7EEF773AA7160F2D77546FDA2BC252088AEE53A7C5CEB47DADFC3E4387729A7D4DE94C31C9B88732A47231B7CB93DF0CA0219B2
Malicious:	false
Preview:	6385.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:zlR0sXlXEWtl/VuV+X:zlRV+yl9I+
MD5:	49E6CEF22614F59401CADFFCE375EC3C
SHA1:	5BF2C3C32A86A47068718F23FC491D1506D52E57
SHA-256:	33888249EF503792041B1C6B2701B3A7E991EBF54BD6E42C8E53490CBB8AED68
SHA-512:	F61447D732386CA692AD4CE84DBB4E96A7FF49DF92F65181DC26D9BD28DD9C9DB159759F877FD0059B4A59ED55AAAF3FDE7BEBDDE2813BC94E64537A192A4445
Malicious:	false
Preview:	....!...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................!....dg.6......................................

/sys/fs/cgroup/systemd/user.slice/user-127.slice/user@127.service/dbus.service/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:fv:H
MD5:	88827782B2533BA70A06D9EEC3B79648
SHA1:	C3F7BC0574BF17910042280E9558BE0B2D85EF16
SHA-256:	330A40105DEB15A5BE92A0788C4586EE2C5830BBD72DDF9DDD8D271BCFCE5E82
SHA-512:	26989570151510D796EDDAB077787FB45FCF17E2F61A2595E727CAB342579A5451D0BE6C88D93BED26A9C4A165CD7500BEF9974245DA3729F19C06824980371B
Malicious:	false
Preview:	6055.

/sys/fs/cgroup/systemd/user.slice/user-127.slice/user@127.service/dbus.socket/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:G:G
MD5:	732920DCEB69266C57750A7B4F529AC2
SHA1:	5C308989462303E2D6A9272EE40076436F12750D
SHA-256:	F9C0BEFECD57FDB35166EB45174F84E20AC46DB877FBAFF38C2D61287A424E74
SHA-512:	20955D11BE59526D26F86E04E2F8BFFFA542E93ACB2337F3BE816F23A11CB9184F2DE8E2EB2D90EE90639DA0B07275F8C4EA26C2CABF2348717C7CC59CD0F32C
Malicious:	false
Preview:	6049.

/sys/fs/cgroup/systemd/user.slice/user-127.slice/user@127.service/init.scope/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.246439344671016
Encrypted:	false
SSDEEP:	3:F76n:wn
MD5:	6901661841223309720FC16A35F0FAF5
SHA1:	EC5B15C54E2F3B752314151187726C0F3A65B0E1
SHA-256:	6B8D170F9FAA852358CE4D3CB361A23DBA8812800CFC9E04D71BC1B9E12BB6FF
SHA-512:	B79A702219236352C00B597491469F3325CD8048D380B1C4553BE4BDA5715041E1D65FDD78C89E43CA6D74B8F264A49C7659229C49163544F390E5948BA25DF2
Malicious:	false
Preview:	6044.6045.

/sys/fs/cgroup/systemd/user.slice/user-127.slice/user@127.service/pulseaudio.service/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:W6:W6
MD5:	E381DAB478CBC9A4533BCB88293599D9
SHA1:	E8E72518A1C2497742A95BBC161E27212A376B10
SHA-256:	E29379F882FE727713B4AB8264DC238637D597AA8C9D9ECB5F7FE2E6C1AE3547
SHA-512:	8FD33A6F5C50746964D83A19C7EEF773AA7160F2D77546FDA2BC252088AEE53A7C5CEB47DADFC3E4387729A7D4DE94C31C9B88732A47231B7CB93DF0CA0219B2
Malicious:	false
Preview:	6385.

/sys/fs/cgroup/unified/user.slice/user-127.slice/user@127.service/dbus.service/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:fv:H
MD5:	88827782B2533BA70A06D9EEC3B79648
SHA1:	C3F7BC0574BF17910042280E9558BE0B2D85EF16
SHA-256:	330A40105DEB15A5BE92A0788C4586EE2C5830BBD72DDF9DDD8D271BCFCE5E82
SHA-512:	26989570151510D796EDDAB077787FB45FCF17E2F61A2595E727CAB342579A5451D0BE6C88D93BED26A9C4A165CD7500BEF9974245DA3729F19C06824980371B
Malicious:	false
Preview:	6055.

/sys/fs/cgroup/unified/user.slice/user-127.slice/user@127.service/dbus.socket/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:G:G
MD5:	732920DCEB69266C57750A7B4F529AC2
SHA1:	5C308989462303E2D6A9272EE40076436F12750D
SHA-256:	F9C0BEFECD57FDB35166EB45174F84E20AC46DB877FBAFF38C2D61287A424E74
SHA-512:	20955D11BE59526D26F86E04E2F8BFFFA542E93ACB2337F3BE816F23A11CB9184F2DE8E2EB2D90EE90639DA0B07275F8C4EA26C2CABF2348717C7CC59CD0F32C
Malicious:	false
Preview:	6049.

/sys/fs/cgroup/unified/user.slice/user-127.slice/user@127.service/init.scope/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.246439344671016
Encrypted:	false
SSDEEP:	3:F76n:wn
MD5:	6901661841223309720FC16A35F0FAF5
SHA1:	EC5B15C54E2F3B752314151187726C0F3A65B0E1
SHA-256:	6B8D170F9FAA852358CE4D3CB361A23DBA8812800CFC9E04D71BC1B9E12BB6FF
SHA-512:	B79A702219236352C00B597491469F3325CD8048D380B1C4553BE4BDA5715041E1D65FDD78C89E43CA6D74B8F264A49C7659229C49163544F390E5948BA25DF2
Malicious:	false
Preview:	6044.6045.

/sys/fs/cgroup/unified/user.slice/user-127.slice/user@127.service/pulseaudio.service/cgroup.procs

Download File

Process:	/lib/systemd/systemd
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:W6:W6
MD5:	E381DAB478CBC9A4533BCB88293599D9
SHA1:	E8E72518A1C2497742A95BBC161E27212A376B10
SHA-256:	E29379F882FE727713B4AB8264DC238637D597AA8C9D9ECB5F7FE2E6C1AE3547
SHA-512:	8FD33A6F5C50746964D83A19C7EEF773AA7160F2D77546FDA2BC252088AEE53A7C5CEB47DADFC3E4387729A7D4DE94C31C9B88732A47231B7CB93DF0CA0219B2
Malicious:	false
Preview:	6385.

/tmp/qemu-open.mJEuDe (deleted)

Download File

Process:	/tmp/ngwa5.elf
File Type:	data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	4.0536606896881855
Encrypted:	false
SSDEEP:	3:TgOQLc8HJN:TgZJN
MD5:	AC250E3F00CC16907E0D589F2DC53826
SHA1:	C3458BAC504BEC0C4984AC81CB405E3FA8A96257
SHA-256:	9A16E706CBABA4731AF89B10A86B099D0F4FDD20140FBEEBFB27AFF963B03953
SHA-512:	CE0732E2BD36BEAE0158C7BEB599F222C0ACB3618BE2EC3EA7C32E17AE258CCD0E1626CA5DACA727C64EC060FFB3F20274F94929AE0D2D239981F7C168BE2797
Malicious:	false
Preview:	/tmp/ngwa5.elf.nwlrbbmqbh

/tmp/server-0.xkm

Download File

Process:	/usr/bin/xkbcomp
File Type:	Compiled XKB Keymap: lsb, version 15
Category:	dropped
Size (bytes):	12060
Entropy (8bit):	4.8492493153178975
Encrypted:	false
SSDEEP:	192:tDyb2zOmnECQmwTVFfLaSLus4UVcqLkjoqdD//HJeCQ1+JdDx0s2T:tDyAxvYhFf+S6tUzmp7/1MJ
MD5:	B4E3EB0B8B6B0FC1F46740C573E18D86
SHA1:	7D35426357695EBA77850757E8939A62DCEFF2D1
SHA-256:	7951135CC89A6E89493E3A9997C3D9054439459F8BFCE3DDEC76B943DA79FA91
SHA-512:	8196A23E2B5E525A5581562A2D7F2EE4FF5B694FEF3E218206D52EA9BFE80600BB0C6AA8968CA58E93E1AAD478FA05E157D08DB6D4D1224DDEA6754E377BE001
Malicious:	false
Preview:	.mkx..............D.......................h.......<.....P.@%.......&......D.......NumLock.....Alt.....LevelThree..LAlt....RAlt....RControl....LControl....ScrollLock..LevelFive...AltGr...Meta....Super...Hyper...........evdev+aliases(qwerty)...!.....ESC.AE01AE02AE03AE04AE05AE06AE07AE08AE09AE10AE11AE12BKSPTAB.AD01AD02AD03AD04AD05AD06AD07AD08AD09AD10AD11AD12RTRNLCTLAC01AC02AC03AC04AC05AC06AC07AC08AC09AC10AC11TLDELFSHBKSLAB01AB02AB03AB04AB05AB06AB07AB08AB09AB10RTSHKPMULALTSPCECAPSFK01FK02FK03FK04FK05FK06FK07FK08FK09FK10NMLKSCLKKP7.KP8.KP9.KPSUKP4.KP5.KP6.KPADKP1.KP2.KP3.KP0.KPDLLVL3....LSGTFK11FK12AB11KATAHIRAHENKHKTGMUHEJPCMKPENRCTLKPDVPRSCRALTLNFDHOMEUP..PGUPLEFTRGHTEND.DOWNPGDNINS.DELEI120MUTEVOL-VOL+POWRKPEQI126PAUSI128I129HNGLHJCVAE13LWINRWINCOMPSTOPAGAIPROPUNDOFRNTCOPYOPENPASTFINDCUT.HELPI147I148I149I150I151I152I153I154I155I156I157I158I159I160I161I162I163I164I165I166I167I168I169I170I171I172I173I174I175I176I177I178I179I180I181I182I183I184I185I186I187I188I189I190FK13FK14FK15FK16FK17FK18

/var/lib/AccountsService/users/gdm.B4JCZ2

Download File

Process:	/usr/lib/accountsservice/accounts-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.66214589518167
Encrypted:	false
SSDEEP:	3:urzMQvNT+PzKLrAan4R8AKn:gzMQIzKLrAa4M
MD5:	542BA3FB41206AE43928AF1C5E61FEBC
SHA1:	F56F574DAF50D609526B36B5B54FDD59EA4D6A26
SHA-256:	730D9509D4EAA7266829A8F5A8CFEBA6BBDDD5873FC2BD580AD464F4A237E11A
SHA-512:	D774B8F191A5C65228D1B3CA1181701CFCD07A3D91C5571B0DDF32AD3E241C2D7BDFC0697AB97DC10441EF9CDC8AEE5B19BC34E13E5C8B0B91AD06EEF42F5AEA
Malicious:	false
Preview:	[User].XSession=.Icon=/var/lib/gdm3/.face.SystemAccount=true.

/var/lib/AccountsService/users/gdm.P8C5Y2

Download File

Process:	/usr/lib/accountsservice/accounts-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.66214589518167
Encrypted:	false
SSDEEP:	3:urzMQvNT+PzKLrAan4R8AKn:gzMQIzKLrAa4M
MD5:	542BA3FB41206AE43928AF1C5E61FEBC
SHA1:	F56F574DAF50D609526B36B5B54FDD59EA4D6A26
SHA-256:	730D9509D4EAA7266829A8F5A8CFEBA6BBDDD5873FC2BD580AD464F4A237E11A
SHA-512:	D774B8F191A5C65228D1B3CA1181701CFCD07A3D91C5571B0DDF32AD3E241C2D7BDFC0697AB97DC10441EF9CDC8AEE5B19BC34E13E5C8B0B91AD06EEF42F5AEA
Malicious:	false
Preview:	[User].XSession=.Icon=/var/lib/gdm3/.face.SystemAccount=true.

/var/lib/AccountsService/users/gdm.UG33Y2

Download File

Process:	/usr/lib/accountsservice/accounts-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.66214589518167
Encrypted:	false
SSDEEP:	3:urzMQvNT+PzKLrAan4R8AKn:gzMQIzKLrAa4M
MD5:	542BA3FB41206AE43928AF1C5E61FEBC
SHA1:	F56F574DAF50D609526B36B5B54FDD59EA4D6A26
SHA-256:	730D9509D4EAA7266829A8F5A8CFEBA6BBDDD5873FC2BD580AD464F4A237E11A
SHA-512:	D774B8F191A5C65228D1B3CA1181701CFCD07A3D91C5571B0DDF32AD3E241C2D7BDFC0697AB97DC10441EF9CDC8AEE5B19BC34E13E5C8B0B91AD06EEF42F5AEA
Malicious:	false
Preview:	[User].XSession=.Icon=/var/lib/gdm3/.face.SystemAccount=true.

/var/lib/gdm3/.config/ibus/bus/ee49dfd4fa47433baee88884e2d7de7c-unix-0

Download File

Process:	/usr/bin/ibus-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	381
Entropy (8bit):	5.158916413433743
Encrypted:	false
SSDEEP:	6:SbF4b2sONeZVkSoQ65EfqFFAU+qmnQT23msRvkTFacecf8h/zKLGWWedfbETvp1w:q5sU3LWfLUDmQymqSFbfomSO+pfO
MD5:	4F974529EBCC032C0E79E7E694525DAC
SHA1:	42FD8B907C6A5A4856C429D16EF2DA3178ACDD34
SHA-256:	BEA3DADA6B7DAB303058BDD62FD89AEBE100EB558249578CACCB4D045F67B0EF
SHA-512:	F6749BB6EB279C87E65E772AE96CCBAD91ECDABD6C6E9B6C93C22F1AC1DCDF831856E99DEEE71CF9D41CA63CCEF4372C0EB1F3FC91AEBFB1B0487A836F7A7992
Malicious:	false
Preview:	# This file is created by ibus-daemon, please do not modify it..# This file allows processes on the machine to find the.# ibus session bus with the below address..# If the IBUS_ADDRESS environment variable is set, it will.# be used rather than this file..IBUS_ADDRESS=unix:abstract=/var/lib/gdm3/.cache/ibus/dbus-WSQckmGm,guid=74ef62990d80d73ee3893fe667648f14.IBUS_DAEMON_PID=6328.

/var/lib/gdm3/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

Download File

Process:	/usr/bin/pulseaudio
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Preview:	.

/var/lib/gdm3/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Preview:	.

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/Xorg.0.log

Download File

Process:	/usr/lib/xorg/Xorg
File Type:	JSON data
Category:	dropped
Size (bytes):	41347
Entropy (8bit):	5.2857423976006865
Encrypted:	false
SSDEEP:	384:m83qZ4uAB0MfMddIdXdIdDdXd4dtuduFdmLd8dHdrdQdTdWdndMdBdGdydYmdb3p:V3qWvMgAfNjcnP+lEYT4oqsn322
MD5:	A518B9333AB1554E416C5955B541B8A4
SHA1:	1387BFC5735AEFFD9FED5A29CD44D9C6927A7EF4
SHA-256:	4E714CF022A75320D9BBD7206637691E2D689B92ED518EB2A70173E3AE6C548A
SHA-512:	58643470EC1E98310AAE3BE9773BB1823300AE5933B2FF413D7059795D3DBDDE9C85D12549A07BE2E60BACF6FD52FFDF56819B696F62E8AFF06B16E499457284
Malicious:	false
Preview:	[ 227.622] (--) Log file renamed from "/var/log/Xorg.pid-6101.log" to "/var/log/Xorg.0.log".[ 227.654] .X.Org X Server 1.20.11.X Protocol Version 11, Revision 0.[ 227.671] Build Operating System: linux Ubuntu.[ 227.680] Current Operating System: Linux galassia 5.4.0-72-generic #80-Ubuntu SMP Mon Apr 12 17:35:00 UTC 2021 x86_64.[ 227.689] Kernel command line: Patched by Joe: BOOT_IMAGE=/vmlinuz-5.4.0-72-generic root=/dev/mapper/ubuntu--vg-ubuntu--lv ro maybe-ubiquity.[ 227.717] Build Date: 06 July 2021 10:17:51AM.[ 227.736] xorg-server 2:1.20.11-1ubuntu1~20.04.2 (For technical support please see http://www.ubuntu.com/support) .[ 227.746] Current version of pixman: 0.38.4.[ 227.755] .Before reporting problems, check http://wiki.x.org..to make sure that you have the latest version..[ 227.766] Markers: (--) probed, (**) from config file, (==) default setting,..(++) from command line, (!!) notice, (II) informational,..(WW) warning, (EE) error, (NI) not implemented, (??)

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	2127
Entropy (8bit):	5.011312845066018
Encrypted:	false
SSDEEP:	24:AS2ZeaESoGESQ0SxzSTAvcSTA2+V2S0tDSUJeFdmVDTFEcrCQ+dcXju8NunpEcrj:TQF68Mv3MfV1U+Q0mVPhrCQIdrCNrbon
MD5:	A20502A87C21210B778546EB4B747143
SHA1:	3771DA6E68EC1950978C16A7E207B7EC5644B08D
SHA-256:	D05EB605C0205AEE606E39EB7E3F4A296C8647498E1EA3D9E70BE56808641DC5
SHA-512:	5B4E03D6BFB397B1217C1E0727A4C2F9A6917B36C6908ADE7699488F243A3471467D789A11E02281DAB407F5CC7C818DF0B63BB0BBFA279782283F78A55641F7
Malicious:	false
Preview:	Dec 19 15:23:28 galassia systemd-logind[5951]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 19 15:23:28 galassia systemd-logind[5951]: User enumeration failed: Invalid argument.Dec 19 15:23:28 galassia systemd-logind[5951]: User of session 2 not known..Dec 19 15:23:28 galassia systemd-logind[5951]: Session enumeration failed: No such file or directory.Dec 19 15:23:28 galassia systemd-logind[5951]: Watching system buttons on /dev/input/event0 (Power Button).Dec 19 15:23:28 galassia systemd-logind[5951]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 19 15:23:28 galassia systemd-logind[5951]: New seat seat0..Dec 19 15:23:45 galassia gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0).Dec 19 15:23:46 galassia systemd-logind[5951]: New session c1 of user gdm..Dec 19 15:23:46 galassia systemd: pam_unix(systemd-user:session): session opened for user gdm by (uid=0).Dec 19 15:23:58 ga

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31HlN4vk4QHQtz4vk4QHA:F3AfQHnfQH
MD5:	07D67BE505266B0C4D83CAD7F74F8112
SHA1:	1C56A937213237EC205396B60A68CED9D9639F9C
SHA-256:	60AFD649B39982D878A53CA32CFE3DA894AE38E12CE91C107CAB5BF476305738
SHA-512:	0531E567757A14D266CF662383B809F643E2BDE013EA05FE8CE416F53AE9798A729FEB8FF4CCD9110BABC7C4F9447278FE677326301BD19744B3469C6AC8972D
Malicious:	false
Preview:	LPKSHHRH.................].N)A...xuySY..................................].N)A...xuySY.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.3921984062038995
Encrypted:	false
SSDEEP:	3:F31HlpKjz6Z3Kjz6p:F35KqZ3Kqp
MD5:	0EC07397AD284AA18D711EAD101AB4E9
SHA1:	7C3865FFEB1E217EC581298663625B1E068F8136
SHA-256:	BB603596782C446D1DF539359E17E559FBA44CA01A1C9D7896FF74C10082ABD2
SHA-512:	6BC0E322ED585DD2B942ABA2F7F5EA69EA6B8C3CD5FFE64039EAA3AEF5CE9DCB91C050ECA8926F968A0B6B5BFC976A577E55370CD47E498C0E44FAD0EDA9D23C
Malicious:	false
Preview:	LPKSHHRH..................B..3F..d>..).h..................................B..3F..d>..).h........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	43501
Entropy (8bit):	4.737916753379761
Encrypted:	false
SSDEEP:	384:NhRavArWGZ1RIXWMRNyzlZ0oiOGU7K02rbrQQGtNrKJ0EtkWTxR+GOF8GbF/C3rh:30xIJ8rO3+cGkvw
MD5:	4405B4FD7185C7576DAE18EEC5B0F19D
SHA1:	6CA109A5FCAFDCC202B9C7A9324E8D34E458E315
SHA-256:	9EC9C3A6A35A4AE87F297EADBD2B754F5D96DED4F4248FD3DD25D9A5DAD6A4DF
SHA-512:	D194E06AD9E54120C79C3721DAC7A59261B7303031B79D03ED83A9DF19D818FFC896234DE04D148A0E9166242D206F8FD6AAC4D590ED2AB0899AE7AB73FFB72B
Malicious:	false
Preview:	Dec 19 15:23:23 galassia kernel: [ 189.304583] blocking signal 9: 5427 -> 3132.Dec 19 15:23:23 galassia kernel: [ 190.103666] New task spawned: old: (tgid 5922, tid 5922), new (tgid: 5922, tid: 5923).Dec 19 15:23:23 galassia kernel: [ 190.103882] New task spawned: old: (tgid 5922, tid 5922), new (tgid: 5922, tid: 5924).Dec 19 15:23:23 galassia kernel: [ 190.107333] New task spawned: old: (tgid 5922, tid 5923), new (tgid: 5922, tid: 5925).Dec 19 15:23:25 galassia kernel: [ 190.127738] blocking signal 0: 5713 -> 2935.Dec 19 15:23:25 galassia kernel: [ 191.232033] New task spawned: old: (tgid 5929, tid 5929), new (tgid: 5932, tid: 5932).Dec 19 15:23:25 galassia kernel: [ 191.293948] New task spawned: old: (tgid 5932, tid 5932), new (tgid: 5933, tid: 5933).Dec 19 15:23:25 galassia kernel: [ 191.568641] New task spawned: old: (tgid 5929, tid 5929), new (tgid: 5934, tid: 5934).Dec 19 15:23:25 galassia kernel: [ 191.625567] New task spawned: old: (tgid 5934, tid 5934), new (tgid: 593

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	154841
Entropy (8bit):	5.217545458499222
Encrypted:	false
SSDEEP:	1536:nC4XJASXB6tFBWiEkydHQXFqlS/BNTvpMDD0Z:nCfSx6HBWjIF2S/BNY0Z
MD5:	F956D6191758F691C013FF81FE13CD3E
SHA1:	AB355D731EF1A6597317C55A43505C4D2988EC33
SHA-256:	E12DE2FB7D594871DBCC2AB7D5CD14FAFF598EAE8B366FAF8413ED2E6B474938
SHA-512:	098AC98D1A997412FEF6891279A91AD844D14F3C267AC6FE1196F26ED62E6183C19CDBC967C2D9C5C778C16AC43CA948EEBEEC2B9BAECB906CC75127BD231A67
Malicious:	false
Preview:	Dec 19 15:23:23 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 19 15:23:23 galassia kernel: [ 189.304583] blocking signal 9: 5427 -> 3132.Dec 19 15:23:23 galassia kernel: [ 190.103666] New task spawned: old: (tgid 5922, tid 5922), new (tgid: 5922, tid: 5923).Dec 19 15:23:23 galassia kernel: [ 190.103882] New task spawned: old: (tgid 5922, tid 5922), new (tgid: 5922, tid: 5924).Dec 19 15:23:23 galassia systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 19 15:23:23 galassia systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 3..Dec 19 15:23:23 galassia systemd[1]: Stopped System Logging Service..Dec 19 15:23:23 galassia systemd[1]: Starting System Logging Service....Dec 19 15:23:23 galassia systemd[1]: gdm.service: Main process exited, code=killed, status=9/KILL.Dec 19 15:23:23 galassia systemd[1]: gdm.service: Killing process 5917 (gdm-session-wor) with signal SIGKILL..Dec 19 15:23:23 galassia systemd[1]: gdm

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:zlR0sXlXEWtl/VuV+X:zlRV+yl9I+
MD5:	49E6CEF22614F59401CADFFCE375EC3C
SHA1:	5BF2C3C32A86A47068718F23FC491D1506D52E57
SHA-256:	33888249EF503792041B1C6B2701B3A7E991EBF54BD6E42C8E53490CBB8AED68
SHA-512:	F61447D732386CA692AD4CE84DBB4E96A7FF49DF92F65181DC26D9BD28DD9C9DB159759F877FD0059B4A59ED55AAAF3FDE7BEBDDE2813BC94E64537A192A4445
Malicious:	true
Preview:	....!...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................!....dg.6......................................

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.564468187748333
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ngwa5.elf
File size:	158'464 bytes
MD5:	b3d2354bd8a1a2db55179416fd67ec5f
SHA1:	fd8620f2490a9bfe9ffce4cdffd33b41dec3cf40
SHA256:	93616b561baa0dbf7946ef615431ed2dbacafb7e14b84df4f47088bf976cfee8
SHA512:	4d7cb62a43c668939d220945346b5e756706552705aec8f62d654e253dace902c0b441de641998af827822495bc3c7a00586e7d64e36f4d11f7c4f6bc7662b1d
SSDEEP:	3072:os5DGTspungiRVm4NYR89hBhzBMZ8/fs:os0TUmdTm4NY29hXz+Z8/fs
TLSH:	EDF3F945F8818F23C6D612BBFB5E428D372A17A8D3EE71039D256F20379685B0E77642
File Content Preview:	.ELF...a..........(.........4...pi......4. ...(.....................p...p................ ... ... ..0I..............Q.td..................................-...L."....x..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	158064
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x1e400	0x0	0x6	AX	16
.fini	PROGBITS	0x264b0	0x1e4b0	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x264c4	0x1e4c4	0x30ac	0x0	0x2	A	4
.ctors	PROGBITS	0x32000	0x22000	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x3200c	0x2200c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x32020	0x22020	0x4910	0x0	0x3	WA	32
.bss	NOBITS	0x36930	0x26930	0x45e4	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x26930	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x21570	0x21570	6.0672	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x22000	0x32000	0x32000	0x4930	0x8f14	0.4220	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 22:22:04.360491991 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:04.480010033 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:04.480258942 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:04.482796907 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:04.602232933 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:04.602551937 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:04.662826061 CET	44730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:04.722106934 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:04.782378912 CET	7733	44730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:04.782655954 CET	44730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:04.785393000 CET	44730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:04.904881954 CET	7733	44730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:05.539582968 CET	44732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:05.659338951 CET	7733	44732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:05.659527063 CET	44732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:05.768721104 CET	33966	44220	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:05.769280910 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:05.771867990 CET	44220	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:05.824073076 CET	44732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:05.943795919 CET	7733	44732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:07.081552029 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:07.201127052 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:07.201191902 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:07.203707933 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:07.323219061 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:07.323328018 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:07.442853928 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:08.362168074 CET	44736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.481717110 CET	7733	44736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.481781006 CET	44736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.484904051 CET	44736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.489656925 CET	44738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.521754980 CET	33966	44226	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:08.521812916 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:08.521995068 CET	44226	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:08.604700089 CET	7733	44736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.609833002 CET	7733	44738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.609905005 CET	44738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.613028049 CET	44738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.631934881 CET	44740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.732616901 CET	7733	44738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.752039909 CET	7733	44740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.752157927 CET	44740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.755911112 CET	44740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.763271093 CET	44742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.876188993 CET	7733	44740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.883068085 CET	7733	44742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:08.883176088 CET	44742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.886975050 CET	44742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:08.890984058 CET	44744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.006510019 CET	7733	44742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.010520935 CET	7733	44744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.010648012 CET	44744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.014230967 CET	44744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.019382000 CET	44746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.133891106 CET	7733	44744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.139019966 CET	7733	44746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.139100075 CET	44746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.142127037 CET	44746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.144711018 CET	44748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.261769056 CET	7733	44746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.264311075 CET	7733	44748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.264358044 CET	44748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.268121958 CET	44748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.273314953 CET	44750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.387687922 CET	7733	44748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.394017935 CET	7733	44750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.394072056 CET	44750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.430778027 CET	44750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.433470011 CET	44752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.550487995 CET	7733	44750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.553040028 CET	7733	44752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.553101063 CET	44752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.556433916 CET	44752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.561736107 CET	44754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.675971031 CET	7733	44752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.681313038 CET	7733	44754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.681391001 CET	44754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.684685946 CET	44754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.688114882 CET	44756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.800901890 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:09.804244995 CET	7733	44754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.807780981 CET	7733	44756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.807878017 CET	44756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.809170008 CET	44756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.811171055 CET	44760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.920623064 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:09.920783997 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:09.921967983 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:09.928689957 CET	7733	44756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.930705070 CET	7733	44760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:09.930810928 CET	44760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.932466030 CET	44760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:09.933804035 CET	44762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.041555882 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:10.042002916 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:10.052023888 CET	7733	44760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.053443909 CET	7733	44762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.054224968 CET	44762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.120861053 CET	44762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.124207020 CET	44764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.161602974 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:10.240452051 CET	7733	44762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.243740082 CET	7733	44764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.243892908 CET	44764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.245244026 CET	44764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.246402979 CET	44766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.364784956 CET	7733	44764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.365864992 CET	7733	44766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.365959883 CET	44766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.367381096 CET	44766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.369057894 CET	44768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.487124920 CET	7733	44766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.488898993 CET	7733	44768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.489084959 CET	44768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.490695953 CET	44768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.492178917 CET	44770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.610217094 CET	7733	44768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.611669064 CET	7733	44770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.611746073 CET	44770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.613481045 CET	44770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.615945101 CET	44772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.733040094 CET	7733	44770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.735466003 CET	7733	44772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.735547066 CET	44772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.736586094 CET	44772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.737658978 CET	44774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.856419086 CET	7733	44772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.857460976 CET	7733	44774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.857636929 CET	44774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.858700037 CET	44774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.860116005 CET	44776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.978188038 CET	7733	44774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.979621887 CET	7733	44776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:10.979732990 CET	44776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.980887890 CET	44776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:10.981631041 CET	44778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.100461960 CET	7733	44776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.101156950 CET	7733	44778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.101242065 CET	44778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.102453947 CET	44778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.104023933 CET	44780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.198513985 CET	33966	44250	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:11.198654890 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:11.198735952 CET	44250	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:11.222412109 CET	7733	44778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.224014997 CET	7733	44780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.224078894 CET	44780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.225064993 CET	44780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.225887060 CET	44782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.344698906 CET	7733	44780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.345690966 CET	7733	44782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.345772028 CET	44782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.346808910 CET	44782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.348375082 CET	44784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.466766119 CET	7733	44782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.468209982 CET	7733	44784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.468415976 CET	44784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.469402075 CET	44784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.470381975 CET	44786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.588985920 CET	7733	44784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.589905024 CET	7733	44786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.590070963 CET	44786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.591197014 CET	44786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.592844009 CET	44788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.711735964 CET	7733	44786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.712826967 CET	7733	44788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.712899923 CET	44788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.713927031 CET	44788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.714720964 CET	44790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.834701061 CET	7733	44788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.835907936 CET	7733	44790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.836101055 CET	44790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.837074041 CET	44790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.838615894 CET	44792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.956676960 CET	7733	44790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.958298922 CET	7733	44792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:11.958456039 CET	44792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.959445953 CET	44792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:11.960330009 CET	44794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.079006910 CET	7733	44792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.079864025 CET	7733	44794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.079941034 CET	44794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.080986977 CET	44794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.082391977 CET	44796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.200489044 CET	7733	44794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.201917887 CET	7733	44796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.201994896 CET	44796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.202872992 CET	44796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.203706026 CET	44798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.322376013 CET	7733	44796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.323194981 CET	7733	44798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.323244095 CET	44798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.324155092 CET	44798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.325573921 CET	44800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.438481092 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:12.443754911 CET	7733	44798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.445044041 CET	7733	44800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.445107937 CET	44800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.446326017 CET	44800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.447304964 CET	44804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.558279991 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:12.558377981 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:12.559350014 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:12.565835953 CET	7733	44800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.566905022 CET	7733	44804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.566951990 CET	44804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.567868948 CET	44804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.569298983 CET	44806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.678956985 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:12.679085016 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:12.687519073 CET	7733	44804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.688992023 CET	7733	44806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.689254999 CET	44806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.690121889 CET	44806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.691029072 CET	44808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.798727989 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:12.809752941 CET	7733	44806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.810554028 CET	7733	44808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.810631037 CET	44808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.811717033 CET	44808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.813147068 CET	44810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.931266069 CET	7733	44808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.932723045 CET	7733	44810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:12.932822943 CET	44810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.934010983 CET	44810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:12.935367107 CET	44812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.054348946 CET	7733	44810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.055422068 CET	7733	44812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.055514097 CET	44812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.056689024 CET	44812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.058134079 CET	44814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.181507111 CET	7733	44812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.181571960 CET	7733	44814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.181677103 CET	44814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.183106899 CET	44814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.184273958 CET	44816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.302716017 CET	7733	44814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.303818941 CET	7733	44816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.303913116 CET	44816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.305109024 CET	44816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.306652069 CET	44818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.424567938 CET	7733	44816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.426237106 CET	7733	44818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.426356077 CET	44818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.427596092 CET	44818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.428517103 CET	44820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.547092915 CET	7733	44818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.548147917 CET	7733	44820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.548238993 CET	44820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.549434900 CET	44820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.550929070 CET	44822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.668992043 CET	7733	44820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.670741081 CET	7733	44822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.670954943 CET	44822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.672105074 CET	44822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.673029900 CET	44824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.791635990 CET	7733	44822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.792535067 CET	7733	44824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.792790890 CET	44824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.793925047 CET	44824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.795847893 CET	44826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.912241936 CET	33966	44294	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:13.912410975 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:13.912468910 CET	44294	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:13.919512987 CET	7733	44824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.919523954 CET	7733	44826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:13.919733047 CET	44826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.920669079 CET	44826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:13.921510935 CET	44828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.040936947 CET	7733	44826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.102530956 CET	7733	44828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.102648020 CET	44828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.103652954 CET	44828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.105042934 CET	44830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.223143101 CET	7733	44828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.224602938 CET	7733	44830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.224690914 CET	44830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.225742102 CET	44830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.226573944 CET	44832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.345196009 CET	7733	44830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.346079111 CET	7733	44832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.346144915 CET	44832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.347243071 CET	44832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.348607063 CET	44834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.466790915 CET	7733	44832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.468168020 CET	7733	44834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.468262911 CET	44834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.469388962 CET	44834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.470252991 CET	44836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.589051962 CET	7733	44834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.589728117 CET	7733	44836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.589843988 CET	44836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.590840101 CET	44836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.592236996 CET	44838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.710280895 CET	7733	44836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.711692095 CET	7733	44838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.711750031 CET	44838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.712804079 CET	44838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.713632107 CET	44840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.832285881 CET	7733	44838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.833143950 CET	7733	44840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.833236933 CET	44840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.834254026 CET	44840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.835627079 CET	44842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.953839064 CET	7733	44840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.955069065 CET	7733	44842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:14.955142021 CET	44842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.956182957 CET	44842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:14.957052946 CET	44844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.076271057 CET	7733	44842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.076512098 CET	7733	44844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.076822042 CET	44844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.077876091 CET	44844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.079226017 CET	44846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.152291059 CET	44340	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:15.197310925 CET	7733	44844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.198899984 CET	7733	44846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.198971033 CET	44846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.199964046 CET	44846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.200802088 CET	44850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.271794081 CET	33966	44340	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:15.271882057 CET	44340	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:15.272866964 CET	44340	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:15.319694996 CET	7733	44846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.320487022 CET	7733	44850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.320588112 CET	44850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.321582079 CET	44850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.322861910 CET	44852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.392395020 CET	33966	44340	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:15.392512083 CET	44340	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:15.441097021 CET	7733	44850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.442385912 CET	7733	44852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.442459106 CET	44852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.443577051 CET	44852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.444550037 CET	44854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.512162924 CET	33966	44340	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:15.563575029 CET	7733	44852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.564158916 CET	7733	44854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.564250946 CET	44854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.565267086 CET	44854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.580410004 CET	44856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.684953928 CET	7733	44854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.699907064 CET	7733	44856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.700038910 CET	44856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.701109886 CET	44856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.701962948 CET	44858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.820874929 CET	7733	44856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.821635008 CET	7733	44858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.821700096 CET	44858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.823467970 CET	44858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.826505899 CET	44860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.945290089 CET	7733	44858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.948265076 CET	7733	44860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:15.948332071 CET	44860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.949191093 CET	44860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:15.949944019 CET	44862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.068715096 CET	7733	44860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.069550991 CET	7733	44862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.069720984 CET	44862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.070739031 CET	44862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.072690010 CET	44864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.190248013 CET	7733	44862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.192248106 CET	7733	44864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.192449093 CET	44864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.193666935 CET	44864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.194591045 CET	44866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.313158989 CET	7733	44864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.314765930 CET	7733	44866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.314961910 CET	44866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.315974951 CET	44866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.317348957 CET	44868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.435689926 CET	7733	44866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.437469959 CET	7733	44868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.437575102 CET	44868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.438512087 CET	44868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.439371109 CET	44870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.554574966 CET	33966	44340	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:16.554713964 CET	44340	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:16.554739952 CET	44340	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:16.557951927 CET	7733	44868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.558820963 CET	7733	44870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.558882952 CET	44870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.560553074 CET	44870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.562326908 CET	44872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.680510998 CET	7733	44870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.681811094 CET	7733	44872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.681863070 CET	44872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.682740927 CET	44872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.683578968 CET	44874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.802227974 CET	7733	44872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.803132057 CET	7733	44874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.803180933 CET	44874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.804826975 CET	44874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.806328058 CET	44876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.924391031 CET	7733	44874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.925865889 CET	7733	44876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:16.925961971 CET	44876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.927350998 CET	44876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:16.928771973 CET	44878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.046775103 CET	7733	44876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.048291922 CET	7733	44878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.048376083 CET	44878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.049504042 CET	44878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.051536083 CET	44880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.169178963 CET	7733	44878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.171015978 CET	7733	44880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.171097994 CET	44880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.172415018 CET	44880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.173330069 CET	44882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.291896105 CET	7733	44880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.292762995 CET	7733	44882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.292850971 CET	44882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.293829918 CET	44882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.295178890 CET	44884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.413314104 CET	7733	44882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.414654016 CET	7733	44884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.414715052 CET	44884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.415606022 CET	44884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.416387081 CET	44886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.535145044 CET	7733	44884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.535890102 CET	7733	44886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.535974026 CET	44886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.536974907 CET	44886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.538296938 CET	44888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.656490088 CET	7733	44886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.657988071 CET	7733	44888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.658051014 CET	44888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.659022093 CET	44888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.659816027 CET	44890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.778590918 CET	7733	44888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.779510021 CET	7733	44890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.779606104 CET	44890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.780555964 CET	44890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.781824112 CET	44892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.791949987 CET	44386	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:17.900060892 CET	7733	44890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.901324034 CET	7733	44892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:17.901392937 CET	44892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.902343988 CET	44892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.903296947 CET	44896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:17.911520958 CET	33966	44386	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:17.911580086 CET	44386	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:17.912528038 CET	44386	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:18.022959948 CET	7733	44892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.023292065 CET	7733	44896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.023396015 CET	44896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.024987936 CET	44896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.026432991 CET	44898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.032128096 CET	33966	44386	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:18.032186031 CET	44386	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:18.144593954 CET	7733	44896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.146033049 CET	7733	44898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.146119118 CET	44898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.147173882 CET	44898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.148080111 CET	44900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.151937008 CET	33966	44386	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:18.266824961 CET	7733	44898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.267934084 CET	7733	44900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.268033028 CET	44900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.269089937 CET	44900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.270649910 CET	44902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.388739109 CET	7733	44900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.390264988 CET	7733	44902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.390352011 CET	44902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.391439915 CET	44902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.392280102 CET	44904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.510952950 CET	7733	44902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.511739016 CET	7733	44904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.511837006 CET	44904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.513015985 CET	44904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.514410019 CET	44906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.632579088 CET	7733	44904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.633912086 CET	7733	44906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.634007931 CET	44906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.635104895 CET	44906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.636034966 CET	44908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.754642010 CET	7733	44906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.755623102 CET	7733	44908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.755727053 CET	44908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.756804943 CET	44908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.758258104 CET	44910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.876341105 CET	7733	44908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.877742052 CET	7733	44910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:18.877985001 CET	44910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.879050016 CET	44910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.879930973 CET	44912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:18.998764992 CET	7733	44910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.000073910 CET	7733	44912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.000230074 CET	44912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.001315117 CET	44912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.002429962 CET	44914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.121928930 CET	7733	44912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.124028921 CET	7733	44914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.124119043 CET	44914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.124958992 CET	44914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.125643969 CET	44916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.187557936 CET	33966	44386	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:19.187674046 CET	44386	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:19.187777042 CET	44386	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:19.244710922 CET	7733	44914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.245287895 CET	7733	44916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.245388031 CET	44916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.246222973 CET	44916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.247375011 CET	44918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.365858078 CET	7733	44916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.366960049 CET	7733	44918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.367126942 CET	44918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.367904902 CET	44918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.368561983 CET	44920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.487431049 CET	7733	44918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.488095045 CET	7733	44920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.488182068 CET	44920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.489027977 CET	44920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.490180016 CET	44922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.608598948 CET	7733	44920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.609926939 CET	7733	44922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.610013008 CET	44922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.610889912 CET	44922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.611613035 CET	44924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.730417013 CET	7733	44922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.731143951 CET	7733	44924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.731240034 CET	44924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.732105970 CET	44924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.733212948 CET	44926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.852329969 CET	7733	44924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.853440046 CET	7733	44926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.853550911 CET	44926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.854475975 CET	44926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.855263948 CET	44928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.974087954 CET	7733	44926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.974807978 CET	7733	44928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:19.974921942 CET	44928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.975838900 CET	44928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:19.977157116 CET	44930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.095426083 CET	7733	44928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.096971989 CET	7733	44930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.097073078 CET	44930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.098017931 CET	44930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.098802090 CET	44932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.217811108 CET	7733	44930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.218655109 CET	7733	44932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.218724966 CET	44932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.219711065 CET	44932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.221071959 CET	44934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.339394093 CET	7733	44932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.340852976 CET	7733	44934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.340934038 CET	44934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.342053890 CET	44934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.343105078 CET	44936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.426281929 CET	44430	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:20.461630106 CET	7733	44934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.462649107 CET	7733	44936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.462743044 CET	44936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.463785887 CET	44936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.465230942 CET	44940	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.545867920 CET	33966	44430	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:20.545989037 CET	44430	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:20.546984911 CET	44430	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:20.583954096 CET	7733	44936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.585074902 CET	7733	44940	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.585159063 CET	44940	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.586062908 CET	44940	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.586824894 CET	44942	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.666678905 CET	33966	44430	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:20.666773081 CET	44430	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:20.705663919 CET	7733	44940	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.706365108 CET	7733	44942	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.706449032 CET	44942	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.707576990 CET	44942	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.709054947 CET	44944	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.786396980 CET	33966	44430	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:20.827217102 CET	7733	44942	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.828676939 CET	7733	44944	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.828818083 CET	44944	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.829864025 CET	44944	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.830748081 CET	44946	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.949501038 CET	7733	44944	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.950408936 CET	7733	44946	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:20.950526953 CET	44946	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.952455997 CET	44946	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:20.953810930 CET	44948	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.072010994 CET	7733	44946	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.073323965 CET	7733	44948	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.073435068 CET	44948	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.074500084 CET	44948	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.075341940 CET	44950	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.194092989 CET	7733	44948	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.194793940 CET	7733	44950	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.194890022 CET	44950	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.196007967 CET	44950	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.197582006 CET	44952	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.315502882 CET	7733	44950	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.317154884 CET	7733	44952	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.317264080 CET	44952	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.318432093 CET	44952	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.319359064 CET	44954	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.438043118 CET	7733	44952	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.438911915 CET	7733	44954	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.438987017 CET	44954	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.440227032 CET	44954	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.441677094 CET	44956	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.559761047 CET	7733	44954	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.561202049 CET	7733	44956	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.561286926 CET	44956	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.562537909 CET	44956	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.563483000 CET	44958	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.682183027 CET	7733	44956	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.683047056 CET	7733	44958	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.683172941 CET	44958	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.684622049 CET	44958	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.686258078 CET	44960	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.804306984 CET	7733	44958	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.805830956 CET	7733	44960	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.805900097 CET	44960	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.806979895 CET	44960	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.807868004 CET	44962	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.926597118 CET	7733	44960	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.927444935 CET	7733	44962	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:21.927630901 CET	44962	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.928811073 CET	44962	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:21.930476904 CET	44964	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.048352957 CET	7733	44962	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.050013065 CET	7733	44964	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.050185919 CET	44964	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.051445961 CET	44964	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.052448034 CET	44966	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.171133041 CET	7733	44964	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.171983004 CET	7733	44966	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.172133923 CET	44966	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.173504114 CET	44966	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.175342083 CET	44968	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.292984962 CET	7733	44966	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.294868946 CET	7733	44968	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.294944048 CET	44968	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.296135902 CET	44968	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.297173023 CET	44970	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.415652990 CET	7733	44968	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.416867971 CET	7733	44970	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.416999102 CET	44970	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.418076992 CET	44970	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.419749975 CET	44972	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.537614107 CET	7733	44970	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.539386988 CET	7733	44972	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.539489985 CET	44972	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.540903091 CET	44972	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.542000055 CET	44974	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.660675049 CET	7733	44972	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.661628008 CET	7733	44974	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.661879063 CET	44974	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.663137913 CET	44974	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.664727926 CET	44976	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.783210993 CET	7733	44974	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.784795046 CET	7733	44976	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.784944057 CET	44976	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.786870956 CET	44976	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.788431883 CET	44978	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.906521082 CET	7733	44976	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.908008099 CET	7733	44978	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:22.908144951 CET	44978	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.909791946 CET	44978	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:22.911798954 CET	44980	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.029362917 CET	7733	44978	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.031438112 CET	7733	44980	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.031538010 CET	44980	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.032901049 CET	44980	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.034141064 CET	44982	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.152440071 CET	7733	44980	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.153739929 CET	7733	44982	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.153862000 CET	44982	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.155340910 CET	44982	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.157461882 CET	44984	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.274828911 CET	7733	44982	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.277086020 CET	7733	44984	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.277368069 CET	44984	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.279107094 CET	44984	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.280339003 CET	44986	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.398633957 CET	7733	44984	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.399907112 CET	7733	44986	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.400034904 CET	44986	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.401489019 CET	44986	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.416543007 CET	44988	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.521229982 CET	7733	44986	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.536179066 CET	7733	44988	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.536338091 CET	44988	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.538072109 CET	44988	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.539326906 CET	44990	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.657737017 CET	7733	44988	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.658920050 CET	7733	44990	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.659223080 CET	44990	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.660680056 CET	44990	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.661973000 CET	44992	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.780224085 CET	7733	44990	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.781507015 CET	7733	44992	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.781639099 CET	44992	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.783381939 CET	44992	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.784631968 CET	44994	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.903050900 CET	7733	44992	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.904148102 CET	7733	44994	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:23.904266119 CET	44994	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.905796051 CET	44994	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:23.907875061 CET	44996	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.025507927 CET	7733	44994	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.027504921 CET	7733	44996	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.027650118 CET	44996	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.029119015 CET	44996	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.030344009 CET	44998	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.148576975 CET	7733	44996	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.149797916 CET	7733	44998	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.149894953 CET	44998	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.151380062 CET	44998	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.153388977 CET	45000	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.271058083 CET	7733	44998	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.272924900 CET	7733	45000	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.273004055 CET	45000	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.273983002 CET	45000	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.274729967 CET	45002	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.393464088 CET	7733	45000	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.470233917 CET	7733	45002	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.470401049 CET	45002	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.471884966 CET	45002	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.473849058 CET	45004	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.591329098 CET	7733	45002	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.593460083 CET	7733	45004	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.593570948 CET	45004	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.595185041 CET	45004	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.596539974 CET	45006	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.714637995 CET	7733	45004	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.716048956 CET	7733	45006	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.716284037 CET	45006	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.717803955 CET	45006	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.719750881 CET	45008	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.837959051 CET	7733	45006	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.839332104 CET	7733	45008	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.839504957 CET	45008	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.840966940 CET	45008	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.842118979 CET	45010	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.960520029 CET	7733	45008	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.961644888 CET	7733	45010	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:24.961739063 CET	45010	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.963351965 CET	45010	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:24.965404987 CET	45012	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.082794905 CET	7733	45010	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.084939003 CET	7733	45012	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.085084915 CET	45012	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.086556911 CET	45012	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.087821007 CET	45014	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.206124067 CET	7733	45012	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.207554102 CET	7733	45014	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.207640886 CET	45014	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.209223032 CET	45014	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.211319923 CET	45016	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.328860044 CET	7733	45014	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.330861092 CET	7733	45016	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.330951929 CET	45016	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.332580090 CET	45016	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.333832026 CET	45018	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.452177048 CET	7733	45016	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.453522921 CET	7733	45018	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.453730106 CET	45018	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.455377102 CET	45018	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.457279921 CET	45020	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.574949980 CET	7733	45018	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.576894999 CET	7733	45020	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.576998949 CET	45020	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.578694105 CET	45020	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.580118895 CET	45022	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.698227882 CET	7733	45020	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.699637890 CET	7733	45022	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.699912071 CET	45022	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.701183081 CET	45022	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.702986956 CET	45024	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.820691109 CET	7733	45022	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.822633028 CET	7733	45024	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.822807074 CET	45024	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.824516058 CET	45024	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.825634003 CET	45026	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.944185019 CET	7733	45024	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.945189953 CET	7733	45026	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:25.945297956 CET	45026	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.946902037 CET	45026	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:25.949254990 CET	45028	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.066447020 CET	7733	45026	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.068793058 CET	7733	45028	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.068985939 CET	45028	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.070508003 CET	45028	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.071746111 CET	45030	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.190072060 CET	7733	45028	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.191683054 CET	7733	45030	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.191839933 CET	45030	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.192890882 CET	45030	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.194149017 CET	45032	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.312434912 CET	7733	45030	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.313714027 CET	7733	45032	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.313855886 CET	45032	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.315136909 CET	45032	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.316155910 CET	45034	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.434912920 CET	7733	45032	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.435905933 CET	7733	45034	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.436007023 CET	45034	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.437127113 CET	45034	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.438972950 CET	45036	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.556716919 CET	7733	45034	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.558511019 CET	7733	45036	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.558618069 CET	45036	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.560117006 CET	45036	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.561384916 CET	45038	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.679696083 CET	7733	45036	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.680967093 CET	7733	45038	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.681168079 CET	45038	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.682641983 CET	45038	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.684618950 CET	45040	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.719131947 CET	7733	44730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.720154047 CET	44730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.802251101 CET	7733	45038	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.804151058 CET	7733	45040	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.804307938 CET	45040	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.805996895 CET	45040	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.806962967 CET	45042	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.925489902 CET	7733	45040	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.926455975 CET	7733	45042	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:26.926641941 CET	45042	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.927756071 CET	45042	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:26.929172993 CET	45044	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.047275066 CET	7733	45042	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.048711061 CET	7733	45044	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.048883915 CET	45044	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.049917936 CET	45044	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.050822020 CET	45046	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.169640064 CET	7733	45044	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.170479059 CET	7733	45046	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.170591116 CET	45046	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.171654940 CET	45046	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.173202038 CET	45048	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.291274071 CET	7733	45046	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.292893887 CET	7733	45048	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.292958975 CET	45048	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.294887066 CET	45048	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.295631886 CET	45050	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.414453030 CET	7733	45048	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.415231943 CET	7733	45050	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.415370941 CET	45050	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.416943073 CET	45050	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.419456959 CET	45052	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.536463976 CET	7733	45050	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.539047956 CET	7733	45052	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.539210081 CET	45052	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.540824890 CET	45052	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.542068958 CET	45054	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.563162088 CET	7733	44732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.564080954 CET	44732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.660450935 CET	7733	45052	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.661719084 CET	7733	45054	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.661891937 CET	45054	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.663703918 CET	45054	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.665883064 CET	45056	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.783216000 CET	7733	45054	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.785427094 CET	7733	45056	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.785509109 CET	45056	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.786582947 CET	45056	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.787404060 CET	45058	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.906141043 CET	7733	45056	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.906887054 CET	7733	45058	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:27.907138109 CET	45058	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.908855915 CET	45058	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:27.911238909 CET	45060	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.028388977 CET	7733	45058	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.031039000 CET	7733	45060	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.031224012 CET	45060	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.032449007 CET	45060	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.033431053 CET	45062	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.152303934 CET	7733	45060	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.152993917 CET	7733	45062	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.153239012 CET	45062	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.155109882 CET	45062	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.157481909 CET	45064	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.274838924 CET	7733	45062	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.277260065 CET	7733	45064	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.277370930 CET	45064	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.279511929 CET	45064	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.281267881 CET	45066	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.399149895 CET	7733	45064	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.400852919 CET	7733	45066	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.401051998 CET	45066	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.402718067 CET	45066	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.404894114 CET	45068	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.522357941 CET	7733	45066	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.524493933 CET	7733	45068	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.524610043 CET	45068	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.526344061 CET	45068	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.527714968 CET	45070	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.645883083 CET	7733	45068	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.647243977 CET	7733	45070	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.647367954 CET	45070	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.649451971 CET	45070	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.652266979 CET	45072	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.768965960 CET	7733	45070	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.771867037 CET	7733	45072	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.771965027 CET	45072	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.774102926 CET	45072	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.775890112 CET	45074	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.894190073 CET	7733	45072	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.896255016 CET	7733	45074	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:28.896403074 CET	45074	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.898525000 CET	45074	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:28.900664091 CET	45076	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.018661976 CET	7733	45074	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.020744085 CET	7733	45076	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.020885944 CET	45076	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.022521019 CET	45076	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.023974895 CET	45078	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.142611027 CET	7733	45076	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.144009113 CET	7733	45078	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.144098043 CET	45078	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.145385981 CET	45078	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.147152901 CET	45080	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.265074015 CET	7733	45078	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.266741037 CET	7733	45080	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.266835928 CET	45080	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.268029928 CET	45080	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.268959045 CET	45082	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.387581110 CET	7733	45080	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.388510942 CET	7733	45082	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.388633966 CET	45082	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.389756918 CET	45082	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.391244888 CET	45084	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.509305954 CET	7733	45082	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.512047052 CET	7733	45084	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.512144089 CET	45084	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.513468027 CET	45084	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.514653921 CET	45086	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.633241892 CET	7733	45084	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.634330034 CET	7733	45086	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.634459972 CET	45086	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.635490894 CET	45086	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.637366056 CET	45088	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.755374908 CET	7733	45086	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.759071112 CET	7733	45088	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.759217024 CET	45088	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.760345936 CET	45088	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.761207104 CET	45090	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.880053043 CET	7733	45088	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.880906105 CET	7733	45090	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:29.881047010 CET	45090	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.882496119 CET	45090	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:29.884460926 CET	45092	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.002163887 CET	7733	45090	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.004131079 CET	7733	45092	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.004337072 CET	45092	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.005445004 CET	45092	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.006325006 CET	45094	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.124950886 CET	7733	45092	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.125991106 CET	7733	45094	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.126120090 CET	45094	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.127310038 CET	45094	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.128756046 CET	45096	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.246937037 CET	7733	45094	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.248362064 CET	7733	45096	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.248467922 CET	45096	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.249949932 CET	45096	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.251061916 CET	45098	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.360410929 CET	7733	44736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.364125013 CET	44736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.369534969 CET	7733	45096	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.370567083 CET	7733	45098	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.370702028 CET	45098	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.371861935 CET	45098	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.373454094 CET	45100	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.491360903 CET	7733	45098	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.493041039 CET	7733	45100	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.493182898 CET	45100	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.494241953 CET	45100	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.495126963 CET	45102	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.500612974 CET	7733	44738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.504106045 CET	44738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.613744974 CET	7733	45100	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.614671946 CET	7733	45102	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.614782095 CET	45102	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.615792990 CET	45102	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.617712021 CET	45104	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.656919956 CET	7733	44740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.660118103 CET	44740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.735249996 CET	7733	45102	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.737406969 CET	7733	45104	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.737576008 CET	45104	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.739111900 CET	45104	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.740616083 CET	45106	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.766450882 CET	7733	44742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.768140078 CET	44742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.858834982 CET	7733	45104	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.860214949 CET	7733	45106	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.860353947 CET	45106	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.862073898 CET	45106	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.864496946 CET	45108	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.907269955 CET	7733	44744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.908129930 CET	44744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.982676983 CET	7733	45106	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.984045029 CET	7733	45108	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:30.984250069 CET	45108	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.986237049 CET	45108	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:30.987585068 CET	45110	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.031864882 CET	7733	44746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.032111883 CET	44746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.105787039 CET	7733	45108	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.107276917 CET	7733	45110	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.107593060 CET	45110	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.109203100 CET	45110	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.112199068 CET	45112	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.172543049 CET	7733	44748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.176187992 CET	44748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.228750944 CET	7733	45110	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.231913090 CET	7733	45112	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.231986046 CET	45112	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.233444929 CET	45112	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.234848022 CET	45114	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.328588963 CET	7733	44750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.332125902 CET	44750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.353060961 CET	7733	45112	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.354506969 CET	7733	45114	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.354593039 CET	45114	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.355673075 CET	45114	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.357086897 CET	45116	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.438906908 CET	7733	44752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.440120935 CET	44752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.475238085 CET	7733	45114	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.476674080 CET	7733	45116	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.476819038 CET	45116	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.478224993 CET	45116	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.479161024 CET	45118	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.578597069 CET	7733	44754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.580128908 CET	44754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.597927094 CET	7733	45116	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.598803997 CET	7733	45118	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.598893881 CET	45118	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.599814892 CET	45118	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.600975990 CET	45120	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.703696012 CET	7733	44756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.704180956 CET	44756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.719388008 CET	7733	45118	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.720581055 CET	7733	45120	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.720685005 CET	45120	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.722336054 CET	45120	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.723721981 CET	45122	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.842014074 CET	7733	45120	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.843374968 CET	7733	45122	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.843509912 CET	45122	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.844274044 CET	7733	44760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.845165968 CET	45122	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.847282887 CET	45124	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.848118067 CET	44760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.953613043 CET	7733	44762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.956136942 CET	44762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.964735031 CET	7733	45122	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.966964006 CET	7733	45124	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:31.967065096 CET	45124	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.968105078 CET	45124	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:31.968875885 CET	45126	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.087717056 CET	7733	45124	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.088479042 CET	7733	45126	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.088588953 CET	45126	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.090338945 CET	45126	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.092734098 CET	45128	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.141366959 CET	7733	44764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.144143105 CET	44764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.209908962 CET	7733	45126	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.212438107 CET	7733	45128	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.212620974 CET	45128	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.214366913 CET	45128	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.215826988 CET	45130	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.281888008 CET	7733	44766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.284184933 CET	44766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.333950996 CET	7733	45128	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.335378885 CET	7733	45130	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.335500956 CET	45130	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.337219954 CET	45130	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.339462996 CET	45132	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.438019991 CET	7733	44768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.440134048 CET	44768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.456770897 CET	7733	45130	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.459002972 CET	7733	45132	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.459098101 CET	45132	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.460738897 CET	45132	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.462194920 CET	45134	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.547372103 CET	7733	44770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.548110008 CET	44770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.582298040 CET	7733	45132	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.583831072 CET	7733	45134	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.583956003 CET	45134	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.585350037 CET	45134	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.586985111 CET	45136	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.658731937 CET	7733	44772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.660183907 CET	44772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.707052946 CET	7733	45134	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.708581924 CET	7733	45136	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.708690882 CET	45136	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.710191011 CET	45136	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.711179972 CET	45138	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.797787905 CET	7733	44774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.800146103 CET	44774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.830449104 CET	7733	45136	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.831722975 CET	7733	45138	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.831819057 CET	45138	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.833427906 CET	45138	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.835462093 CET	45140	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.952924967 CET	7733	45138	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.953785896 CET	7733	44776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.954974890 CET	7733	45140	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:32.955149889 CET	45140	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.956127882 CET	44776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.956737041 CET	45140	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:32.958162069 CET	45142	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.016593933 CET	7733	44778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.020122051 CET	44778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.076493025 CET	7733	45140	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.077763081 CET	7733	45142	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.077979088 CET	45142	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.079823017 CET	45142	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.082231998 CET	45144	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.141846895 CET	7733	44780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.144141912 CET	44780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.199390888 CET	7733	45142	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.201900005 CET	7733	45144	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.202013969 CET	45144	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.203057051 CET	45144	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.203896046 CET	45146	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.266087055 CET	7733	44782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.268265963 CET	44782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.322669983 CET	7733	45144	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.325364113 CET	7733	45146	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.325483084 CET	45146	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.326953888 CET	45146	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.328535080 CET	45148	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.344816923 CET	7733	44784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.348150015 CET	44784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.446459055 CET	7733	45146	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.448092937 CET	7733	45148	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.448307037 CET	45148	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.449470997 CET	45148	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.450397015 CET	45150	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.500675917 CET	7733	44786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.504141092 CET	44786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.568938017 CET	7733	45148	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.569870949 CET	7733	45150	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.570030928 CET	45150	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.571176052 CET	45150	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.572915077 CET	45152	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.609847069 CET	7733	44788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.612128973 CET	44788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.690658092 CET	7733	45150	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.692543983 CET	7733	45152	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.692611933 CET	45152	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.693561077 CET	45152	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.694317102 CET	45154	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.734976053 CET	7733	44790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.736105919 CET	44790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.813175917 CET	7733	45152	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.813883066 CET	7733	45154	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.813977957 CET	45154	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.816102028 CET	45154	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.819154978 CET	45156	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.860066891 CET	7733	44792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.864147902 CET	44792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.935750961 CET	7733	45154	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.938776970 CET	7733	45156	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.938930988 CET	45156	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.940844059 CET	45156	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.941780090 CET	45158	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:33.969381094 CET	7733	44794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:33.972145081 CET	44794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.060394049 CET	7733	45156	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.061300039 CET	7733	45158	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.061476946 CET	45158	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.063728094 CET	45158	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.066571951 CET	45160	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.110253096 CET	7733	44796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.112163067 CET	44796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.183196068 CET	7733	45158	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.186093092 CET	7733	45160	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.186213017 CET	45160	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.187242031 CET	45160	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.188080072 CET	45162	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.219300032 CET	7733	44798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.220179081 CET	44798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.306740046 CET	7733	45160	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.307615995 CET	7733	45162	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.307852983 CET	45162	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.309503078 CET	45162	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.311238050 CET	45164	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.328679085 CET	7733	44800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.332123041 CET	44800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.429096937 CET	7733	45162	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.430789948 CET	7733	45164	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.430886984 CET	45164	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.432457924 CET	45164	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.433746099 CET	45166	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.469278097 CET	7733	44804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.472122908 CET	44804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.551945925 CET	7733	45164	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.553261042 CET	7733	45166	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.553391933 CET	45166	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.554824114 CET	45166	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.557140112 CET	45168	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.610203028 CET	7733	44806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.612168074 CET	44806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.674351931 CET	7733	45166	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.676644087 CET	7733	45168	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.676753998 CET	45168	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.678390026 CET	45168	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.679794073 CET	45170	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.735079050 CET	7733	44808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.736207008 CET	44808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.798057079 CET	7733	45168	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.799350023 CET	7733	45170	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.799496889 CET	45170	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.801055908 CET	45170	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.803034067 CET	45172	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.844405890 CET	7733	44810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.848135948 CET	44810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.921122074 CET	7733	45170	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.923110962 CET	7733	45172	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.923310041 CET	45172	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.924993992 CET	45172	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.926460028 CET	45174	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:34.954472065 CET	7733	44812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:34.956145048 CET	44812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.043106079 CET	7733	45172	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.044183016 CET	45172	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.044451952 CET	7733	45172	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.045917988 CET	7733	45174	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.046140909 CET	45174	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.047326088 CET	45174	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.048867941 CET	45176	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.079112053 CET	7733	44814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.080152035 CET	44814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.166611910 CET	7733	45172	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.167464018 CET	7733	45174	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.168140888 CET	45174	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.168339014 CET	7733	45174	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.170089006 CET	7733	45176	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.170160055 CET	45176	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.171920061 CET	45176	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.173306942 CET	45178	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.251127958 CET	7733	44816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.252162933 CET	44816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.287723064 CET	7733	45174	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.290364981 CET	7733	45176	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.291436911 CET	7733	45176	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.293001890 CET	7733	45178	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.293231010 CET	45178	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.294349909 CET	45178	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.295869112 CET	45180	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.395199060 CET	7733	44818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.396155119 CET	44818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.413055897 CET	7733	45178	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.413911104 CET	7733	45178	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.415401936 CET	7733	45180	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.415541887 CET	45180	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.416652918 CET	45180	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.417601109 CET	45182	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.469485998 CET	7733	44820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.472178936 CET	44820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.535425901 CET	7733	45180	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.536161900 CET	45180	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.536227942 CET	7733	45180	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.537101030 CET	7733	45182	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.537189960 CET	45182	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.538314104 CET	45182	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.539813042 CET	45184	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.594392061 CET	7733	44822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.596160889 CET	44822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.655989885 CET	7733	45180	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.657821894 CET	7733	45182	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.657852888 CET	7733	45182	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.659384012 CET	7733	45184	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.659511089 CET	45184	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.661166906 CET	45184	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.662595987 CET	45186	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.779367924 CET	7733	45184	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.780165911 CET	45184	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.781120062 CET	7733	45184	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.782061100 CET	7733	44824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.782111883 CET	7733	45186	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.782341003 CET	45186	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.783997059 CET	45186	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.784177065 CET	44824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.786251068 CET	45188	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.828830957 CET	7733	44826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.832145929 CET	44826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.899796963 CET	7733	45184	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.902591944 CET	7733	45186	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.903616905 CET	7733	45186	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.905920029 CET	7733	45188	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.906033039 CET	45188	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.907804966 CET	45188	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.908710957 CET	45190	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:35.984909058 CET	7733	44828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:35.988167048 CET	44828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.026065111 CET	7733	45188	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.027491093 CET	7733	45188	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.028389931 CET	7733	45190	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.028520107 CET	45190	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.030047894 CET	45190	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.032233000 CET	45192	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.126873016 CET	7733	44830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.128129959 CET	44830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.148602009 CET	7733	45190	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.149800062 CET	7733	45190	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.152261019 CET	7733	45192	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.152393103 CET	45192	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.158030987 CET	45192	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.159832001 CET	45194	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.235717058 CET	7733	44832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.236151934 CET	44832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.272420883 CET	7733	45192	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.276192904 CET	45192	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.277520895 CET	7733	45192	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.279504061 CET	7733	45194	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.279577971 CET	45194	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.281852007 CET	45194	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.285064936 CET	45196	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.360172987 CET	7733	44834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.364168882 CET	44834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.395740032 CET	7733	45192	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.399347067 CET	7733	45194	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.400130033 CET	45194	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.401444912 CET	7733	45194	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.404551983 CET	7733	45196	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.404639959 CET	45196	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.407273054 CET	45196	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.408966064 CET	45198	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.516258955 CET	7733	44836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.519607067 CET	7733	45194	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.520164013 CET	44836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.524375916 CET	7733	45196	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.526878119 CET	7733	45196	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.528460979 CET	7733	45198	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.528534889 CET	45198	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.530471087 CET	45198	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.534229040 CET	45200	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.610236883 CET	7733	44838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.612169027 CET	44838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.648349047 CET	7733	45198	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.650012016 CET	7733	45198	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.653681993 CET	7733	45200	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.653779984 CET	45200	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.655580044 CET	45200	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.657052994 CET	45202	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.734807968 CET	7733	44840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.736166954 CET	44840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.773736000 CET	7733	45200	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.775135040 CET	7733	45200	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.776608944 CET	7733	45202	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.776869059 CET	45202	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.779207945 CET	45202	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.782468081 CET	45204	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.860142946 CET	7733	44842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.864170074 CET	44842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.896748066 CET	7733	45202	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.898698092 CET	7733	45202	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.901967049 CET	7733	45204	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.902244091 CET	45204	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.905095100 CET	45204	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.907540083 CET	45206	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:36.954128027 CET	7733	44844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:36.956159115 CET	44844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.022067070 CET	7733	45204	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.024192095 CET	45204	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.024571896 CET	7733	45204	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.027044058 CET	7733	45206	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.027102947 CET	45206	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.029459000 CET	45206	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.031672955 CET	45208	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.078732014 CET	7733	44846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.080220938 CET	44846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.143702984 CET	7733	45204	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.146979094 CET	7733	45206	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.148170948 CET	45206	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.149133921 CET	7733	45206	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.151174068 CET	7733	45208	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.151240110 CET	45208	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.153306007 CET	45208	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.154699087 CET	45210	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.314663887 CET	7733	44850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.314752102 CET	7733	45206	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.314793110 CET	7733	45208	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.314798117 CET	7733	45208	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.314804077 CET	7733	45210	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.315109968 CET	45210	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.316147089 CET	44850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.317605972 CET	45210	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.320873022 CET	45212	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.435055971 CET	7733	44852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.436178923 CET	44852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.436534882 CET	7733	45210	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.438622952 CET	7733	45210	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.555085897 CET	7733	45212	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.555115938 CET	7733	44854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.555247068 CET	45212	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.556138992 CET	44854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.557993889 CET	45212	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.560343027 CET	45214	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.610157967 CET	7733	44856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.612169027 CET	44856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.675671101 CET	7733	45212	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.676173925 CET	45212	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.677530050 CET	7733	45212	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.679950953 CET	7733	45214	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.680145979 CET	45214	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.682781935 CET	45214	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.686280966 CET	45216	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.719798088 CET	7733	44858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.720196962 CET	44858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.795943022 CET	7733	45212	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.800091028 CET	7733	45214	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.802285910 CET	7733	45214	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.805763006 CET	7733	45216	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.805915117 CET	45216	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.808341980 CET	45216	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.809988976 CET	45218	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.876374960 CET	7733	44860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.880165100 CET	44860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.927814960 CET	7733	45216	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.929460049 CET	7733	45218	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.929611921 CET	45218	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.931911945 CET	45218	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.934497118 CET	45220	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:37.937663078 CET	7733	45216	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.971731901 CET	7733	44862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:37.972146034 CET	44862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.049232960 CET	7733	45218	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.051376104 CET	7733	45218	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.053977966 CET	7733	45220	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.054096937 CET	45220	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.055731058 CET	45220	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.056946039 CET	45222	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.094506979 CET	7733	44864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.096136093 CET	44864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.173851013 CET	7733	45220	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.175218105 CET	7733	45220	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.176399946 CET	7733	45222	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.176474094 CET	45222	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.178183079 CET	45222	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.180389881 CET	45224	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.235485077 CET	7733	44866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.236170053 CET	44866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.296372890 CET	7733	45222	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.298156977 CET	7733	45222	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.300147057 CET	7733	45224	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.300293922 CET	45224	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.302206039 CET	45224	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.303800106 CET	45226	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.328759909 CET	7733	44868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.332149029 CET	44868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.420077085 CET	7733	45224	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.421607018 CET	7733	45224	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.423202991 CET	7733	45226	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.423300028 CET	45226	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.425255060 CET	45226	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.428055048 CET	45228	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.532649994 CET	7733	44870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.536196947 CET	44870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.543013096 CET	7733	45226	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.544172049 CET	45226	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.544720888 CET	7733	45226	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.547821045 CET	7733	45228	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.547926903 CET	45228	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.550086021 CET	45228	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.551810026 CET	45230	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.641367912 CET	7733	44872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.644174099 CET	44872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.663737059 CET	7733	45226	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.667817116 CET	7733	45228	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.668164968 CET	45228	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.669835091 CET	7733	45228	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.671295881 CET	7733	45230	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.671364069 CET	45230	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.673333883 CET	45230	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.676053047 CET	45232	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.782423019 CET	7733	44874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.784153938 CET	44874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.787621021 CET	7733	45228	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.791115046 CET	7733	45230	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.792138100 CET	45230	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.792913914 CET	7733	45230	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.795567989 CET	7733	45232	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.795650959 CET	45232	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.796957970 CET	45232	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.797965050 CET	45234	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.908814907 CET	7733	44876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.912173033 CET	44876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.913604021 CET	7733	45230	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.915565968 CET	7733	45232	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.916162014 CET	45232	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.916470051 CET	7733	45232	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.917404890 CET	7733	45234	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.917478085 CET	45234	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.919334888 CET	45234	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.921361923 CET	45236	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:38.972381115 CET	7733	44878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:38.976255894 CET	44878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.035594940 CET	7733	45232	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.037166119 CET	7733	45234	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.038870096 CET	7733	45234	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.040879965 CET	7733	45236	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.040971041 CET	45236	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.042757988 CET	45236	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.044239044 CET	45238	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.157109976 CET	7733	44880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.160186052 CET	44880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.160708904 CET	7733	45236	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.162383080 CET	7733	45236	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.163800955 CET	7733	45238	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.163902044 CET	45238	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.165544033 CET	45238	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.167776108 CET	45240	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.235280037 CET	7733	44882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.236138105 CET	44882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.284128904 CET	7733	45238	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.285384893 CET	7733	45238	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.287827015 CET	7733	45240	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.287882090 CET	45240	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.293787956 CET	45240	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.294672012 CET	45242	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.360235929 CET	7733	44884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.364185095 CET	44884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.407710075 CET	7733	45240	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.408176899 CET	45240	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.413557053 CET	7733	45240	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.414194107 CET	7733	45242	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.414326906 CET	45242	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.415491104 CET	45242	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.432531118 CET	45244	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.438442945 CET	7733	44886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.440170050 CET	44886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.527908087 CET	7733	45240	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.534079075 CET	7733	45242	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.535012960 CET	7733	45242	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.552222013 CET	7733	45244	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.552321911 CET	45244	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.553747892 CET	45244	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.554991007 CET	45246	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.594518900 CET	7733	44888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.596395969 CET	44888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.673294067 CET	7733	45244	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.673958063 CET	7733	45244	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.674963951 CET	7733	45246	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.675088882 CET	45246	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.676657915 CET	45246	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.678837061 CET	45248	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.688222885 CET	7733	44890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.692147970 CET	44890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.794929981 CET	7733	45246	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.796184063 CET	45246	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.797494888 CET	7733	45246	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.799711943 CET	7733	45248	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.799892902 CET	45248	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.801060915 CET	45248	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.802057028 CET	45250	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.844588995 CET	7733	44892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.848157883 CET	44892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.916007042 CET	7733	45246	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.920073986 CET	7733	45248	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.920167923 CET	45248	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.920609951 CET	7733	45248	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.921634912 CET	7733	45250	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.921741009 CET	45250	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.922920942 CET	45250	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.924359083 CET	45252	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:39.957196951 CET	7733	44896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:39.960146904 CET	44896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.189779997 CET	7733	45248	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.189811945 CET	7733	45250	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.189841032 CET	7733	45250	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.189870119 CET	7733	45252	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.189929008 CET	7733	44898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.190016985 CET	7733	44900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.190118074 CET	45252	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.191834927 CET	45252	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.192161083 CET	44898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.192167044 CET	44900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.193001032 CET	45254	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.281955957 CET	7733	44902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.284168959 CET	44902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.321547985 CET	7733	45252	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.321609020 CET	7733	45254	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.321624994 CET	7733	45252	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.321717024 CET	45254	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.323349953 CET	45254	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.325632095 CET	45256	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.407188892 CET	7733	44904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.408163071 CET	44904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.442662954 CET	7733	45254	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.443140030 CET	7733	45254	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.445457935 CET	7733	45256	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.445535898 CET	45256	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.447099924 CET	45256	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.448575974 CET	45258	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.531989098 CET	7733	44906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.532301903 CET	44906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.565499067 CET	7733	45256	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.568180084 CET	45256	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.568325996 CET	7733	45256	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.568515062 CET	7733	45258	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.568712950 CET	45258	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.569809914 CET	45258	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.571280956 CET	45260	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.672786951 CET	7733	44908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.676160097 CET	44908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.688410044 CET	7733	45256	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.688890934 CET	7733	45258	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.689438105 CET	7733	45258	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.690892935 CET	7733	45260	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.690956116 CET	45260	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.692063093 CET	45260	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.692909956 CET	45262	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.811027050 CET	7733	45260	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.811533928 CET	7733	45260	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.813796997 CET	7733	45262	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.813944101 CET	45262	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.814863920 CET	45262	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.816330910 CET	45264	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.860802889 CET	7733	44910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.864253044 CET	44910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.907171965 CET	7733	44912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.908162117 CET	44912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.935492992 CET	7733	45262	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.936099052 CET	7733	45264	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:40.936208963 CET	45264	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.937315941 CET	45264	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.938210011 CET	45266	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:40.960757971 CET	7733	45262	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.047713041 CET	7733	44914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.048183918 CET	44914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.055870056 CET	7733	45264	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.056202888 CET	45264	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.056782961 CET	7733	45264	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.057718992 CET	7733	45266	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.057821989 CET	45266	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.059284925 CET	45266	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.061609983 CET	45268	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.176100016 CET	7733	45264	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.177798986 CET	7733	45266	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.178899050 CET	7733	45266	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.181113958 CET	7733	45268	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.181212902 CET	45268	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.182703018 CET	45268	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.184102058 CET	45270	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.219600916 CET	7733	44916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.220165014 CET	44916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.285346031 CET	7733	44918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.288167000 CET	44918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.301011086 CET	7733	45268	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.302220106 CET	7733	45268	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.303577900 CET	7733	45270	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.303643942 CET	45270	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.304636955 CET	45270	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.306054115 CET	45272	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.423372030 CET	7733	45270	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.424150944 CET	45270	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.424254894 CET	7733	45270	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.425503969 CET	7733	45272	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.425553083 CET	45272	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.426554918 CET	45272	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.427442074 CET	45274	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.438564062 CET	7733	44920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.440155029 CET	44920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.532092094 CET	7733	44922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.536254883 CET	44922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.546273947 CET	7733	45270	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.548667908 CET	7733	45272	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.548736095 CET	7733	45272	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.549629927 CET	7733	45274	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.549896955 CET	45274	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.551006079 CET	45274	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.552553892 CET	45276	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.641366005 CET	7733	44924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.644185066 CET	44924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.670505047 CET	7733	45274	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.670754910 CET	7733	45274	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.672194004 CET	7733	45276	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.672291994 CET	45276	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.673872948 CET	45276	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.675306082 CET	45278	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.782172918 CET	7733	44926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.784250975 CET	44926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.792161942 CET	7733	45276	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.793361902 CET	7733	45276	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.795253992 CET	7733	45278	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.795360088 CET	45278	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.797040939 CET	45278	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.799257994 CET	45280	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.907481909 CET	7733	44928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.908204079 CET	44928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.915096045 CET	7733	45278	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.916156054 CET	45278	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.916685104 CET	7733	45278	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.918711901 CET	7733	45280	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.918776035 CET	45280	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.920490980 CET	45280	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.921932936 CET	45282	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:41.985479116 CET	7733	44930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:41.988228083 CET	44930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.035748005 CET	7733	45278	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.038762093 CET	7733	45280	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.040009975 CET	7733	45280	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.041462898 CET	7733	45282	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.041560888 CET	45282	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.042685986 CET	45282	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.044517994 CET	45284	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.110308886 CET	7733	44932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.112188101 CET	44932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.162286043 CET	7733	45282	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.163104057 CET	7733	45282	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.164743900 CET	7733	45284	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.164858103 CET	45284	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.166707039 CET	45284	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.168199062 CET	45286	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.282186985 CET	7733	44934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.284177065 CET	44934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.284770012 CET	7733	45284	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.286693096 CET	7733	45284	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.288096905 CET	7733	45286	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.288203001 CET	45286	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.289375067 CET	45286	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.291230917 CET	45288	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.360179901 CET	7733	44936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.364187956 CET	44936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.407857895 CET	7733	45286	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.408179045 CET	45286	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.408822060 CET	7733	45286	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.410793066 CET	7733	45288	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.410881042 CET	45288	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.412400961 CET	45288	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.413670063 CET	45290	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.469682932 CET	7733	44940	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.472197056 CET	44940	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.527640104 CET	7733	45286	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.530606031 CET	7733	45288	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.531868935 CET	7733	45288	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.533150911 CET	7733	45290	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.533248901 CET	45290	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.534276962 CET	45290	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.536122084 CET	45292	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.653745890 CET	7733	45290	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.654206991 CET	7733	45290	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.656476021 CET	7733	45292	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.656582117 CET	45292	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.657999992 CET	45292	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.658813000 CET	7733	44942	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.659287930 CET	45294	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.660157919 CET	44942	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.735491037 CET	7733	44944	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.736290932 CET	44944	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.776823997 CET	7733	45292	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.777575970 CET	7733	45292	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.778812885 CET	7733	45294	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.778997898 CET	45294	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.780716896 CET	45294	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.782694101 CET	45296	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.860016108 CET	7733	44946	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.860181093 CET	44946	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.898897886 CET	7733	45294	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.900176048 CET	7733	45294	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.900253057 CET	45294	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.902199030 CET	7733	45296	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.902266026 CET	45296	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.903871059 CET	45296	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.905015945 CET	45298	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:42.969578981 CET	7733	44948	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:42.972199917 CET	44948	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.020935059 CET	7733	45294	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.022361994 CET	7733	45296	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.023474932 CET	7733	45296	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.024544954 CET	7733	45298	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.024651051 CET	45298	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.027143955 CET	45298	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.029725075 CET	45300	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.078764915 CET	7733	44950	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.080971003 CET	44950	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.145517111 CET	7733	45298	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.147134066 CET	7733	45298	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.149336100 CET	7733	45300	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.149542093 CET	45300	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.151213884 CET	45300	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.152573109 CET	45302	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.235100031 CET	7733	44952	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.236248970 CET	44952	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.269468069 CET	7733	45300	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.270837069 CET	7733	45300	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.272237062 CET	7733	45302	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.272347927 CET	45302	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.274571896 CET	45302	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.277044058 CET	45304	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.361377001 CET	7733	44954	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.364197016 CET	44954	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.392338991 CET	7733	45302	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.394179106 CET	7733	45302	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.396954060 CET	7733	45304	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.397140026 CET	45304	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.398969889 CET	45304	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.400523901 CET	45306	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.455050945 CET	7733	44956	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.456202984 CET	44956	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.517314911 CET	7733	45304	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.519083023 CET	7733	45304	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.520361900 CET	7733	45306	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.520520926 CET	45306	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.521970034 CET	45306	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.524075031 CET	45308	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.579862118 CET	7733	44958	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.580185890 CET	44958	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.641839027 CET	7733	45306	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.641968966 CET	7733	45306	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.644114017 CET	7733	45308	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.644241095 CET	45308	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.645883083 CET	45308	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.647067070 CET	45310	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.735225916 CET	7733	44960	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.736177921 CET	44960	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.764134884 CET	7733	45308	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.765423059 CET	7733	45308	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.766644001 CET	7733	45310	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.766755104 CET	45310	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.768635035 CET	45310	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.770570993 CET	45312	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.829292059 CET	7733	44962	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.832165003 CET	44962	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.890289068 CET	7733	45310	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.891654015 CET	7733	45310	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.893604994 CET	7733	45312	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.893717051 CET	45312	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.895641088 CET	45312	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.896948099 CET	45314	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:43.969364882 CET	7733	44964	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:43.972212076 CET	44964	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.015693903 CET	7733	45312	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.016175985 CET	45312	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.017251015 CET	7733	45312	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.018476963 CET	7733	45314	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.018564939 CET	45314	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.020165920 CET	45314	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.022357941 CET	45316	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.063415051 CET	7733	44966	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.064239979 CET	44966	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.135813951 CET	7733	45312	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.138555050 CET	7733	45314	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.140182018 CET	45314	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.140335083 CET	7733	45314	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.142930984 CET	7733	45316	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.143011093 CET	45316	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.144714117 CET	45316	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.146019936 CET	45318	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.188462973 CET	7733	44968	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.192176104 CET	44968	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.259751081 CET	7733	45314	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.262945890 CET	7733	45316	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.264138937 CET	7733	45316	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.264235020 CET	45316	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.265476942 CET	7733	45318	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.265578032 CET	45318	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.267095089 CET	45318	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.268908978 CET	45320	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.329648972 CET	7733	44970	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.332207918 CET	44970	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.383743048 CET	7733	45316	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.385488033 CET	7733	45318	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.386807919 CET	7733	45318	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.388891935 CET	7733	45320	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.388984919 CET	45320	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.390647888 CET	45320	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.392013073 CET	45322	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.422904968 CET	7733	44972	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.424171925 CET	44972	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.508955002 CET	7733	45320	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.510227919 CET	7733	45320	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.511547089 CET	7733	45322	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.511681080 CET	45322	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.513353109 CET	45322	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.515710115 CET	45324	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.563479900 CET	7733	44974	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.564265966 CET	44974	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.631851912 CET	7733	45322	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.632205009 CET	45322	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.632867098 CET	7733	45322	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.635380030 CET	7733	45324	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.635561943 CET	45324	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.637553930 CET	45324	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.639118910 CET	45326	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.688565016 CET	7733	44976	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.692202091 CET	44976	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.751895905 CET	7733	45322	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.756140947 CET	7733	45324	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.757033110 CET	7733	45324	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.758622885 CET	7733	45326	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.758826017 CET	45326	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.760699987 CET	45326	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.762833118 CET	45328	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.812738895 CET	7733	44978	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.816212893 CET	44978	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.878772974 CET	7733	45326	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.880167961 CET	7733	45326	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.880537987 CET	45326	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.882356882 CET	7733	45328	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.882416010 CET	45328	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.884125948 CET	45328	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.885526896 CET	45330	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:44.942797899 CET	7733	44980	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:44.944259882 CET	44980	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.000004053 CET	7733	45326	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.002476931 CET	7733	45328	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.003696918 CET	7733	45328	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.005127907 CET	7733	45330	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.005264044 CET	45330	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.007508993 CET	45330	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.010325909 CET	45332	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.032326937 CET	7733	44982	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.036227942 CET	44982	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.125049114 CET	7733	45330	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.126990080 CET	7733	45330	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.130045891 CET	7733	45332	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.130177975 CET	45332	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.131675959 CET	45332	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.132945061 CET	45334	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.204248905 CET	7733	44984	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.208225965 CET	44984	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.250020027 CET	7733	45332	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.251127005 CET	7733	45332	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.252409935 CET	7733	45334	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.252496004 CET	45334	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.254281044 CET	45334	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.257226944 CET	45336	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.297852993 CET	7733	44986	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.300226927 CET	44986	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.373720884 CET	7733	45334	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.375296116 CET	7733	45334	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.377823114 CET	7733	45336	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.377908945 CET	45336	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.378865957 CET	45336	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.379709959 CET	45338	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.423213005 CET	7733	44988	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.424184084 CET	44988	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.497726917 CET	7733	45336	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.498378038 CET	7733	45336	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.499109983 CET	7733	45338	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.499310017 CET	45338	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.501277924 CET	45338	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.503791094 CET	45340	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.563663960 CET	7733	44990	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.564292908 CET	44990	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.619009018 CET	7733	45338	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.620260954 CET	45338	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.620892048 CET	7733	45338	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.623296022 CET	7733	45340	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.623429060 CET	45340	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.625504971 CET	45340	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.627341986 CET	45342	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.672813892 CET	7733	44992	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.676265955 CET	44992	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.739873886 CET	7733	45338	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.743241072 CET	7733	45340	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.744206905 CET	45340	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.744946003 CET	7733	45340	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.746856928 CET	7733	45342	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.746926069 CET	45342	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.748330116 CET	45342	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.750725031 CET	45344	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.798023939 CET	7733	44994	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.800213099 CET	44994	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.863837004 CET	7733	45340	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.866715908 CET	7733	45342	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.867744923 CET	7733	45342	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.870280027 CET	7733	45344	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.870395899 CET	45344	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.872092009 CET	45344	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.873492002 CET	45346	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.922604084 CET	7733	44996	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.924217939 CET	44996	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.990168095 CET	7733	45344	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.991585970 CET	7733	45344	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.993009090 CET	7733	45346	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:45.993191004 CET	45346	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.994914055 CET	45346	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:45.997590065 CET	45348	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.033251047 CET	7733	44998	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.036226988 CET	44998	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.113029957 CET	7733	45346	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.114343882 CET	7733	45346	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.117050886 CET	7733	45348	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.117156029 CET	45348	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.118762016 CET	45348	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.119988918 CET	45350	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.157085896 CET	7733	45000	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.160207033 CET	45000	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.236927986 CET	7733	45348	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.238337040 CET	7733	45348	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.239890099 CET	7733	45350	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.239978075 CET	45350	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.241621971 CET	45350	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.243870020 CET	45352	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.360100985 CET	7733	45350	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.360271931 CET	45350	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.360429049 CET	7733	45002	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.361363888 CET	7733	45350	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.363389969 CET	7733	45352	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.363461018 CET	45352	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.364180088 CET	45002	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.364490986 CET	45352	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.365334034 CET	45354	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.479726076 CET	7733	45350	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.483150005 CET	7733	45352	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.483937979 CET	7733	45352	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.484725952 CET	7733	45354	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.484800100 CET	45354	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.485151052 CET	7733	45004	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.485654116 CET	45354	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.486854076 CET	45356	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.488177061 CET	45004	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.604734898 CET	7733	45354	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.605061054 CET	7733	45354	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.606298923 CET	7733	45356	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.606389999 CET	45356	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.608146906 CET	45356	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.609405994 CET	45358	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.626116037 CET	7733	45006	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.628177881 CET	45006	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.726236105 CET	7733	45356	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.727611065 CET	7733	45356	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.728954077 CET	7733	45358	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.729078054 CET	45358	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.730562925 CET	45358	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.732671022 CET	45360	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.735152006 CET	7733	45008	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.736181021 CET	45008	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.848959923 CET	7733	45358	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.850230932 CET	7733	45358	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.855479002 CET	7733	45360	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.855550051 CET	45360	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.857074022 CET	45360	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.857918024 CET	45362	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.875767946 CET	7733	45010	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.876203060 CET	45010	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.975327015 CET	7733	45360	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.976207018 CET	45360	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.976614952 CET	7733	45360	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.977353096 CET	7733	45362	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.977462053 CET	45362	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.979136944 CET	45362	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.981352091 CET	45364	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:46.985204935 CET	7733	45012	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:46.988192081 CET	45012	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.096314907 CET	7733	45360	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.097433090 CET	7733	45362	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.099282980 CET	7733	45362	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.102623940 CET	7733	45364	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.102725029 CET	45364	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.103625059 CET	45364	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.104402065 CET	45366	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.110308886 CET	7733	45014	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.112193108 CET	45014	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.223145962 CET	7733	45364	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.223280907 CET	7733	45364	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.224159956 CET	7733	45366	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.224414110 CET	45366	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.225971937 CET	45366	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.228143930 CET	45368	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.235902071 CET	7733	45016	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.236255884 CET	45016	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.345459938 CET	7733	45366	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.345784903 CET	7733	45366	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.347991943 CET	7733	45368	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.348099947 CET	45368	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.349199057 CET	45368	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.350148916 CET	45370	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.392277002 CET	7733	45018	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.396188021 CET	45018	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.468203068 CET	7733	45368	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.468822956 CET	7733	45368	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.469872952 CET	7733	45370	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.470017910 CET	45370	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.470321894 CET	7733	45020	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.471199036 CET	45370	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.472212076 CET	45020	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.472877026 CET	45372	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.590946913 CET	7733	45370	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.591391087 CET	7733	45370	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.592737913 CET	7733	45372	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.592910051 CET	45372	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.594003916 CET	45372	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.594846010 CET	7733	45022	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.594958067 CET	45374	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.596184969 CET	45022	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.712718964 CET	7733	45372	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.713452101 CET	7733	45372	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.714452028 CET	7733	45374	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.714589119 CET	45374	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.715699911 CET	45374	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.717190981 CET	45376	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.782048941 CET	7733	45024	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.784204006 CET	45024	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.834388971 CET	7733	45374	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.835241079 CET	7733	45374	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.836714029 CET	7733	45376	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.836788893 CET	45376	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.837838888 CET	45376	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.839236021 CET	45378	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.844649076 CET	7733	45026	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.848191977 CET	45026	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.956458092 CET	7733	45376	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.957246065 CET	7733	45376	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.958782911 CET	7733	45378	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.958892107 CET	45378	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.960481882 CET	45378	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.962831974 CET	45380	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:47.985202074 CET	7733	45028	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:47.988257885 CET	45028	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.078669071 CET	7733	45378	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.079977989 CET	7733	45378	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.082320929 CET	7733	45380	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.082539082 CET	45380	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.084234953 CET	45380	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.085577011 CET	45382	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.110398054 CET	7733	45030	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.112206936 CET	45030	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.202446938 CET	7733	45380	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.203901052 CET	7733	45380	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.205148935 CET	7733	45382	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.205262899 CET	45382	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.206293106 CET	45382	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.207895041 CET	45384	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.209100008 CET	7733	45032	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.212194920 CET	45032	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.325287104 CET	7733	45382	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.325809956 CET	7733	45382	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.327344894 CET	7733	45384	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.327445984 CET	45384	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.328972101 CET	7733	45034	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.329237938 CET	45384	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.330455065 CET	45386	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.332181931 CET	45034	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.447403908 CET	7733	45384	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.448271990 CET	45384	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.448738098 CET	7733	45384	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.449923992 CET	7733	45386	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.450018883 CET	45386	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.451246023 CET	45386	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.452843904 CET	45388	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.454153061 CET	7733	45036	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.456288099 CET	45036	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.563680887 CET	7733	45038	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.564301014 CET	45038	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.567747116 CET	7733	45384	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.570741892 CET	7733	45386	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.570997000 CET	7733	45386	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.572295904 CET	7733	45388	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.572361946 CET	45388	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.573379993 CET	45388	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.574299097 CET	45390	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.692187071 CET	7733	45388	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.692836046 CET	7733	45388	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.693728924 CET	7733	45390	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.693845987 CET	45390	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.695038080 CET	45390	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.696651936 CET	45392	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.719671965 CET	7733	45040	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.720213890 CET	45040	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.814269066 CET	7733	45390	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.816248894 CET	45390	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.816420078 CET	7733	45390	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.817814112 CET	7733	45392	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.817965031 CET	45392	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.819772005 CET	45392	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.820630074 CET	45394	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.829025984 CET	7733	45042	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.832204103 CET	45042	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.935787916 CET	7733	45390	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.938513041 CET	7733	45392	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.939554930 CET	7733	45392	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.940393925 CET	7733	45394	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.940506935 CET	45394	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.941348076 CET	45394	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.942392111 CET	45396	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:48.954045057 CET	7733	45044	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:48.956196070 CET	45044	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.060364008 CET	7733	45394	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.060956955 CET	7733	45394	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.062186956 CET	7733	45396	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.062372923 CET	45396	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.063173056 CET	45396	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.063837051 CET	45398	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.079479933 CET	7733	45046	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.080195904 CET	45046	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.182696104 CET	7733	45396	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.182878971 CET	7733	45396	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.183515072 CET	7733	45398	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.183851004 CET	45398	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.184663057 CET	45398	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.185806036 CET	45400	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.203929901 CET	7733	45048	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.204200983 CET	45048	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.303504944 CET	7733	45398	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.304215908 CET	7733	45398	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.304223061 CET	45398	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.305305004 CET	7733	45400	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.305377007 CET	45400	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.306483030 CET	45400	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.307324886 CET	45402	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.313658953 CET	7733	45050	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.316200018 CET	45050	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.423681021 CET	7733	45398	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.425121069 CET	7733	45400	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.426029921 CET	7733	45400	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.426785946 CET	7733	45402	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.426898956 CET	45402	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.427726984 CET	45402	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.428806067 CET	45404	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.714483976 CET	7733	45052	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.714698076 CET	7733	45054	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.714803934 CET	7733	45056	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.714828014 CET	7733	45050	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.714947939 CET	45050	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.715291023 CET	7733	45402	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.715604067 CET	7733	45404	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.715704918 CET	45404	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.716192961 CET	45056	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.716202021 CET	45054	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.716234922 CET	45052	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.716270924 CET	7733	45402	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.716702938 CET	45404	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.717458963 CET	45406	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.829035997 CET	7733	45058	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.832245111 CET	45058	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.833645105 CET	7733	45052	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.833704948 CET	45052	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.835302114 CET	7733	45404	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.836143970 CET	7733	45404	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.836210012 CET	45404	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.836900949 CET	7733	45406	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.836996078 CET	45406	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.838021040 CET	45406	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.839255095 CET	45408	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.939714909 CET	7733	45060	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.940260887 CET	45060	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.955651045 CET	7733	45404	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.956815004 CET	7733	45406	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.957423925 CET	7733	45406	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.958756924 CET	7733	45408	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:49.958822012 CET	45408	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.959826946 CET	45408	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:49.961463928 CET	45410	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.050266027 CET	7733	45062	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.052242041 CET	45062	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.078676939 CET	7733	45408	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.079253912 CET	7733	45408	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.080916882 CET	7733	45410	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.081049919 CET	45410	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.082551956 CET	45410	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.084716082 CET	45412	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.188786030 CET	7733	45064	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.192272902 CET	45064	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.201133013 CET	7733	45410	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.202033997 CET	7733	45410	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.204251051 CET	7733	45412	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.204370022 CET	45412	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.205768108 CET	45412	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.206649065 CET	45414	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.297898054 CET	7733	45066	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.300288916 CET	45066	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.324371099 CET	7733	45412	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.325473070 CET	7733	45412	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.326431990 CET	7733	45414	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.326515913 CET	45414	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.327617884 CET	45414	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.329087019 CET	45416	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.423193932 CET	7733	45068	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.424283981 CET	45068	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.446369886 CET	7733	45414	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.447067022 CET	7733	45414	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.448625088 CET	7733	45416	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.448779106 CET	45416	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.450400114 CET	45416	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.452862024 CET	45418	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.532305002 CET	7733	45070	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.536289930 CET	45070	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.568815947 CET	7733	45416	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.569899082 CET	7733	45416	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.572412014 CET	7733	45418	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.572496891 CET	45418	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.573611975 CET	45418	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.574991941 CET	45420	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.688391924 CET	7733	45072	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.692229033 CET	45072	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.693314075 CET	7733	45418	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.693954945 CET	7733	45418	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.695460081 CET	7733	45420	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.695561886 CET	45420	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.696531057 CET	45420	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.697449923 CET	45422	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.782363892 CET	7733	45074	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.784307003 CET	45074	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.815332890 CET	7733	45420	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.816009045 CET	7733	45420	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.816941977 CET	7733	45422	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.817070961 CET	45422	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.818099976 CET	45422	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.819449902 CET	45424	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.907583952 CET	7733	45076	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.908230066 CET	45076	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.937735081 CET	7733	45422	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.938797951 CET	7733	45422	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.939012051 CET	7733	45424	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:50.939065933 CET	45424	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.940001011 CET	45424	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:50.940741062 CET	45426	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.032519102 CET	7733	45078	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.036356926 CET	45078	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.059108973 CET	7733	45424	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.059449911 CET	7733	45424	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.060189009 CET	7733	45426	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.060269117 CET	45426	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.061764002 CET	45426	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.063971043 CET	45428	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.157269955 CET	7733	45080	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.160231113 CET	45080	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.180200100 CET	7733	45426	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.181190014 CET	7733	45426	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.183581114 CET	7733	45428	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.183721066 CET	45428	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.184994936 CET	45428	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.185910940 CET	45430	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.282474995 CET	7733	45082	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.284317970 CET	45082	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.304459095 CET	7733	45428	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.304686069 CET	7733	45428	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.305459023 CET	7733	45430	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.305552006 CET	45430	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.306791067 CET	45430	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.308247089 CET	45432	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.407614946 CET	7733	45084	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.408206940 CET	45084	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.425859928 CET	7733	45430	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.426870108 CET	7733	45430	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.427757025 CET	7733	45432	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.427829027 CET	45432	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.428713083 CET	45432	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.429492950 CET	45434	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.532181978 CET	7733	45086	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.536252975 CET	45086	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.547693968 CET	7733	45432	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.548203945 CET	7733	45432	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.548239946 CET	45432	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.549016953 CET	7733	45434	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.549168110 CET	45434	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.550360918 CET	45434	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.551646948 CET	45436	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.657598019 CET	7733	45088	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.660393953 CET	45088	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.667794943 CET	7733	45432	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.669347048 CET	7733	45434	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.670022964 CET	7733	45434	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.671272039 CET	7733	45436	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.671341896 CET	45436	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.672698975 CET	45436	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.673861980 CET	45438	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.791245937 CET	7733	45436	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.792171955 CET	7733	45436	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.792310953 CET	45436	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.793350935 CET	7733	45438	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.793601036 CET	45438	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.795137882 CET	45438	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.797153950 CET	45440	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.813940048 CET	7733	45090	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.816224098 CET	45090	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.911894083 CET	7733	45436	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.913413048 CET	7733	45438	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.914625883 CET	7733	45438	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.916752100 CET	7733	45440	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.916898012 CET	45440	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.917942047 CET	45440	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.918932915 CET	45442	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:51.985693932 CET	7733	45092	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:51.988281012 CET	45092	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.036701918 CET	7733	45440	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.037461042 CET	7733	45440	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.038453102 CET	7733	45442	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.038583040 CET	45442	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.040080070 CET	45442	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.041713953 CET	45444	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.079521894 CET	7733	45094	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.080252886 CET	45094	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.158814907 CET	7733	45442	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.160274982 CET	7733	45442	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.160314083 CET	45442	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.161535978 CET	7733	45444	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.161683083 CET	45444	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.163276911 CET	45444	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.164733887 CET	45446	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.190438032 CET	7733	45096	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.192231894 CET	45096	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.279903889 CET	7733	45442	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.281670094 CET	7733	45444	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.282906055 CET	7733	45444	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.284202099 CET	7733	45446	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.284378052 CET	45446	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.286007881 CET	45446	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.288229942 CET	45448	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.314016104 CET	7733	45098	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.316283941 CET	45098	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.404445887 CET	7733	45446	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.405797005 CET	7733	45446	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.407377005 CET	7733	45100	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.408204079 CET	7733	45448	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.408241987 CET	45100	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.408305883 CET	45448	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.409320116 CET	45448	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.410111904 CET	45450	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.528361082 CET	7733	45448	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.528841972 CET	7733	45448	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.529655933 CET	7733	45450	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.529757977 CET	45450	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.531738997 CET	45450	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.533334970 CET	45452	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.548350096 CET	7733	45102	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.552309036 CET	45102	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.641856909 CET	7733	45104	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.644252062 CET	45104	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.650269985 CET	7733	45450	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.651262999 CET	7733	45450	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.653052092 CET	7733	45452	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.653120041 CET	45452	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.654171944 CET	45452	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.655052900 CET	45454	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.773025990 CET	7733	45452	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.773650885 CET	7733	45452	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.774647951 CET	7733	45454	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.775010109 CET	45454	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.776170015 CET	45454	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.777487040 CET	45456	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.813641071 CET	7733	45106	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.816287041 CET	45106	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.891716003 CET	7733	45108	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.892235041 CET	45108	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.895308018 CET	7733	45454	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.896301031 CET	45454	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.896347046 CET	7733	45454	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.897731066 CET	7733	45456	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:52.897823095 CET	45456	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.899025917 CET	45456	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:52.899961948 CET	45458	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.016808033 CET	7733	45454	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.017890930 CET	7733	45456	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.019984961 CET	7733	45456	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.020037889 CET	7733	45458	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.020344019 CET	45458	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.021270990 CET	45458	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.022547007 CET	45460	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.032685995 CET	7733	45110	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.036616087 CET	45110	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.140204906 CET	7733	45458	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.141360044 CET	7733	45458	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.142060041 CET	7733	45460	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.142347097 CET	45460	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.143253088 CET	45460	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.144012928 CET	45462	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.189337969 CET	7733	45112	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.192301989 CET	45112	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.251169920 CET	7733	45114	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.252298117 CET	45114	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.257920027 CET	33966	44430	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:53.258083105 CET	44430	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:53.262192011 CET	7733	45460	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.262666941 CET	7733	45460	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.263444901 CET	7733	45462	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.263494015 CET	45462	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.264127016 CET	45462	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.265067101 CET	45464	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.377628088 CET	33966	44430	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:53.383752108 CET	7733	45462	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.383833885 CET	7733	45462	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.384654999 CET	7733	45464	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.384812117 CET	45464	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.387135983 CET	45464	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.389034986 CET	45466	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.407525063 CET	7733	45116	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.408236027 CET	45116	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.485543966 CET	7733	45118	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.488373995 CET	45118	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.505707979 CET	7733	45464	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.507020950 CET	7733	45464	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.508476019 CET	7733	45466	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.508634090 CET	45466	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.510766983 CET	45466	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.513819933 CET	45468	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.610369921 CET	7733	45120	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.612303019 CET	45120	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.628650904 CET	7733	45466	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.630697966 CET	7733	45466	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.633320093 CET	7733	45468	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.633573055 CET	45468	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.634994984 CET	45468	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.635792971 CET	45470	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.751262903 CET	7733	45122	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.752269030 CET	45122	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.753546953 CET	7733	45468	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.754409075 CET	7733	45468	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.755271912 CET	7733	45470	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.755346060 CET	45470	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.756309986 CET	45470	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.757700920 CET	45472	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.860620022 CET	7733	45124	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.864274979 CET	45124	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.875785112 CET	7733	45470	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.876156092 CET	7733	45470	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.877414942 CET	7733	45472	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.877504110 CET	45472	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.879275084 CET	45472	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.880619049 CET	45474	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.969806910 CET	7733	45126	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.972244024 CET	45126	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:53.997235060 CET	7733	45472	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:53.998797894 CET	7733	45472	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.000073910 CET	7733	45474	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.000369072 CET	45474	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.002482891 CET	45474	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.005373001 CET	45476	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.110821962 CET	7733	45128	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.112271070 CET	45128	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.120270967 CET	7733	45474	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.122231007 CET	7733	45474	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.124842882 CET	7733	45476	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.124955893 CET	45476	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.126859903 CET	45476	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.128582001 CET	45478	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.235295057 CET	7733	45130	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.236380100 CET	45130	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.245064020 CET	7733	45476	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.246551037 CET	7733	45476	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.248044014 CET	7733	45478	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.248136997 CET	45478	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.249772072 CET	45478	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.252070904 CET	45480	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.361639023 CET	7733	45132	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.364250898 CET	45132	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.369564056 CET	7733	45478	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.369721889 CET	7733	45478	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.372395039 CET	7733	45480	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.372481108 CET	45480	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.374226093 CET	45480	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.375648975 CET	45482	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.485618114 CET	7733	45134	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.488331079 CET	45134	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.492250919 CET	7733	45480	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.493761063 CET	7733	45480	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.495105028 CET	7733	45482	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.495217085 CET	45482	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.497327089 CET	45482	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.500164986 CET	45484	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.615024090 CET	7733	45482	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.616244078 CET	45482	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.617031097 CET	7733	45482	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.619695902 CET	7733	45484	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.619801044 CET	45484	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.621810913 CET	45484	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.623549938 CET	45486	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.626600981 CET	7733	45136	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.628268003 CET	45136	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.735546112 CET	7733	45138	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.735682011 CET	7733	45482	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.736296892 CET	45138	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.739757061 CET	7733	45484	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.740283966 CET	45484	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.741600037 CET	7733	45484	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.743303061 CET	7733	45486	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.743391037 CET	45486	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.745408058 CET	45486	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.748333931 CET	45488	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.859827042 CET	7733	45484	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.860876083 CET	7733	45140	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.863094091 CET	7733	45486	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.864245892 CET	45140	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.864245892 CET	45486	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.864970922 CET	7733	45486	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.868052959 CET	7733	45488	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.868170977 CET	45488	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.869743109 CET	45488	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.871210098 CET	45490	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.969782114 CET	7733	45142	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.972261906 CET	45142	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.983772039 CET	7733	45486	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.987976074 CET	7733	45488	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.988265038 CET	45488	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.989234924 CET	7733	45488	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.990700960 CET	7733	45490	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:54.990823030 CET	45490	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.992460966 CET	45490	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:54.994801044 CET	45492	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.108406067 CET	7733	45488	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.111062050 CET	7733	45490	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.111982107 CET	7733	45490	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.114284039 CET	7733	45492	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.114382029 CET	45492	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.116185904 CET	45492	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.117964983 CET	45494	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.126200914 CET	7733	45144	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.128228903 CET	45144	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.234298944 CET	7733	45492	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.235595942 CET	7733	45146	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.235814095 CET	7733	45492	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.236321926 CET	45146	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.237472057 CET	7733	45494	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.237571955 CET	45494	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.239208937 CET	45494	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.241511106 CET	45496	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.345376968 CET	7733	45148	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.348301888 CET	45148	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.358217955 CET	7733	45494	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.359662056 CET	7733	45494	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.361824036 CET	7733	45496	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.361937046 CET	45496	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.363595009 CET	45496	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.365103960 CET	45498	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.469741106 CET	7733	45150	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.472246885 CET	45150	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.482594013 CET	7733	45496	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.483549118 CET	7733	45496	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.484709978 CET	7733	45498	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.484771967 CET	45498	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.486013889 CET	45498	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.488003016 CET	45500	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.504756927 CET	44994	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:55.596313000 CET	7733	45152	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.600229025 CET	45152	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.604499102 CET	7733	45498	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.605921984 CET	7733	45498	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.607466936 CET	7733	45500	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.607510090 CET	45500	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.610564947 CET	45504	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.610770941 CET	45500	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.624327898 CET	33966	44994	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:55.624382019 CET	44994	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:55.624942064 CET	44994	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:55.727318048 CET	7733	45500	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.728245020 CET	45500	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.730050087 CET	7733	45504	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.730150938 CET	45504	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.730171919 CET	7733	45500	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.733664989 CET	45504	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.735656977 CET	7733	45154	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.736233950 CET	45154	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.738780022 CET	45506	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.745222092 CET	33966	44994	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:55.745268106 CET	44994	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:55.845098019 CET	7733	45156	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.847858906 CET	7733	45500	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.848248005 CET	45156	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.850373983 CET	7733	45504	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.852232933 CET	45504	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.853243113 CET	7733	45504	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.858679056 CET	7733	45506	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.858727932 CET	45506	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.860671997 CET	45506	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.862744093 CET	45508	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.864969015 CET	33966	44994	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:55.978784084 CET	7733	45158	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.978811979 CET	7733	45504	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.980237007 CET	45158	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:55.980715990 CET	7733	45506	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:55.984236002 CET	45506	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.026802063 CET	7733	45506	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.026823044 CET	7733	45508	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.026878119 CET	45508	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.029143095 CET	45508	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.032954931 CET	45510	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.146744967 CET	7733	45506	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.146840096 CET	7733	45160	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.148231030 CET	45160	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.218255997 CET	7733	45508	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.218271971 CET	7733	45508	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.218286991 CET	7733	45510	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.218368053 CET	45510	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.219993114 CET	7733	45162	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.220236063 CET	45162	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.220598936 CET	45510	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.222804070 CET	45512	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.338341951 CET	7733	45510	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.340050936 CET	7733	45510	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.342430115 CET	7733	45512	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.342495918 CET	45512	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.344723940 CET	7733	45164	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.345124006 CET	45512	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.348247051 CET	45164	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.348826885 CET	45514	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.462403059 CET	7733	45512	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.464303970 CET	45512	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.464749098 CET	7733	45512	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.468420029 CET	7733	45514	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.468480110 CET	45514	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.470072985 CET	7733	45166	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.471867085 CET	45514	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.472256899 CET	45166	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.474817991 CET	45516	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.584249973 CET	7733	45512	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.588476896 CET	7733	45514	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.591340065 CET	7733	45514	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.594687939 CET	7733	45516	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.594779015 CET	45516	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.595608950 CET	7733	45168	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.596244097 CET	45168	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.597013950 CET	45516	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.601087093 CET	45518	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.688502073 CET	7733	45170	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.692229986 CET	45170	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.715689898 CET	7733	45516	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.716234922 CET	45516	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.717148066 CET	7733	45516	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.720742941 CET	7733	45518	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.720793009 CET	45518	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.723464966 CET	45518	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.726743937 CET	45520	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.835793018 CET	7733	45516	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.840897083 CET	7733	45518	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.842896938 CET	7733	45518	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.846270084 CET	7733	45520	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.846364021 CET	45520	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.849993944 CET	45520	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.856297016 CET	45522	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.898705006 CET	33966	44994	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:56.898777962 CET	44994	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:56.898859978 CET	44994	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:56.966312885 CET	7733	45520	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.968254089 CET	45520	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.970483065 CET	7733	45520	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.975817919 CET	7733	45522	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:56.975888968 CET	45522	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.980164051 CET	45522	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:56.982876062 CET	45524	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.087897062 CET	7733	45520	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.096055984 CET	7733	45522	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.096276999 CET	45522	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.101185083 CET	7733	45522	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.102380037 CET	7733	45524	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.102473974 CET	45524	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.105547905 CET	45524	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.110603094 CET	45526	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.215831041 CET	7733	45522	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.222183943 CET	7733	45524	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.224272013 CET	45524	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.225023031 CET	7733	45524	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.230799913 CET	7733	45526	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.230861902 CET	45526	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.233813047 CET	45526	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.238078117 CET	45528	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.343934059 CET	7733	45524	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.350497961 CET	7733	45526	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.352243900 CET	45526	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.353282928 CET	7733	45526	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.357593060 CET	7733	45528	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.357671022 CET	45528	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.361975908 CET	45528	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.367255926 CET	45530	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.471780062 CET	7733	45526	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.477576971 CET	7733	45528	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.480263948 CET	45528	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.481463909 CET	7733	45528	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.486927032 CET	7733	45530	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.487016916 CET	45530	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.490441084 CET	45530	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.493828058 CET	45532	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.599803925 CET	7733	45528	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.608114958 CET	7733	45530	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.608273983 CET	45530	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.610095978 CET	7733	45530	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.613246918 CET	7733	45532	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.613431931 CET	45532	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.616900921 CET	45532	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.622889042 CET	45534	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.728025913 CET	7733	45530	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.733180046 CET	7733	45532	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.736232042 CET	45532	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.736423016 CET	7733	45532	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.742386103 CET	7733	45534	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.748203993 CET	45534	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.851039886 CET	45534	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.854548931 CET	45536	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.855685949 CET	7733	45532	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.868206978 CET	7733	45534	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.872246981 CET	45534	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.970599890 CET	7733	45534	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.974035025 CET	7733	45536	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:57.974104881 CET	45536	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.976450920 CET	45536	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.980925083 CET	45538	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:57.991925955 CET	7733	45534	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.094927073 CET	7733	45536	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.096111059 CET	7733	45536	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.100739002 CET	7733	45538	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.100910902 CET	45538	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.113236904 CET	45538	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.116070032 CET	45540	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.220899105 CET	7733	45538	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.224241018 CET	45538	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.233268976 CET	7733	45538	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.235560894 CET	7733	45540	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.235613108 CET	45540	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.270387888 CET	45034	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:58.285458088 CET	45540	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.291999102 CET	45544	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.343764067 CET	7733	45538	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.355489016 CET	7733	45540	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.356250048 CET	45540	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.390091896 CET	33966	45034	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:58.390145063 CET	45034	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:58.392584085 CET	45034	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:58.405061007 CET	7733	45540	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.411465883 CET	7733	45544	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.411520958 CET	45544	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.416374922 CET	45544	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.419780970 CET	45546	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.475743055 CET	7733	45540	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.512613058 CET	33966	45034	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:58.512655973 CET	45034	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:58.531236887 CET	7733	45544	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.532243013 CET	45544	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.535797119 CET	7733	45544	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.539232969 CET	7733	45546	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.539302111 CET	45546	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.541915894 CET	45546	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.548079967 CET	45548	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.632499933 CET	33966	45034	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:58.651885033 CET	7733	45544	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.659094095 CET	7733	45546	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.660279989 CET	45546	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.661344051 CET	7733	45546	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.667610884 CET	7733	45548	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.667751074 CET	45548	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.669106007 CET	45548	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.670300961 CET	45550	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.779923916 CET	7733	45546	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.787476063 CET	7733	45548	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.788254023 CET	45548	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.788656950 CET	7733	45548	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.789752007 CET	7733	45550	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.789832115 CET	45550	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.791053057 CET	45550	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.792872906 CET	45552	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.907732010 CET	7733	45548	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.909548044 CET	7733	45550	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.910487890 CET	7733	45550	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.912306070 CET	7733	45552	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:58.912441969 CET	45552	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.914189100 CET	45552	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:58.915616989 CET	45554	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.032196999 CET	7733	45552	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.033699989 CET	7733	45552	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.035067081 CET	7733	45554	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.035300970 CET	45554	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.036744118 CET	45554	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.038866043 CET	45556	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.155168056 CET	7733	45554	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.156279087 CET	45554	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.156426907 CET	7733	45554	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.158430099 CET	7733	45556	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.158655882 CET	45556	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.160094976 CET	45556	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.161205053 CET	45558	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.275937080 CET	7733	45554	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.279141903 CET	7733	45556	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.279668093 CET	7733	45556	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.280983925 CET	7733	45558	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.281105042 CET	45558	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.282809019 CET	45558	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.285393000 CET	45560	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.401043892 CET	7733	45558	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.402362108 CET	7733	45558	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.404886961 CET	7733	45560	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.404948950 CET	45560	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.406236887 CET	45560	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.407661915 CET	45562	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.525060892 CET	7733	45560	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.525682926 CET	7733	45560	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.527107000 CET	7733	45562	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.527297020 CET	45562	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.528845072 CET	45562	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.531217098 CET	45564	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.647574902 CET	7733	45562	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.648283958 CET	45562	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.648310900 CET	7733	45562	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.651690960 CET	7733	45564	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.651778936 CET	45564	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.653059006 CET	45564	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.654165030 CET	45566	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.655307055 CET	33966	45034	178.215.238.25	192.168.2.13
Dec 19, 2024 22:22:59.655340910 CET	45034	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:59.655379057 CET	45034	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:22:59.767977953 CET	7733	45562	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.771871090 CET	7733	45564	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.772267103 CET	45564	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.772897005 CET	7733	45564	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.773622036 CET	7733	45566	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.773715973 CET	45566	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.774750948 CET	45566	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.776099920 CET	45568	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.892090082 CET	7733	45564	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.893433094 CET	7733	45566	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.894572020 CET	7733	45566	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.895864010 CET	7733	45568	89.190.156.145	192.168.2.13
Dec 19, 2024 22:22:59.895956993 CET	45568	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.897150993 CET	45568	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:22:59.897980928 CET	45570	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.015757084 CET	7733	45568	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.016278982 CET	45568	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.016609907 CET	7733	45568	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.017471075 CET	7733	45570	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.017538071 CET	45570	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.018547058 CET	45570	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.019975901 CET	45572	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.136235952 CET	7733	45568	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.137553930 CET	7733	45570	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.138031960 CET	7733	45570	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.140090942 CET	7733	45572	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.140188932 CET	45572	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.141376972 CET	45572	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.142174006 CET	45574	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.260377884 CET	7733	45572	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.260760069 CET	7733	45572	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.261795998 CET	7733	45574	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.261945963 CET	45574	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.263022900 CET	45574	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.264550924 CET	45576	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.381793976 CET	7733	45574	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.382591009 CET	7733	45574	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.384128094 CET	7733	45576	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.384241104 CET	45576	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.385299921 CET	45576	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.386015892 CET	45578	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.504327059 CET	7733	45576	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.504996061 CET	7733	45576	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.505831957 CET	7733	45578	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.506063938 CET	45578	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.507034063 CET	45578	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.508860111 CET	45580	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.626009941 CET	7733	45578	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.626631975 CET	7733	45578	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.628357887 CET	7733	45580	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.628485918 CET	45580	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.630177975 CET	45580	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.631119013 CET	45582	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.750093937 CET	7733	45580	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.752257109 CET	7733	45580	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.752274036 CET	7733	45582	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.752342939 CET	45580	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.752527952 CET	45582	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.753304005 CET	45582	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.755045891 CET	45584	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.872133017 CET	7733	45580	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.872834921 CET	7733	45582	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.872867107 CET	7733	45582	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.874819040 CET	7733	45584	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.874897957 CET	45584	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.876116991 CET	45584	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.876935005 CET	45586	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.894107103 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:23:00.994785070 CET	7733	45584	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.995647907 CET	7733	45584	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.996555090 CET	7733	45586	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:00.996654034 CET	45586	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.997767925 CET	45586	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:00.999368906 CET	45590	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.013756990 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:23:01.013822079 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:23:01.017795086 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:23:01.116738081 CET	7733	45586	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.117280960 CET	7733	45586	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.118908882 CET	7733	45590	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.119007111 CET	45590	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.122967958 CET	45590	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.124174118 CET	45592	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.138292074 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:23:01.138340950 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:23:01.238873959 CET	7733	45590	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.240295887 CET	45590	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.242810965 CET	7733	45590	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.243756056 CET	7733	45592	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.243807077 CET	45592	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.245834112 CET	45592	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.250910044 CET	45594	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.258011103 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:23:01.359889030 CET	7733	45590	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.363699913 CET	7733	45592	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.364268064 CET	45592	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.365552902 CET	7733	45592	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.370568991 CET	7733	45594	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.370629072 CET	45594	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.374221087 CET	45594	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.377655029 CET	45596	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.483905077 CET	7733	45592	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.490549088 CET	7733	45594	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.492255926 CET	45594	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.493891001 CET	7733	45594	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.497395039 CET	7733	45596	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.497448921 CET	45596	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.500691891 CET	45596	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.506222010 CET	45598	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.611855030 CET	7733	45594	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.618266106 CET	7733	45596	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.620207071 CET	7733	45596	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.625790119 CET	7733	45598	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.626254082 CET	45598	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.634268999 CET	45598	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.640147924 CET	45600	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.746347904 CET	7733	45598	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.748270988 CET	45598	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.753889084 CET	7733	45598	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.759746075 CET	7733	45600	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.759835958 CET	45600	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.762754917 CET	45600	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.768801928 CET	45602	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.867984056 CET	7733	45598	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.879616976 CET	7733	45600	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.880306005 CET	45600	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.882338047 CET	7733	45600	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.888447046 CET	7733	45602	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:01.888674021 CET	45602	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.893363953 CET	45602	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.902224064 CET	45604	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:01.999804020 CET	7733	45600	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.008652925 CET	7733	45602	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.012329102 CET	45602	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.012989044 CET	7733	45602	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.021939993 CET	7733	45604	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.022008896 CET	45604	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.027528048 CET	45604	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.037134886 CET	45606	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.131985903 CET	7733	45602	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.141891003 CET	7733	45604	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.147186995 CET	7733	45604	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.156661987 CET	7733	45606	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.156769991 CET	45606	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.188286066 CET	45606	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.203593969 CET	45608	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.276633024 CET	7733	45606	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.280286074 CET	45606	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.307904959 CET	7733	45606	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.323191881 CET	7733	45608	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.323242903 CET	45608	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.328121901 CET	45608	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.337476015 CET	45610	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.399775028 CET	7733	45606	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.442950964 CET	7733	45608	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.447770119 CET	7733	45608	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.456964016 CET	7733	45610	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.457027912 CET	45610	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.466976881 CET	45610	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.478327036 CET	45612	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.576980114 CET	7733	45610	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.580256939 CET	45610	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.586483955 CET	7733	45610	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.598170996 CET	7733	45612	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.598229885 CET	45612	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.601603031 CET	45612	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.607249975 CET	45614	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.699981928 CET	7733	45610	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.718230009 CET	7733	45612	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.720273018 CET	45612	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.721622944 CET	7733	45612	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.726851940 CET	7733	45614	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.726895094 CET	45614	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.730608940 CET	45614	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.738754988 CET	45616	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.839864016 CET	7733	45612	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.846688032 CET	7733	45614	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.848268986 CET	45614	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.850086927 CET	7733	45614	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.858313084 CET	7733	45616	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.858385086 CET	45616	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.861656904 CET	45616	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.867774010 CET	45618	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.967777014 CET	7733	45614	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.978296041 CET	7733	45616	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.980266094 CET	45616	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.981153965 CET	7733	45616	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.987201929 CET	7733	45618	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:02.987296104 CET	45618	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:02.992805958 CET	45618	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.004245043 CET	45620	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.100065947 CET	7733	45616	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.107116938 CET	7733	45618	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.112309933 CET	45618	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.112332106 CET	7733	45618	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.123841047 CET	7733	45620	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.123895884 CET	45620	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.129647017 CET	45620	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.136358023 CET	45622	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.231858015 CET	7733	45618	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.244103909 CET	7733	45620	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.244272947 CET	45620	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.249116898 CET	7733	45620	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.255981922 CET	7733	45622	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.256043911 CET	45622	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.264343023 CET	45622	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.280210018 CET	45624	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.365035057 CET	7733	45620	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.384458065 CET	7733	45622	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.385514021 CET	7733	45622	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.400444984 CET	7733	45624	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.400549889 CET	45624	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.405028105 CET	45624	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.412132978 CET	45626	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.520512104 CET	7733	45624	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.524290085 CET	45624	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.524552107 CET	7733	45624	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.531783104 CET	7733	45626	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.531869888 CET	45626	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.535335064 CET	45626	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.542479992 CET	45628	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.646378040 CET	7733	45624	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.653779030 CET	7733	45626	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.656272888 CET	45626	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.656886101 CET	7733	45626	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.663717031 CET	7733	45628	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.663763046 CET	45628	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.669446945 CET	45628	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.676346064 CET	45630	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.775851965 CET	7733	45626	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.783543110 CET	7733	45628	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.784272909 CET	45628	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.789164066 CET	7733	45628	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.796058893 CET	7733	45630	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.796132088 CET	45630	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.799510002 CET	45630	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.810550928 CET	45632	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.903997898 CET	7733	45628	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.916337013 CET	7733	45630	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.919117928 CET	7733	45630	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.930252075 CET	7733	45632	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:03.930330038 CET	45632	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.932713032 CET	45632	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:03.935164928 CET	45634	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.050545931 CET	7733	45632	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.052345991 CET	45632	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.052390099 CET	7733	45632	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.054981947 CET	7733	45634	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.055078030 CET	45634	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.060740948 CET	45634	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.068792105 CET	45636	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.172019958 CET	7733	45632	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.175110102 CET	7733	45634	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.176270008 CET	45634	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.180660009 CET	7733	45634	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.188496113 CET	7733	45636	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.188600063 CET	45636	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.191090107 CET	45636	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.202330112 CET	45638	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.295836926 CET	7733	45634	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.308768988 CET	7733	45636	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.310858011 CET	7733	45636	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.322022915 CET	7733	45638	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.322132111 CET	45638	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.324949980 CET	45638	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.330342054 CET	45640	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.442032099 CET	7733	45638	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.444298029 CET	45638	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.444438934 CET	7733	45638	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.450220108 CET	7733	45640	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.450278997 CET	45640	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.454698086 CET	45640	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.461903095 CET	45642	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.563863039 CET	7733	45638	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.570137978 CET	7733	45640	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.572278023 CET	45640	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.574409008 CET	7733	45640	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.581939936 CET	7733	45642	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.582015991 CET	45642	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.586918116 CET	45642	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.592293024 CET	45644	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.691823006 CET	7733	45640	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.702229977 CET	7733	45642	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.704286098 CET	45642	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.706448078 CET	7733	45642	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.711791992 CET	7733	45644	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.711859941 CET	45644	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.714720011 CET	45644	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.717518091 CET	45646	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.823952913 CET	7733	45642	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.831779003 CET	7733	45644	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.832278967 CET	45644	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.834208965 CET	7733	45644	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.837030888 CET	7733	45646	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.837095976 CET	45646	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.846481085 CET	45646	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.858926058 CET	45648	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.952564001 CET	7733	45644	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.956938028 CET	7733	45646	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.960285902 CET	45646	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.965950966 CET	7733	45646	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.978914022 CET	7733	45648	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:04.978982925 CET	45648	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.987273932 CET	45648	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:04.996031046 CET	45650	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.081360102 CET	7733	45646	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.099209070 CET	7733	45648	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.100308895 CET	45648	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.106833935 CET	7733	45648	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.115551949 CET	7733	45650	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.115617037 CET	45650	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.125313044 CET	45650	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.137085915 CET	45652	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.219939947 CET	7733	45648	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.236769915 CET	7733	45650	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.240294933 CET	45650	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.245330095 CET	7733	45650	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.256623030 CET	7733	45652	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.256699085 CET	45652	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.263310909 CET	45652	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.274993896 CET	45654	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.360217094 CET	7733	45650	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.376704931 CET	7733	45652	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.380322933 CET	45652	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.382867098 CET	7733	45652	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.394809008 CET	7733	45654	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.394891024 CET	45654	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.398408890 CET	45654	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.402913094 CET	45656	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.500202894 CET	7733	45652	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.514695883 CET	7733	45654	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.517929077 CET	7733	45654	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.522589922 CET	7733	45656	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.522648096 CET	45656	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.525624037 CET	45656	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.531372070 CET	45658	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.642812014 CET	7733	45656	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.644292116 CET	45656	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.645504951 CET	7733	45656	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.651175022 CET	7733	45658	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.651243925 CET	45658	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.656183958 CET	45658	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.667299032 CET	45660	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.764179945 CET	7733	45656	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.771395922 CET	7733	45658	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.772291899 CET	45658	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.776890993 CET	7733	45658	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.788898945 CET	7733	45660	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.789005041 CET	45660	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.794270039 CET	45660	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.800051928 CET	45662	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.891940117 CET	7733	45658	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.909509897 CET	7733	45660	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.912292957 CET	45660	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.913923025 CET	7733	45660	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.920578003 CET	7733	45662	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:05.920661926 CET	45662	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.925244093 CET	45662	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:05.934564114 CET	45664	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.031825066 CET	7733	45660	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.040692091 CET	7733	45662	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.044312000 CET	45662	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.044770002 CET	7733	45662	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.054390907 CET	7733	45664	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.054459095 CET	45664	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.057290077 CET	45664	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.060223103 CET	45666	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.164151907 CET	7733	45662	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.175146103 CET	7733	45664	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.178050041 CET	7733	45664	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.180423021 CET	7733	45666	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.180475950 CET	45666	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.186223030 CET	45666	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.198395967 CET	45668	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.304915905 CET	7733	45666	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.305872917 CET	7733	45666	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.319438934 CET	7733	45668	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.319523096 CET	45668	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.323108912 CET	45668	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.329490900 CET	45670	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.440715075 CET	7733	45668	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.445322037 CET	7733	45668	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.449194908 CET	7733	45670	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.449279070 CET	45670	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.451906919 CET	45670	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.469851971 CET	45674	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.569184065 CET	7733	45670	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.571422100 CET	7733	45670	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.589555025 CET	7733	45674	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.589653015 CET	45674	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.596249104 CET	45674	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.602284908 CET	45676	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.710191011 CET	7733	45674	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.712388039 CET	45674	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.716331959 CET	7733	45674	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.722027063 CET	7733	45676	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.722089052 CET	45676	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.729187965 CET	45676	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.738181114 CET	45678	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.832393885 CET	7733	45674	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.843108892 CET	7733	45676	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.844293118 CET	45676	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.848751068 CET	7733	45676	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.858143091 CET	7733	45678	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.858201981 CET	45678	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.862543106 CET	45678	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.870153904 CET	45680	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.963732004 CET	7733	45676	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.983112097 CET	7733	45678	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.986663103 CET	7733	45678	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.990027905 CET	7733	45680	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:06.990089893 CET	45680	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.993666887 CET	45680	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:06.998769045 CET	45682	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.110136986 CET	7733	45680	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.112283945 CET	45680	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.113457918 CET	7733	45680	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.118294954 CET	7733	45682	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.118382931 CET	45682	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.120790005 CET	45682	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.125560045 CET	45684	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.231950045 CET	7733	45680	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.238240957 CET	7733	45682	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.240191936 CET	7733	45682	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.246154070 CET	7733	45684	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.246215105 CET	45684	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.248862982 CET	45684	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.253365993 CET	45686	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.366683960 CET	7733	45684	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.368371010 CET	45684	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.369198084 CET	7733	45684	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.373194933 CET	7733	45686	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.373423100 CET	45686	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.376585960 CET	45686	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.379678011 CET	45688	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.488871098 CET	7733	45684	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.494548082 CET	7733	45686	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.496347904 CET	45686	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.497189999 CET	7733	45686	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.499340057 CET	7733	45688	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.499403000 CET	45688	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.502244949 CET	45688	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.507328987 CET	45690	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.617006063 CET	7733	45686	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.619241953 CET	7733	45688	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.620296001 CET	45688	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.621695042 CET	7733	45688	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.626871109 CET	7733	45690	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.626952887 CET	45690	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.630156040 CET	45690	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.633956909 CET	45692	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.740849972 CET	7733	45688	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.746856928 CET	7733	45690	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.748301029 CET	45690	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.750006914 CET	7733	45690	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.754194021 CET	7733	45692	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.754288912 CET	45692	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.758027077 CET	45692	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.764489889 CET	45694	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.867871046 CET	7733	45690	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.874310017 CET	7733	45692	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.876301050 CET	45692	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.877515078 CET	7733	45692	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.884058952 CET	7733	45694	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:07.884149075 CET	45694	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.887340069 CET	45694	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.892939091 CET	45696	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:07.995939970 CET	7733	45692	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.004131079 CET	7733	45694	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.004292965 CET	45694	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.007141113 CET	7733	45694	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.012593031 CET	7733	45696	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.012649059 CET	45696	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.015975952 CET	45696	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.022311926 CET	45698	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.123986959 CET	7733	45694	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.132565022 CET	7733	45696	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.136298895 CET	45696	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.136784077 CET	7733	45696	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.142215967 CET	7733	45698	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.142297029 CET	45698	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.144948006 CET	45698	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.150331020 CET	45700	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.255831957 CET	7733	45696	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.262027025 CET	7733	45698	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.264393091 CET	45698	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.264561892 CET	7733	45698	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.269903898 CET	7733	45700	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.269964933 CET	45700	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.280654907 CET	45700	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.286526918 CET	45702	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.383972883 CET	7733	45698	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.389887094 CET	7733	45700	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.392297029 CET	45700	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.400110006 CET	7733	45700	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.406078100 CET	7733	45702	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.406147003 CET	45702	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.433702946 CET	45702	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.445461988 CET	45704	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.512238026 CET	7733	45700	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.525964975 CET	7733	45702	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.528300047 CET	45702	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.553137064 CET	7733	45702	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.564992905 CET	7733	45704	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.565098047 CET	45704	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.567198038 CET	45704	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.569422960 CET	45706	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.648617983 CET	7733	45702	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.684876919 CET	7733	45704	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.686747074 CET	7733	45704	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.689047098 CET	7733	45706	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.689203978 CET	45706	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.690414906 CET	45706	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.692711115 CET	45708	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.816874027 CET	7733	45706	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.816881895 CET	7733	45706	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.816888094 CET	7733	45708	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:08.817117929 CET	45708	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.818413019 CET	45708	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:08.819493055 CET	45710	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.056745052 CET	7733	45708	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.056756973 CET	7733	45710	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.056766987 CET	7733	45708	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.056864023 CET	45710	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.058257103 CET	45710	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.060106993 CET	45712	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.177208900 CET	7733	45710	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.178240061 CET	7733	45710	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.180339098 CET	7733	45712	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.180433035 CET	45712	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.181895018 CET	45712	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.183716059 CET	45714	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.300084114 CET	7733	45712	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.300384045 CET	45712	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.301409006 CET	7733	45712	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.303289890 CET	7733	45714	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.303371906 CET	45714	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.304739952 CET	45714	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.306621075 CET	45716	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.419914007 CET	7733	45712	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.423008919 CET	7733	45714	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.424243927 CET	7733	45714	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.426105022 CET	7733	45716	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.426188946 CET	45716	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.427522898 CET	45716	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.429548979 CET	45718	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.545938015 CET	7733	45716	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.547086000 CET	7733	45716	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.549010038 CET	7733	45718	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.549168110 CET	45718	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.550693035 CET	45718	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.552628040 CET	45720	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.669054031 CET	7733	45718	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.670321941 CET	7733	45718	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.672214031 CET	7733	45720	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.672277927 CET	45720	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.674009085 CET	45720	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.676588058 CET	45722	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.792103052 CET	7733	45720	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.792397976 CET	45720	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.793471098 CET	7733	45720	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.796067953 CET	7733	45722	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.796180010 CET	45722	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.797389984 CET	45722	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.799859047 CET	45724	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.911854982 CET	7733	45720	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.915901899 CET	7733	45722	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.916315079 CET	45722	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.916856050 CET	7733	45722	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.919451952 CET	7733	45724	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:09.919512033 CET	45724	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.920730114 CET	45724	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:09.922554970 CET	45726	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.036279917 CET	7733	45722	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.039349079 CET	7733	45724	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.040334940 CET	45724	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.040488958 CET	7733	45724	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.042023897 CET	7733	45726	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.042068005 CET	45726	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.043498039 CET	45726	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.045214891 CET	45728	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.159766912 CET	7733	45724	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.161983013 CET	7733	45726	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.163095951 CET	7733	45726	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.164758921 CET	7733	45728	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.164871931 CET	45728	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.166191101 CET	45728	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.167962074 CET	45730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.285070896 CET	7733	45728	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.285865068 CET	7733	45728	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.287502050 CET	7733	45730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.287621975 CET	45730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.288750887 CET	45730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.290406942 CET	45732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.407982111 CET	7733	45730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.408246040 CET	7733	45730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.409822941 CET	7733	45732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.409934044 CET	45732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.411081076 CET	45732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.412740946 CET	45734	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.530536890 CET	7733	45732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.530648947 CET	7733	45732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.532437086 CET	7733	45734	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.532531977 CET	45734	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.533735991 CET	45734	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.535397053 CET	45736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.652678013 CET	7733	45734	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.653356075 CET	7733	45734	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.654917002 CET	7733	45736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.654984951 CET	45736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.656248093 CET	45736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.657226086 CET	45738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.774966002 CET	7733	45736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.776065111 CET	7733	45736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.776683092 CET	7733	45738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.776886940 CET	45738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.778090954 CET	45738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.779738903 CET	45740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.897603035 CET	7733	45738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.897885084 CET	7733	45738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.899230003 CET	7733	45740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:10.899336100 CET	45740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.900577068 CET	45740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:10.902254105 CET	45742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.020071030 CET	7733	45740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.021893978 CET	7733	45742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.022007942 CET	45742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.022947073 CET	45742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.024291039 CET	45744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.029755116 CET	7733	45740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.142549038 CET	7733	45742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.142812967 CET	7733	45742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.143778086 CET	7733	45744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.143861055 CET	45744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.145060062 CET	45744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.146298885 CET	45746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.263664961 CET	7733	45744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.264336109 CET	45744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.264496088 CET	7733	45744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.265758991 CET	7733	45746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.265841007 CET	45746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.266743898 CET	45746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.267981052 CET	45748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.383796930 CET	7733	45744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.386106014 CET	7733	45746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.386234999 CET	7733	45746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.387577057 CET	7733	45748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.387640953 CET	45748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.388472080 CET	45748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.389256001 CET	45750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.508038998 CET	7733	45748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.508832932 CET	7733	45750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.508924961 CET	45750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.509774923 CET	45750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.511039972 CET	45752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.517493963 CET	7733	45748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.628766060 CET	7733	45750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.629523993 CET	7733	45750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.630717039 CET	7733	45752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.630789995 CET	45752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.631680012 CET	45752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.633147955 CET	45754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.750540018 CET	7733	45752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.751137018 CET	7733	45752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.752563953 CET	7733	45754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.752702951 CET	45754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.753680944 CET	45754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.755038023 CET	45756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.872463942 CET	7733	45754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.873106003 CET	7733	45754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.874551058 CET	7733	45756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.874629021 CET	45756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.875580072 CET	45756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.876970053 CET	45758	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.995387077 CET	7733	45756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.995553970 CET	7733	45756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.996640921 CET	7733	45758	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:11.996759892 CET	45758	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.997669935 CET	45758	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:11.998927116 CET	45760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.116698027 CET	7733	45758	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.117211103 CET	7733	45758	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.118495941 CET	7733	45760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.118674040 CET	45760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.119452000 CET	45760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.120182991 CET	45762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.238765955 CET	7733	45760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.238898039 CET	7733	45760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.240115881 CET	7733	45762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.240250111 CET	45762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.241051912 CET	45762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.252609015 CET	45764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.360064030 CET	7733	45762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.360344887 CET	45762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.360672951 CET	7733	45762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.372220993 CET	7733	45764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.372293949 CET	45764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.373145103 CET	45764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.374406099 CET	45766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.480026960 CET	7733	45762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.491942883 CET	7733	45764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.492362022 CET	45764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.492575884 CET	7733	45764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.493865013 CET	7733	45766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.493931055 CET	45766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.494764090 CET	45766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.496022940 CET	45768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.612037897 CET	7733	45764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.613698006 CET	7733	45766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.614419937 CET	7733	45766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.615509033 CET	7733	45768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.615595102 CET	45768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.616473913 CET	45768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.617224932 CET	45770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.736027002 CET	7733	45768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.736093998 CET	7733	45768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.736651897 CET	7733	45770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.736754894 CET	45770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.737576008 CET	45770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.738862038 CET	45772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.857091904 CET	7733	45770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.857182026 CET	7733	45770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.858449936 CET	7733	45772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.858546019 CET	45772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.859374046 CET	45772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.860600948 CET	45774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.978617907 CET	7733	45772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.979001999 CET	7733	45772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.980108976 CET	7733	45774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:12.980232954 CET	45774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.981098890 CET	45774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:12.982337952 CET	45776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.100208998 CET	7733	45774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.100323915 CET	45774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.100662947 CET	7733	45774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.101906061 CET	7733	45776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.101948023 CET	45776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.102793932 CET	45776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.104043961 CET	45778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.219860077 CET	7733	45774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.221699953 CET	7733	45776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.222577095 CET	7733	45776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.223567963 CET	7733	45778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.223697901 CET	45778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.224517107 CET	45778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.225764990 CET	45780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.344124079 CET	7733	45778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.344297886 CET	7733	45778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.344335079 CET	45778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.345443010 CET	7733	45780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.345545053 CET	45780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.346474886 CET	45780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.347757101 CET	45782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.464137077 CET	7733	45778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.465334892 CET	7733	45780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.466011047 CET	7733	45780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.467235088 CET	7733	45782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.467329979 CET	45782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.468218088 CET	45782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.469463110 CET	45784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.588860989 CET	7733	45782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.589745045 CET	7733	45782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.590843916 CET	7733	45784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.590928078 CET	45784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.591792107 CET	45784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.592524052 CET	45786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.710608959 CET	7733	45784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.711327076 CET	7733	45784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.711991072 CET	7733	45786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.712047100 CET	45786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.712872982 CET	45786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.714147091 CET	45788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.831692934 CET	7733	45786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.832333088 CET	45786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.832365036 CET	7733	45786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.833653927 CET	7733	45788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.834501028 CET	45788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.834501028 CET	45788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.835602999 CET	45790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.951776981 CET	7733	45786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.953999996 CET	7733	45788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.954216957 CET	7733	45788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.955051899 CET	7733	45790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:13.955135107 CET	45790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.956020117 CET	45790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:13.956758976 CET	45792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.074934006 CET	7733	45790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.075453043 CET	7733	45790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.076370955 CET	7733	45792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.076450109 CET	45792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.077410936 CET	45792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.078689098 CET	45794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.196269035 CET	7733	45792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.196841002 CET	7733	45792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.198139906 CET	7733	45794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.198272943 CET	45794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.199192047 CET	45794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.199975967 CET	45796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.318006039 CET	7733	45794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.318836927 CET	7733	45794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.319417000 CET	7733	45796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.319541931 CET	45796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.320451975 CET	45796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.321683884 CET	45798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.439351082 CET	7733	45796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.439946890 CET	7733	45796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.441124916 CET	7733	45798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.441219091 CET	45798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.442065954 CET	45798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.442807913 CET	45800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.560978889 CET	7733	45798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.561455965 CET	7733	45798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.562283039 CET	7733	45800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.562391996 CET	45800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.563352108 CET	45800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.564656019 CET	45802	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.682521105 CET	7733	45800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.683834076 CET	7733	45800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.684346914 CET	7733	45802	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.684551001 CET	45802	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.685405970 CET	45802	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.686865091 CET	45804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.804478884 CET	7733	45802	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.804821014 CET	7733	45802	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.806298018 CET	7733	45804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.806421041 CET	45804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.807356119 CET	45804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.808132887 CET	45806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.926975965 CET	7733	45804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.928771973 CET	7733	45806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:14.928849936 CET	45806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.929769993 CET	45806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.930942059 CET	45808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:14.938199043 CET	7733	45804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.049407959 CET	7733	45806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.051261902 CET	7733	45806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.052373886 CET	7733	45808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.052493095 CET	45808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.053335905 CET	45808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.054047108 CET	45810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.172646999 CET	7733	45808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.173648119 CET	7733	45808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.174571991 CET	7733	45810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.174690008 CET	45810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.175529003 CET	45810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.176788092 CET	45812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.294464111 CET	7733	45810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.294929981 CET	7733	45810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.296283960 CET	7733	45812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.296353102 CET	45812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.297178030 CET	45812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.297894001 CET	45814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.416152954 CET	7733	45812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.416352987 CET	45812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.416743040 CET	7733	45812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.417792082 CET	7733	45814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.417872906 CET	45814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.418765068 CET	45814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.420016050 CET	45816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.535871983 CET	7733	45812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.538369894 CET	7733	45814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.538584948 CET	7733	45814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.539508104 CET	7733	45816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.539598942 CET	45816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.540518045 CET	45816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.541279078 CET	45818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.659519911 CET	7733	45816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.659967899 CET	7733	45816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.660722971 CET	7733	45818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.660799026 CET	45818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.661633968 CET	45818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.662872076 CET	45820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.781058073 CET	7733	45818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.781265974 CET	7733	45818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.782473087 CET	7733	45820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.782622099 CET	45820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.783495903 CET	45820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.784917116 CET	45822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.902487993 CET	7733	45820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.903069973 CET	7733	45820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.904432058 CET	7733	45822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:15.904520035 CET	45822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.905550003 CET	45822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:15.906454086 CET	45824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.024422884 CET	7733	45822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.025048018 CET	7733	45822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.025993109 CET	7733	45824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.026083946 CET	45824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.027086973 CET	45824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.029002905 CET	45826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.145953894 CET	7733	45824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.146588087 CET	7733	45824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.148606062 CET	7733	45826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.148787975 CET	45826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.149890900 CET	45826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.150707960 CET	45828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.268642902 CET	7733	45826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.269442081 CET	7733	45826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.270253897 CET	7733	45828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.270441055 CET	45828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.271462917 CET	45828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.273025990 CET	45830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.390369892 CET	7733	45828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.390950918 CET	7733	45828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.392530918 CET	7733	45830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.392632008 CET	45830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.393589020 CET	45830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.394361973 CET	45832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.513048887 CET	7733	45830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.513721943 CET	7733	45830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.514012098 CET	7733	45832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.514113903 CET	45832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.515116930 CET	45832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.517051935 CET	45834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.634337902 CET	7733	45832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.634602070 CET	7733	45832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.636548996 CET	7733	45834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.636703014 CET	45834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.637773991 CET	45834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.638608932 CET	45836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.756664038 CET	7733	45834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.757325888 CET	7733	45834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.758121014 CET	7733	45836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.758312941 CET	45836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.759335995 CET	45836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.760744095 CET	45838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.878418922 CET	7733	45836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.878757954 CET	7733	45836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.880294085 CET	7733	45838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:16.880419016 CET	45838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.881364107 CET	45838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:16.882029057 CET	45840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.000204086 CET	7733	45838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.000796080 CET	7733	45838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.001516104 CET	7733	45840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.001610994 CET	45840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.002430916 CET	45840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.003626108 CET	45842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.122237921 CET	7733	45840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.122472048 CET	7733	45840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.123626947 CET	7733	45842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.123795986 CET	45842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.124861956 CET	45842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.126785040 CET	45844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.243447065 CET	7733	45842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.244402885 CET	45842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.244457006 CET	7733	45842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.246332884 CET	7733	45844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.246531963 CET	45844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.247646093 CET	45844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.258449078 CET	45846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.363831043 CET	7733	45842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.366265059 CET	7733	45844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.367109060 CET	7733	45844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.378104925 CET	7733	45846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.378196001 CET	45846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.379216909 CET	45846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.381421089 CET	45848	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.497916937 CET	7733	45846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.498661995 CET	7733	45846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.500921011 CET	7733	45848	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.501075029 CET	45848	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.502177000 CET	45848	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.503552914 CET	45850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.620944023 CET	7733	45848	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.621608019 CET	7733	45848	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.623050928 CET	7733	45850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.623162985 CET	45850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.624248028 CET	45850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.625718117 CET	45852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.742860079 CET	7733	45850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.743715048 CET	7733	45850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.745158911 CET	7733	45852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.745271921 CET	45852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.746285915 CET	45852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.748430014 CET	45854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.865639925 CET	7733	45852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.866337061 CET	7733	45852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.868438005 CET	7733	45854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.868547916 CET	45854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.869658947 CET	45854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.871145964 CET	45856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.988368034 CET	7733	45854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.989238977 CET	7733	45854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.990607023 CET	7733	45856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:17.990689993 CET	45856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.991764069 CET	45856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:17.993123055 CET	45858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.110311031 CET	7733	45856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.111252069 CET	7733	45856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.112550974 CET	7733	45858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.112840891 CET	45858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.113868952 CET	45858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.115326881 CET	45860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.232492924 CET	7733	45858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.233374119 CET	7733	45858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.234824896 CET	7733	45860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.234934092 CET	45860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.235948086 CET	45860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.237330914 CET	45862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.356198072 CET	7733	45860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.357264996 CET	7733	45862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.357322931 CET	45862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.357330084 CET	7733	45860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.359472036 CET	45862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:18.476910114 CET	7733	45862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:18.478914022 CET	7733	45862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:19.760437965 CET	45864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:19.880362034 CET	7733	45864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:19.880456924 CET	45864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:19.889149904 CET	45864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.000463009 CET	7733	45864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.004359007 CET	45864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.008805990 CET	7733	45864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.077471972 CET	45866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.123858929 CET	7733	45864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.197401047 CET	7733	45866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.197468996 CET	45866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.204062939 CET	45866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.251766920 CET	45868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.317385912 CET	7733	45866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.320364952 CET	45866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.323734045 CET	7733	45866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.371402025 CET	7733	45868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.371476889 CET	45868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.373330116 CET	45868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.381818056 CET	45870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.439939022 CET	7733	45866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.491245985 CET	7733	45868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.492364883 CET	45868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.492959023 CET	7733	45868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.501393080 CET	7733	45870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.501473904 CET	45870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.505501986 CET	45870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.546468019 CET	45872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.611797094 CET	7733	45868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.621527910 CET	7733	45870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.624356031 CET	45870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.625281096 CET	7733	45870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.666040897 CET	7733	45872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.666114092 CET	45872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.670778990 CET	45872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.680998087 CET	45874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.744012117 CET	7733	45870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.785835028 CET	7733	45872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.788362980 CET	45872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.790323973 CET	7733	45872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.800760031 CET	7733	45874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.800812006 CET	45874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.811120987 CET	45874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.825972080 CET	45876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.907959938 CET	7733	45872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.920537949 CET	7733	45874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.924365044 CET	45874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.931202888 CET	7733	45874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.948560953 CET	7733	45876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:20.948632002 CET	45876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.954765081 CET	45876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:20.960319996 CET	45878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.043984890 CET	7733	45874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.068582058 CET	7733	45876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.072369099 CET	45876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.075047970 CET	7733	45876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.081064939 CET	7733	45878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.081170082 CET	45878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.083939075 CET	45878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.087649107 CET	45880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.192188978 CET	7733	45876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.201215029 CET	7733	45878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.203464031 CET	7733	45878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.207242966 CET	7733	45880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.207307100 CET	45880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.209155083 CET	45880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.212027073 CET	45882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.327131987 CET	7733	45880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.328366041 CET	45880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.328671932 CET	7733	45880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.331680059 CET	7733	45882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.331764936 CET	45882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.334022045 CET	45882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.338319063 CET	45884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.448179007 CET	7733	45880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.451893091 CET	7733	45882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.452373028 CET	45882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.454049110 CET	7733	45882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.457917929 CET	7733	45884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.457972050 CET	45884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.460365057 CET	45884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.464884043 CET	45886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.571930885 CET	7733	45882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.577965021 CET	7733	45884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.579827070 CET	7733	45884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.584403992 CET	7733	45886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.584464073 CET	45886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.587239981 CET	45886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.596148014 CET	45888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.704426050 CET	7733	45886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.706727028 CET	7733	45886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.715759993 CET	7733	45888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.715820074 CET	45888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.718966961 CET	45888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.726655006 CET	45890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.836443901 CET	7733	45888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.838438034 CET	7733	45888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.846399069 CET	7733	45890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.846472025 CET	45890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.850640059 CET	45890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.857310057 CET	45892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.966392994 CET	7733	45890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.968368053 CET	45890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.971496105 CET	7733	45890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.976922035 CET	7733	45892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:21.976984024 CET	45892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.979521036 CET	45892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:21.984472036 CET	45894	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.087991953 CET	7733	45890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.097551107 CET	7733	45892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.100368977 CET	45892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.100557089 CET	7733	45892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.104118109 CET	7733	45894	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.104203939 CET	45894	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.109697104 CET	45894	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.118066072 CET	45896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.220448017 CET	7733	45892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.224273920 CET	7733	45894	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.228374004 CET	45894	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.229346037 CET	7733	45894	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.237673044 CET	7733	45896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.237817049 CET	45896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.241249084 CET	45896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.246820927 CET	45898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.348031998 CET	7733	45894	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.357733011 CET	7733	45896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.360374928 CET	45896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.360932112 CET	7733	45896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.366445065 CET	7733	45898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.366502047 CET	45898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.373102903 CET	45898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.385168076 CET	45900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.480087042 CET	7733	45896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.486965895 CET	7733	45898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.488374949 CET	45898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.492649078 CET	7733	45898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.504864931 CET	7733	45900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.504951954 CET	45900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.512063026 CET	45900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.524806976 CET	45902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.608066082 CET	7733	45898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.624867916 CET	7733	45900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.628370047 CET	45900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.631520033 CET	7733	45900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.644376040 CET	7733	45902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.644575119 CET	45902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.647999048 CET	45902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.654038906 CET	45904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.747978926 CET	7733	45900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.764529943 CET	7733	45902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.767548084 CET	7733	45902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.773585081 CET	7733	45904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.773665905 CET	45904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.776652098 CET	45904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.782346010 CET	45906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.894007921 CET	7733	45904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.896116018 CET	7733	45904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.901839972 CET	7733	45906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:22.901989937 CET	45906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.908961058 CET	45906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:22.916501045 CET	45908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.021873951 CET	7733	45906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.024379969 CET	45906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.028521061 CET	7733	45906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.035991907 CET	7733	45908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.036062956 CET	45908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.039622068 CET	45908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.046751022 CET	45910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.143897057 CET	7733	45906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.156117916 CET	7733	45908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.156378031 CET	45908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.159442902 CET	7733	45908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.167104006 CET	7733	45910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.167193890 CET	45910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.170084000 CET	45910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.176614046 CET	45912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.275887966 CET	7733	45908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.287131071 CET	7733	45910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.288382053 CET	45910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.289511919 CET	7733	45910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.296473980 CET	7733	45912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.296641111 CET	45912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.303909063 CET	45912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.315042973 CET	45914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.407875061 CET	7733	45910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.416755915 CET	7733	45912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.420485020 CET	45912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.423387051 CET	7733	45912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.434526920 CET	7733	45914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.434601068 CET	45914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.437860966 CET	45914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.446082115 CET	45916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.539987087 CET	7733	45912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.554955959 CET	7733	45914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.557812929 CET	7733	45914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.565915108 CET	7733	45916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.566004992 CET	45916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.571306944 CET	45916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.581644058 CET	45918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.690973997 CET	7733	45916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.693084955 CET	7733	45916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.702212095 CET	7733	45918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.702330112 CET	45918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.709634066 CET	45918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.720408916 CET	45920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.822447062 CET	7733	45918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.824383020 CET	45918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.829118967 CET	7733	45918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.840306997 CET	7733	45920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.840374947 CET	45920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.845582962 CET	45920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.857477903 CET	45922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.944437981 CET	7733	45918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.960581064 CET	7733	45920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.964382887 CET	45920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.965188026 CET	7733	45920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.977066040 CET	7733	45922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:23.977672100 CET	45922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.980329990 CET	45922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:23.985883951 CET	45924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.084913969 CET	7733	45920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.098028898 CET	7733	45922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.099925041 CET	7733	45922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.105375051 CET	7733	45924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.105437040 CET	45924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.108277082 CET	45924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.113853931 CET	45926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.225548029 CET	7733	45924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.227749109 CET	7733	45924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.233469963 CET	7733	45926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.233522892 CET	45926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.237091064 CET	45926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.249444962 CET	45928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.356648922 CET	7733	45926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.356720924 CET	7733	45926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.369081974 CET	7733	45928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.369162083 CET	45928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.373538971 CET	45928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.417165995 CET	45930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.490551949 CET	7733	45928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.492407084 CET	45928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.493019104 CET	7733	45928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.537110090 CET	7733	45930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.537216902 CET	45930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.542907953 CET	45930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.611890078 CET	7733	45928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.657059908 CET	7733	45930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.660378933 CET	45930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.662914038 CET	7733	45930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.704258919 CET	45932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.780272007 CET	7733	45930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.823972940 CET	7733	45932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.824038029 CET	45932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.831682920 CET	45932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.851994991 CET	45934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.943734884 CET	7733	45932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.944408894 CET	45932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.951246023 CET	7733	45932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.971698046 CET	7733	45934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:24.971801043 CET	45934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.975151062 CET	45934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:24.997719049 CET	45936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.064115047 CET	7733	45932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.093182087 CET	7733	45934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.095278978 CET	7733	45934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.117657900 CET	7733	45936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.117713928 CET	45936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.120136976 CET	45936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.135353088 CET	45938	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.237668991 CET	7733	45936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.240391970 CET	45936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.241275072 CET	7733	45936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.256531954 CET	7733	45938	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.256592035 CET	45938	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.258892059 CET	45938	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.360055923 CET	7733	45936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.376420975 CET	7733	45938	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.378438950 CET	7733	45938	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:25.823167086 CET	44730	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:25.942770958 CET	7733	44730	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.117985964 CET	45170	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118010998 CET	45166	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118010998 CET	45164	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118016005 CET	45168	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118016958 CET	45162	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118016958 CET	45160	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118042946 CET	45158	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118043900 CET	45154	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118042946 CET	45156	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118043900 CET	45152	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118047953 CET	45150	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118047953 CET	45148	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118061066 CET	45146	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118061066 CET	45144	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118092060 CET	45138	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118092060 CET	45136	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118093967 CET	45142	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118093967 CET	45140	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118098021 CET	45134	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118098974 CET	45132	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118108034 CET	45128	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118108034 CET	45130	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118110895 CET	45126	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118110895 CET	45124	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118117094 CET	45122	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118134975 CET	45118	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118134975 CET	45116	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118135929 CET	45114	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118135929 CET	45112	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118139029 CET	45120	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118149042 CET	45110	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118149042 CET	45108	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118174076 CET	45106	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118174076 CET	45102	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118174076 CET	45104	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118174076 CET	45100	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118175030 CET	45098	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118175983 CET	45096	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118176937 CET	45094	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118176937 CET	45092	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118196964 CET	45090	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118196964 CET	45088	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118200064 CET	45086	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118201017 CET	45084	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118215084 CET	45082	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118215084 CET	45080	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118220091 CET	45078	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118220091 CET	45076	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118235111 CET	45074	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118235111 CET	45072	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118246078 CET	45070	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118246078 CET	45068	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118248940 CET	45066	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118248940 CET	45064	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118252993 CET	45062	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118252993 CET	45060	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118274927 CET	45054	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118274927 CET	45052	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118284941 CET	45050	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118285894 CET	45048	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118293047 CET	45058	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118293047 CET	45056	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118293047 CET	45046	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118294954 CET	45040	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118304014 CET	45042	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118313074 CET	45044	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118333101 CET	45034	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118334055 CET	45030	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118333101 CET	45032	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118334055 CET	45028	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118340015 CET	45026	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118352890 CET	45024	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118360043 CET	45038	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118360043 CET	45036	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118360043 CET	45022	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118360043 CET	45020	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118381023 CET	45010	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118381023 CET	45008	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118382931 CET	45014	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118382931 CET	45012	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118385077 CET	45016	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118385077 CET	45018	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118391991 CET	45006	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118391991 CET	45004	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118400097 CET	45002	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118400097 CET	45000	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118424892 CET	44994	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118426085 CET	44992	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118427038 CET	44990	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118427992 CET	44996	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118427992 CET	44998	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118443012 CET	44982	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118451118 CET	44980	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118462086 CET	44976	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118462086 CET	44978	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118467093 CET	44974	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118468046 CET	44972	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118482113 CET	44968	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118482113 CET	44970	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118485928 CET	44966	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118486881 CET	44964	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118494987 CET	44988	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118495941 CET	44962	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118495941 CET	44986	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118495941 CET	44984	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118509054 CET	44958	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118509054 CET	44956	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118515968 CET	44954	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118516922 CET	44960	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118515968 CET	44952	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118534088 CET	44948	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118534088 CET	44950	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118535042 CET	44946	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118535042 CET	44944	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118550062 CET	44942	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118550062 CET	44940	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118555069 CET	44934	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118568897 CET	44932	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118568897 CET	44926	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118571997 CET	44930	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118571997 CET	44928	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118576050 CET	44936	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118577957 CET	44924	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118590117 CET	44922	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118590117 CET	44920	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118623018 CET	44910	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118623018 CET	44908	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118623972 CET	44912	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118623972 CET	44918	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118623972 CET	44914	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118623972 CET	44916	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118638992 CET	44906	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118653059 CET	44902	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118653059 CET	44900	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118654966 CET	44898	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118666887 CET	44896	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118673086 CET	44904	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118676901 CET	44892	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118686914 CET	44890	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118686914 CET	44888	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118693113 CET	44886	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118693113 CET	44884	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118695021 CET	44882	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118695021 CET	44880	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118711948 CET	44876	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118711948 CET	44878	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118719101 CET	44874	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118719101 CET	44872	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118731022 CET	44862	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118732929 CET	44870	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118732929 CET	44868	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118751049 CET	44854	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118755102 CET	44858	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118755102 CET	44856	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118765116 CET	44860	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118767023 CET	44852	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118768930 CET	44850	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118769884 CET	44866	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118769884 CET	44864	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118772984 CET	44846	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118772984 CET	44844	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118777990 CET	44842	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118777990 CET	44840	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118799925 CET	44838	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118799925 CET	44836	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118822098 CET	44826	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118822098 CET	44824	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118824959 CET	44830	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118824959 CET	44828	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118843079 CET	44822	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118843079 CET	44834	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118843079 CET	44820	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118843079 CET	44832	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118843079 CET	44818	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118876934 CET	44806	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118876934 CET	44804	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118877888 CET	44810	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118877888 CET	44808	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118885040 CET	44814	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118885040 CET	44812	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118885040 CET	44798	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118885040 CET	44796	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118895054 CET	44800	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118902922 CET	44792	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118904114 CET	44794	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118904114 CET	44816	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118906021 CET	44786	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118906975 CET	44790	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118906975 CET	44788	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118921995 CET	44784	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118923903 CET	44782	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118923903 CET	44780	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118927002 CET	44778	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118927002 CET	44776	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118958950 CET	44770	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118958950 CET	44768	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118961096 CET	44766	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118962049 CET	44764	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118963957 CET	44774	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118963957 CET	44762	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118963957 CET	44772	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118973017 CET	44760	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118978977 CET	44756	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118984938 CET	44754	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118984938 CET	44752	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118987083 CET	44750	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.118987083 CET	44748	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119003057 CET	44746	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119003057 CET	44744	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119004965 CET	44742	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119004965 CET	44740	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119019985 CET	44736	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119019985 CET	44738	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.119021893 CET	44732	7733	192.168.2.13	89.190.156.145
Dec 19, 2024 22:23:26.238698959 CET	7733	45170	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.238711119 CET	7733	45168	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239537954 CET	7733	45166	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239552021 CET	7733	45162	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239577055 CET	7733	45164	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239587069 CET	7733	45160	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239595890 CET	7733	45150	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239648104 CET	7733	45148	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239659071 CET	7733	45158	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239667892 CET	7733	45156	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239679098 CET	7733	45154	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239691019 CET	7733	45152	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239701033 CET	7733	45146	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239761114 CET	7733	45144	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239772081 CET	7733	45138	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239780903 CET	7733	45136	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239793062 CET	7733	45142	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239801884 CET	7733	45140	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239810944 CET	7733	45134	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239820004 CET	7733	45132	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239830017 CET	7733	45122	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239839077 CET	7733	45126	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239847898 CET	7733	45124	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239916086 CET	7733	45128	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239926100 CET	7733	45130	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239936113 CET	7733	45118	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239944935 CET	7733	45114	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239955902 CET	7733	45120	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239965916 CET	7733	45112	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.239974976 CET	7733	45116	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240423918 CET	7733	45110	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240433931 CET	7733	45108	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240443945 CET	7733	45106	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240521908 CET	7733	45098	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240533113 CET	7733	45104	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240546942 CET	7733	45094	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240556955 CET	7733	45096	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240566969 CET	7733	45102	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240576029 CET	7733	45092	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240586042 CET	7733	45100	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240597010 CET	7733	45090	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240762949 CET	7733	45088	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240773916 CET	7733	45086	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240783930 CET	7733	45084	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240793943 CET	7733	45082	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240802050 CET	7733	45080	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240813017 CET	7733	45078	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240823984 CET	7733	45076	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240834951 CET	7733	45074	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240844965 CET	7733	45072	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240854979 CET	7733	45070	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240864992 CET	7733	45066	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240875959 CET	7733	45064	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.240884066 CET	7733	45062	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241250992 CET	7733	45060	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241261005 CET	7733	45068	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241271019 CET	7733	45054	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241281033 CET	7733	45052	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241300106 CET	7733	45050	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241309881 CET	7733	45048	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241319895 CET	7733	45058	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241329908 CET	7733	45040	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241341114 CET	7733	45042	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241358042 CET	7733	45056	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241368055 CET	7733	45046	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241377115 CET	7733	45044	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241406918 CET	7733	45030	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241415977 CET	7733	45028	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241425991 CET	7733	45026	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241436958 CET	7733	45034	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241446972 CET	7733	45032	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241489887 CET	7733	45024	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241506100 CET	7733	45038	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241518021 CET	7733	45036	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241528034 CET	7733	45022	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241538048 CET	7733	45020	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241579056 CET	7733	45010	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.241589069 CET	7733	45014	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242011070 CET	7733	45008	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242156029 CET	7733	45016	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242166042 CET	7733	45012	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242180109 CET	7733	45018	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242191076 CET	7733	45006	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242199898 CET	7733	45004	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242211103 CET	7733	45002	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242221117 CET	7733	45000	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242232084 CET	7733	44994	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242244959 CET	7733	44992	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242254972 CET	7733	44990	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242264986 CET	7733	44996	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242275000 CET	7733	44998	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242285967 CET	7733	44982	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242305040 CET	7733	44980	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242314100 CET	7733	44976	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242324114 CET	7733	44978	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242341042 CET	7733	44974	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242351055 CET	7733	44972	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242360115 CET	7733	44968	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242369890 CET	7733	44970	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242381096 CET	7733	44962	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242384911 CET	7733	44966	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242388964 CET	7733	44986	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242772102 CET	7733	44964	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242782116 CET	7733	44988	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242791891 CET	7733	44984	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242801905 CET	7733	44958	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242810011 CET	7733	44956	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242820978 CET	7733	44960	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242830038 CET	7733	44954	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.242840052 CET	7733	44952	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243021965 CET	7733	44948	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243032932 CET	7733	44946	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243042946 CET	7733	44950	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243053913 CET	7733	44944	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243063927 CET	7733	44942	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243068933 CET	7733	44940	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243078947 CET	7733	44934	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243089914 CET	7733	44932	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243098974 CET	7733	44926	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243108988 CET	7733	44930	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243119001 CET	7733	44936	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243129015 CET	7733	44924	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243138075 CET	7733	44928	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243148088 CET	7733	44922	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243156910 CET	7733	44920	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243166924 CET	7733	44910	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243531942 CET	7733	44908	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243546963 CET	7733	44912	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243557930 CET	7733	44914	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243567944 CET	7733	44918	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243577957 CET	7733	44916	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243588924 CET	7733	44906	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243598938 CET	7733	44898	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243608952 CET	7733	44902	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243618965 CET	7733	44900	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243628025 CET	7733	44896	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243638039 CET	7733	44904	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243643045 CET	7733	44892	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243648052 CET	7733	44890	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243653059 CET	7733	44888	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243668079 CET	7733	44886	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243679047 CET	7733	44882	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243689060 CET	7733	44884	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243706942 CET	7733	44880	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243716002 CET	7733	44876	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243726015 CET	7733	44878	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243730068 CET	7733	44874	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243737936 CET	7733	44872	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243746996 CET	7733	44862	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.243756056 CET	7733	44870	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244126081 CET	7733	44868	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244139910 CET	7733	44854	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244148970 CET	7733	44858	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244158030 CET	7733	44856	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244174004 CET	7733	44860	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244183064 CET	7733	44852	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244191885 CET	7733	44850	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244206905 CET	7733	44866	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244215965 CET	7733	44864	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244225979 CET	7733	44846	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244244099 CET	7733	44844	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244259119 CET	7733	44842	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244275093 CET	7733	44840	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244282961 CET	7733	44838	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244293928 CET	7733	44836	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244302988 CET	7733	44826	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244384050 CET	7733	44830	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244394064 CET	7733	44828	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244401932 CET	7733	44824	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244410992 CET	7733	44822	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244438887 CET	7733	44820	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244447947 CET	7733	44834	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244457006 CET	7733	44832	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.244662046 CET	7733	44818	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245002985 CET	7733	44806	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245024920 CET	7733	44810	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245033979 CET	7733	44808	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245043039 CET	7733	44804	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245052099 CET	7733	44814	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245060921 CET	7733	44812	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245184898 CET	7733	44798	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245194912 CET	7733	44796	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245203972 CET	7733	44800	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245213032 CET	7733	44816	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245223045 CET	7733	44786	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245232105 CET	7733	44790	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245240927 CET	7733	44788	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245249987 CET	7733	44792	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245259047 CET	7733	44794	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245269060 CET	7733	44784	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245277882 CET	7733	44782	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245287895 CET	7733	44780	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245296955 CET	7733	44778	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245306969 CET	7733	44776	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245316982 CET	7733	44770	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245326042 CET	7733	44766	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.245333910 CET	7733	44768	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248598099 CET	7733	44764	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248609066 CET	7733	44762	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248617887 CET	7733	44774	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248627901 CET	7733	44772	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248637915 CET	7733	44760	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248648882 CET	7733	44756	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248658895 CET	7733	44750	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248667955 CET	7733	44748	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248678923 CET	7733	44754	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248688936 CET	7733	44752	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248698950 CET	7733	44742	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248708010 CET	7733	44740	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248718023 CET	7733	44746	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248728037 CET	7733	44744	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248738050 CET	7733	44732	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248748064 CET	7733	44736	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:26.248758078 CET	7733	44738	89.190.156.145	192.168.2.13
Dec 19, 2024 22:23:41.046678066 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:23:41.166846037 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:23:51.056560040 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:23:51.176045895 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:05.484272957 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:05.484431028 CET	45080	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:05.604049921 CET	33966	45080	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:07.740391016 CET	45432	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:07.859956026 CET	33966	45432	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:07.860169888 CET	45432	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:07.861941099 CET	45432	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:07.981461048 CET	33966	45432	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:07.981539011 CET	45432	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:08.101403952 CET	33966	45432	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:09.160836935 CET	33966	45432	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:09.160952091 CET	45432	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:09.160952091 CET	45432	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:10.493072033 CET	45434	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:10.613112926 CET	33966	45434	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:10.613166094 CET	45434	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:10.616255045 CET	45434	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:10.736388922 CET	33966	45434	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:10.736453056 CET	45434	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:10.856008053 CET	33966	45434	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:11.880747080 CET	33966	45434	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:11.880851984 CET	45434	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:11.880851984 CET	45434	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:13.155431032 CET	45436	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:13.275008917 CET	33966	45436	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:13.275095940 CET	45436	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:13.277575970 CET	45436	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:13.397033930 CET	33966	45436	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:13.397109032 CET	45436	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:13.516527891 CET	33966	45436	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:14.540159941 CET	33966	45436	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:14.540220976 CET	45436	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:14.540337086 CET	45436	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:15.782797098 CET	45438	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:15.902688026 CET	33966	45438	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:15.902743101 CET	45438	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:15.904967070 CET	45438	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:16.024630070 CET	33966	45438	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:16.024678946 CET	45438	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:16.144336939 CET	33966	45438	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:17.168085098 CET	33966	45438	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:17.168129921 CET	45438	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:17.168185949 CET	45438	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:18.415600061 CET	45440	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:18.535223961 CET	33966	45440	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:18.535341978 CET	45440	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:18.538402081 CET	45440	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:18.657979965 CET	33966	45440	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:18.658145905 CET	45440	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:18.777705908 CET	33966	45440	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:19.803530931 CET	33966	45440	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:19.803611994 CET	45440	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:19.803633928 CET	45440	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:21.048727036 CET	45442	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:21.168632984 CET	33966	45442	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:21.168883085 CET	45442	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:21.170705080 CET	45442	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:21.290461063 CET	33966	45442	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:21.290540934 CET	45442	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:21.410856009 CET	33966	45442	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:22.436367035 CET	33966	45442	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:22.436528921 CET	45442	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:22.436528921 CET	45442	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:23.700422049 CET	45444	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:23.820108891 CET	33966	45444	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:23.820225954 CET	45444	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:23.821902037 CET	45444	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:23.941620111 CET	33966	45444	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:23.941677094 CET	45444	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:24.061181068 CET	33966	45444	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:25.095292091 CET	33966	45444	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:25.095344067 CET	45444	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:25.095383883 CET	45444	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:26.357400894 CET	45446	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:26.476979017 CET	33966	45446	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:26.477045059 CET	45446	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:26.478372097 CET	45446	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:26.597929955 CET	33966	45446	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:26.598002911 CET	45446	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:26.717530012 CET	33966	45446	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:27.745131969 CET	33966	45446	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:27.745259047 CET	45446	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:27.745259047 CET	45446	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:29.007369995 CET	45448	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:29.127269030 CET	33966	45448	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:29.127376080 CET	45448	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:29.129652977 CET	45448	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:29.249253035 CET	33966	45448	178.215.238.25	192.168.2.13
Dec 19, 2024 22:24:29.249305010 CET	45448	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:24:29.368850946 CET	33966	45448	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:08.900820017 CET	33966	45448	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:08.900939941 CET	45448	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:09.020668030 CET	33966	45448	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:11.399132967 CET	45450	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:11.518857956 CET	33966	45450	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:11.518912077 CET	45450	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:11.533282995 CET	45450	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:11.653016090 CET	33966	45450	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:11.653079987 CET	45450	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:11.772962093 CET	33966	45450	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:12.788219929 CET	33966	45450	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:12.788295031 CET	45450	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:12.788373947 CET	45450	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:14.363356113 CET	45452	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:14.483200073 CET	33966	45452	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:14.483299017 CET	45452	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:14.509649992 CET	45452	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:14.629174948 CET	33966	45452	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:14.629230976 CET	45452	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:14.748996019 CET	33966	45452	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:15.749428988 CET	33966	45452	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:15.749500990 CET	45452	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:15.749567032 CET	45452	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:17.129929066 CET	45454	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:17.249882936 CET	33966	45454	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:17.250060081 CET	45454	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:17.260952950 CET	45454	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:17.380709887 CET	33966	45454	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:17.380783081 CET	45454	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:17.500653028 CET	33966	45454	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:18.517513037 CET	33966	45454	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:18.517575026 CET	45454	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:18.517630100 CET	45454	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:20.135848045 CET	45456	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:20.255642891 CET	33966	45456	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:20.255702019 CET	45456	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:20.271394014 CET	45456	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:20.390978098 CET	33966	45456	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:20.391032934 CET	45456	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:20.510624886 CET	33966	45456	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:21.534889936 CET	33966	45456	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:21.534945965 CET	45456	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:21.534984112 CET	45456	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:22.928858042 CET	45458	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:23.048595905 CET	33966	45458	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:23.048666954 CET	45458	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:23.066620111 CET	45458	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:23.186695099 CET	33966	45458	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:23.186741114 CET	45458	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:23.306377888 CET	33966	45458	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:24.454888105 CET	33966	45458	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:24.454984903 CET	45458	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:24.454984903 CET	45458	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:25.859002113 CET	45464	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:25.979068041 CET	33966	45464	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:25.979125023 CET	45464	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:25.984404087 CET	45464	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:26.104909897 CET	33966	45464	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:26.104959965 CET	45464	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:26.224517107 CET	33966	45464	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:27.247813940 CET	33966	45464	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:27.247895002 CET	45464	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:27.247934103 CET	45464	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:28.511425018 CET	45466	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:28.631181002 CET	33966	45466	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:28.631263018 CET	45466	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:28.633922100 CET	45466	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:28.753659010 CET	33966	45466	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:28.753715038 CET	45466	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:28.873414040 CET	33966	45466	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:30.050951004 CET	33966	45466	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:30.051033974 CET	45466	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:30.051091909 CET	45466	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:31.358109951 CET	45468	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:31.477740049 CET	33966	45468	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:31.477797031 CET	45468	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:31.480139971 CET	45468	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:31.599787951 CET	33966	45468	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:31.599839926 CET	45468	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:31.719640017 CET	33966	45468	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:32.745527029 CET	33966	45468	178.215.238.25	192.168.2.13
Dec 19, 2024 22:25:32.745784044 CET	45468	33966	192.168.2.13	178.215.238.25
Dec 19, 2024 22:25:32.745784044 CET	45468	33966	192.168.2.13	178.215.238.25

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 22:22:03.603127003 CET	56389	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:03.737267017 CET	53	56389	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:03.739435911 CET	58638	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:03.861742020 CET	53	58638	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:03.863497972 CET	57384	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:03.986315012 CET	53	57384	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:03.988106966 CET	44079	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:04.110400915 CET	53	44079	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:04.113357067 CET	51818	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:04.235646009 CET	53	51818	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:04.237209082 CET	38184	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:04.359623909 CET	53	38184	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:05.825159073 CET	50091	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:05.947545052 CET	53	50091	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:05.951843977 CET	50199	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.074388027 CET	53	50199	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.077733040 CET	58542	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.200110912 CET	53	58542	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.202305079 CET	45453	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.324990988 CET	53	45453	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.326880932 CET	45814	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.449645042 CET	53	45814	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.451339960 CET	47722	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.573926926 CET	53	47722	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.579345942 CET	60883	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.701765060 CET	53	60883	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.704155922 CET	45458	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.826859951 CET	53	45458	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.829484940 CET	50724	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:06.951824903 CET	53	50724	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:06.956819057 CET	45163	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:07.079176903 CET	53	45163	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:08.524377108 CET	35317	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:08.647916079 CET	53	35317	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:08.650959015 CET	57731	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:08.773334026 CET	53	57731	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:08.776413918 CET	49153	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:08.899971962 CET	53	49153	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:08.902575970 CET	53261	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.024934053 CET	53	53261	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:09.027683973 CET	44888	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.153605938 CET	53	44888	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:09.157146931 CET	60019	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.279772997 CET	53	60019	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:09.282289028 CET	33272	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.406003952 CET	53	33272	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:09.425868988 CET	44208	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.549066067 CET	53	44208	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:09.552233934 CET	44087	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.674920082 CET	53	44087	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:09.677509069 CET	47008	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:09.800029039 CET	53	47008	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.199698925 CET	34798	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:11.322655916 CET	53	34798	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.323879004 CET	51415	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:11.446257114 CET	53	51415	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.447405100 CET	40298	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:11.569797993 CET	53	40298	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.570954084 CET	35794	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:11.693722010 CET	53	35794	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.694930077 CET	56498	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:11.817631960 CET	53	56498	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.818942070 CET	49701	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:11.941250086 CET	53	49701	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:11.942475080 CET	46464	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:12.064883947 CET	53	46464	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:12.066060066 CET	60297	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:12.190975904 CET	53	60297	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:12.192011118 CET	41761	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:12.314539909 CET	53	41761	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:12.315558910 CET	40166	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:12.437870979 CET	53	40166	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:13.913600922 CET	34891	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.039566994 CET	53	34891	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.040826082 CET	48561	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.163134098 CET	53	48561	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.164205074 CET	42638	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.287303925 CET	53	42638	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.288223982 CET	46973	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.410423040 CET	53	46973	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.411478996 CET	46001	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.533819914 CET	53	46001	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.534918070 CET	36663	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.657155991 CET	53	36663	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.658196926 CET	59561	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.780503988 CET	53	59561	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.781636953 CET	45200	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:14.904531002 CET	53	45200	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:14.905545950 CET	56757	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:15.028021097 CET	53	56757	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:15.029052019 CET	55368	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:15.151596069 CET	53	55368	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:16.555628061 CET	33707	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:16.678937912 CET	53	33707	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:16.680149078 CET	49618	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:16.802515984 CET	53	49618	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:16.804250002 CET	49324	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:16.926523924 CET	53	49324	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:16.928289890 CET	53341	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.050549984 CET	53	53341	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:17.051855087 CET	54168	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.174118042 CET	53	54168	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:17.175510883 CET	48573	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.297868013 CET	53	48573	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:17.298777103 CET	36406	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.421021938 CET	53	36406	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:17.421828032 CET	59140	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.544145107 CET	53	59140	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:17.545027971 CET	40782	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.668132067 CET	53	40782	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:17.669080973 CET	51753	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:17.791373014 CET	53	51753	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.188769102 CET	37341	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:19.311115026 CET	53	37341	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.311952114 CET	54209	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:19.434533119 CET	53	54209	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.435491085 CET	34451	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:19.558170080 CET	53	34451	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.559432983 CET	37829	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:19.681833029 CET	53	37829	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.682895899 CET	34704	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:19.805574894 CET	53	34704	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.806869030 CET	39478	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:19.929349899 CET	53	39478	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:19.930473089 CET	50220	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:20.052830935 CET	53	50220	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:20.054029942 CET	50917	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:20.176717997 CET	53	50917	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:20.178006887 CET	48126	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:20.300281048 CET	53	48126	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:20.301846027 CET	47241	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:20.425602913 CET	53	47241	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:54.260544062 CET	45498	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:54.383061886 CET	53	45498	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:54.384275913 CET	55171	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:54.506697893 CET	53	55171	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:54.508069038 CET	44229	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:54.630527020 CET	53	44229	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:54.631622076 CET	43295	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:54.754858017 CET	53	43295	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:54.756367922 CET	38566	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:54.879673004 CET	53	38566	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:54.880786896 CET	59693	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:55.003393888 CET	53	59693	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:55.004432917 CET	57331	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:55.126708984 CET	53	57331	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:55.128067017 CET	42529	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:55.250483990 CET	53	42529	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:55.251617908 CET	39934	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:55.373971939 CET	53	39934	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:55.379062891 CET	35341	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:55.501885891 CET	53	35341	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:56.901998997 CET	53849	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.024425983 CET	53	53849	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.026643038 CET	36765	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.149200916 CET	53	36765	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.152584076 CET	39759	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.274929047 CET	53	39759	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.277556896 CET	48347	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.399980068 CET	53	48347	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.403862953 CET	49870	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.526158094 CET	53	49870	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.528381109 CET	42368	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.650842905 CET	53	42368	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.653752089 CET	43391	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.776026964 CET	53	43391	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.849587917 CET	50528	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:57.972132921 CET	53	50528	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:57.973817110 CET	60525	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:58.096910954 CET	53	60525	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:58.111994028 CET	46643	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:58.235090971 CET	53	46643	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:59.656290054 CET	41559	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:59.778492928 CET	53	41559	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:59.779875994 CET	44579	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:22:59.902694941 CET	53	44579	8.8.8.8	192.168.2.13
Dec 19, 2024 22:22:59.903366089 CET	36467	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.025753975 CET	53	36467	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.026766062 CET	37960	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.149784088 CET	53	37960	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.150656939 CET	49427	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.273201942 CET	53	49427	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.274081945 CET	51547	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.396795034 CET	53	51547	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.397547007 CET	34538	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.520037889 CET	53	34538	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.520761013 CET	37583	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.643606901 CET	53	37583	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.644408941 CET	45012	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.768192053 CET	53	45012	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:00.770982027 CET	50517	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:23:00.893348932 CET	53	50517	8.8.8.8	192.168.2.13
Dec 19, 2024 22:23:29.597311020 CET	59415	53	192.168.2.13	1.1.1.1
Dec 19, 2024 22:23:29.597404003 CET	33760	53	192.168.2.13	1.1.1.1
Dec 19, 2024 22:23:29.819245100 CET	53	33760	1.1.1.1	192.168.2.13
Dec 19, 2024 22:23:29.823127031 CET	53	59415	1.1.1.1	192.168.2.13
Dec 19, 2024 22:24:06.487849951 CET	44576	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:06.610523939 CET	53	44576	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:06.612215996 CET	54002	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:06.735064030 CET	53	54002	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:06.736627102 CET	44846	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:06.859148979 CET	53	44846	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:06.860672951 CET	37763	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:06.983469963 CET	53	37763	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:06.985354900 CET	59669	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:07.108114958 CET	53	59669	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:07.119755030 CET	53463	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:07.242130995 CET	53	53463	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:07.244146109 CET	54761	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:07.366525888 CET	53	54761	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:07.368323088 CET	37401	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:07.490725994 CET	53	37401	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:07.492326975 CET	50263	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:07.614626884 CET	53	50263	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:07.616863966 CET	44068	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:07.739327908 CET	53	44068	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.172794104 CET	36889	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:09.295578003 CET	53	36889	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.297974110 CET	60566	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:09.420515060 CET	53	60566	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.433630943 CET	51602	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:09.555918932 CET	53	51602	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.559170961 CET	48650	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:09.683620930 CET	53	48650	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.708708048 CET	60597	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:09.831052065 CET	53	60597	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.867177963 CET	58304	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:09.994364977 CET	53	58304	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:09.995435953 CET	35198	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:10.118120909 CET	53	35198	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:10.121876955 CET	49968	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:10.244333029 CET	53	49968	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:10.245373011 CET	44388	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:10.367826939 CET	53	44388	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:10.369786024 CET	37664	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:10.492372990 CET	53	37664	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:11.884208918 CET	55386	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.006789923 CET	53	55386	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.008339882 CET	50607	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.130764961 CET	53	50607	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.133743048 CET	52609	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.259001017 CET	53	52609	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.263118982 CET	53766	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.385399103 CET	53	53766	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.386893034 CET	35347	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.509253979 CET	53	35347	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.511017084 CET	44153	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.633321047 CET	53	44153	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.636779070 CET	48525	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.759222031 CET	53	48525	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.767241955 CET	42172	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:12.889625072 CET	53	42172	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:12.891434908 CET	56172	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:13.013847113 CET	53	56172	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:13.016001940 CET	43404	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:13.138334990 CET	53	43404	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:14.541769981 CET	43955	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:14.664098978 CET	53	43955	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:14.665980101 CET	48902	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:14.788244963 CET	53	48902	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:14.789846897 CET	40033	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:14.912218094 CET	53	40033	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:14.913811922 CET	52815	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.036114931 CET	53	52815	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:15.037950993 CET	57737	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.160243988 CET	53	57737	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:15.162621975 CET	49912	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.285079956 CET	53	49912	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:15.286626101 CET	46563	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.408869982 CET	53	46563	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:15.410212040 CET	34490	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.532567024 CET	53	34490	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:15.534128904 CET	60242	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.656601906 CET	53	60242	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:15.659265041 CET	56895	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:15.781677008 CET	53	56895	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.171854973 CET	49800	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:17.294204950 CET	53	49800	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.296331882 CET	36884	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:17.418732882 CET	53	36884	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.421225071 CET	49545	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:17.543755054 CET	53	49545	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.545645952 CET	38488	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:17.667922974 CET	53	38488	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.669862032 CET	57480	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:17.792710066 CET	53	57480	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.794703007 CET	48943	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:17.917484045 CET	53	48943	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:17.919154882 CET	55176	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:18.041671991 CET	53	55176	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:18.043783903 CET	47381	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:18.166224957 CET	53	47381	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:18.167942047 CET	36491	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:18.290508986 CET	53	36491	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:18.292351961 CET	34808	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:18.414969921 CET	53	34808	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:19.805354118 CET	43869	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:19.927671909 CET	53	43869	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:19.929696083 CET	39762	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.051960945 CET	53	39762	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.053545952 CET	37603	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.177253008 CET	53	37603	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.178999901 CET	60299	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.301328897 CET	53	60299	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.302944899 CET	47660	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.425312996 CET	53	47660	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.427217007 CET	41827	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.549596071 CET	53	41827	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.551800013 CET	42367	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.674791098 CET	53	42367	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.676548958 CET	35732	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.799026966 CET	53	35732	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.800888062 CET	51377	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:20.923937082 CET	53	51377	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:20.925636053 CET	52962	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:21.048058033 CET	53	52962	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:22.438318014 CET	53874	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:22.560719013 CET	53	53874	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:22.562819004 CET	34086	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:22.685194969 CET	53	34086	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:22.687338114 CET	42776	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:22.809740067 CET	53	42776	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:22.811537981 CET	54855	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:22.934266090 CET	53	54855	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:22.938236952 CET	38189	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:23.060681105 CET	53	38189	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:23.068844080 CET	42144	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:23.191487074 CET	53	42144	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:23.193941116 CET	33695	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:23.316348076 CET	53	33695	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:23.323661089 CET	50006	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:23.447664976 CET	53	50006	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:23.449672937 CET	36602	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:23.572412014 CET	53	36602	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:23.574090004 CET	51807	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:23.696795940 CET	53	51807	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.097636938 CET	51234	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.220107079 CET	53	51234	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.221853018 CET	59161	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.344283104 CET	53	59161	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.348185062 CET	39466	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.470498085 CET	53	39466	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.474229097 CET	60972	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.596798897 CET	53	60972	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.601417065 CET	56708	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.723814011 CET	53	56708	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.725903988 CET	34457	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.848320961 CET	53	34457	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.851739883 CET	52426	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:25.974591970 CET	53	52426	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:25.976407051 CET	33219	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:26.099212885 CET	53	33219	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:26.107095003 CET	42071	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:26.229444981 CET	53	42071	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:26.233604908 CET	41396	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:26.356256008 CET	53	41396	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:27.750041962 CET	42988	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:27.873570919 CET	53	42988	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:27.875293016 CET	53335	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:27.998115063 CET	53	53335	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.000024080 CET	60891	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.122427940 CET	53	60891	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.124665976 CET	44784	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.247242928 CET	53	44784	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.248884916 CET	58352	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.371300936 CET	53	58352	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.373060942 CET	53241	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.495388985 CET	53	53241	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.498317003 CET	56384	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.622507095 CET	53	56384	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.624897003 CET	54409	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.748106956 CET	53	54409	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.750088930 CET	35354	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.872694016 CET	53	35354	8.8.8.8	192.168.2.13
Dec 19, 2024 22:24:28.874181032 CET	55837	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:24:28.997059107 CET	53	55837	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:09.939958096 CET	43157	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.062293053 CET	53	43157	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.098838091 CET	35186	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.221530914 CET	53	35186	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.266120911 CET	48249	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.388732910 CET	53	48249	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.401252031 CET	51028	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.524142981 CET	53	51028	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.536951065 CET	44940	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.659502983 CET	53	44940	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.675817966 CET	60883	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.798495054 CET	53	60883	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.836159945 CET	59188	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:10.958578110 CET	53	59188	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:10.992804050 CET	43472	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:11.115526915 CET	53	43472	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:11.134315014 CET	37053	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:11.256778002 CET	53	37053	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:11.266582966 CET	50108	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:11.388942957 CET	53	50108	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:12.804449081 CET	32919	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:12.926939964 CET	53	32919	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:12.945612907 CET	51912	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.068418026 CET	53	51912	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:13.086853981 CET	33562	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.209923029 CET	53	33562	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:13.222963095 CET	35221	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.345408916 CET	53	35221	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:13.375430107 CET	51766	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.497699976 CET	53	51766	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:13.528357983 CET	43997	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.650892019 CET	53	43997	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:13.685480118 CET	58735	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.807900906 CET	53	58735	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:13.834248066 CET	60905	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:13.956571102 CET	53	60905	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:14.090502977 CET	50180	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:14.213009119 CET	53	50180	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:14.231134892 CET	32797	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:14.353454113 CET	53	32797	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:15.761501074 CET	55402	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:15.884152889 CET	53	55402	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:15.900252104 CET	38616	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.022646904 CET	53	38616	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.056344986 CET	54478	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.179301977 CET	53	54478	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.194650888 CET	41501	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.317781925 CET	53	41501	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.329356909 CET	46473	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.451714039 CET	53	46473	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.462950945 CET	57763	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.585856915 CET	53	57763	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.595688105 CET	49948	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.718395948 CET	53	49948	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.725363016 CET	40506	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.848005056 CET	53	40506	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:16.861248016 CET	42463	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:16.983892918 CET	53	42463	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:17.000463009 CET	49533	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:17.122864962 CET	53	49533	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:18.528420925 CET	47193	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:18.651150942 CET	53	47193	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:18.662317038 CET	54704	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:18.784848928 CET	53	54704	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:18.799623013 CET	60708	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:18.923079014 CET	53	60708	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:18.943051100 CET	59322	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:19.065457106 CET	53	59322	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:19.075541973 CET	35644	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:19.199276924 CET	53	35644	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:19.218347073 CET	42346	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:19.340790033 CET	53	42346	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:19.348927021 CET	48253	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:19.471690893 CET	53	48253	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:19.482511997 CET	48683	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:19.605171919 CET	53	48683	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:19.755196095 CET	38603	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:19.877684116 CET	53	38603	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:19.999392986 CET	38457	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:20.122030020 CET	53	38457	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:21.574619055 CET	48858	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:21.697035074 CET	53	48858	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:21.727441072 CET	42528	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:21.850126982 CET	53	42528	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:21.867448092 CET	35285	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:21.990122080 CET	53	35285	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.007663965 CET	55828	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.129956961 CET	53	55828	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.145313978 CET	56656	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.267822981 CET	53	56656	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.274758101 CET	43718	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.397082090 CET	53	43718	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.406806946 CET	44630	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.529514074 CET	53	44630	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.538511038 CET	43525	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.662101984 CET	53	43525	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.672036886 CET	50234	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.794924974 CET	53	50234	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:22.802891016 CET	45500	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:22.925293922 CET	53	45500	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:24.482814074 CET	34599	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:24.605245113 CET	53	34599	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:24.645282984 CET	50232	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:24.767846107 CET	53	50232	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:24.776093006 CET	40862	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:24.901243925 CET	53	40862	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:24.908724070 CET	47170	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.032643080 CET	53	47170	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:25.055784941 CET	55129	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.178427935 CET	53	55129	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:25.208339930 CET	55529	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.331191063 CET	53	55529	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:25.339510918 CET	56778	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.463601112 CET	53	56778	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:25.470700979 CET	39671	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.593045950 CET	53	39671	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:25.599206924 CET	34355	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.721864939 CET	53	34355	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:25.734013081 CET	42078	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:25.856307983 CET	53	42078	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:27.250046968 CET	56919	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:27.372514009 CET	53	56919	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:27.374758959 CET	34672	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:27.497564077 CET	53	34672	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:27.500442028 CET	48447	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:27.622972012 CET	53	48447	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:27.626646042 CET	48039	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:27.749109983 CET	53	48039	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:27.753439903 CET	53237	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:27.876019955 CET	53	53237	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:27.879399061 CET	50916	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:28.002551079 CET	53	50916	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:28.005975008 CET	59620	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:28.128573895 CET	53	59620	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:28.132807970 CET	53389	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:28.255839109 CET	53	53389	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:28.260613918 CET	38134	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:28.383171082 CET	53	38134	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:28.387049913 CET	45798	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:28.509484053 CET	53	45798	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.054485083 CET	48442	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.178069115 CET	53	48442	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.182203054 CET	56761	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.304804087 CET	53	56761	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.309123993 CET	56923	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.431513071 CET	53	56923	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.436420918 CET	35018	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.558994055 CET	53	35018	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.568490982 CET	44282	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.691478968 CET	53	44282	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.710381985 CET	54254	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.834095955 CET	53	54254	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.837301016 CET	35556	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:30.962930918 CET	53	35556	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:30.983268023 CET	41615	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:31.106076002 CET	53	41615	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:31.109481096 CET	59806	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:31.232018948 CET	53	59806	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:31.234369993 CET	46049	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:31.356956005 CET	53	46049	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:32.746995926 CET	38508	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:32.869925022 CET	53	38508	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:32.871169090 CET	38182	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:32.994441032 CET	53	38182	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:32.995695114 CET	45685	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:33.118211985 CET	53	45685	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:33.119294882 CET	50328	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:33.241986990 CET	53	50328	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:33.242923975 CET	37984	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:33.366691113 CET	53	37984	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:33.367784977 CET	38035	53	192.168.2.13	8.8.8.8
Dec 19, 2024 22:25:33.490829945 CET	53	38035	8.8.8.8	192.168.2.13
Dec 19, 2024 22:25:33.491893053 CET	35198	53	192.168.2.13	8.8.8.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 19, 2024 22:23:12.405967951 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable
Dec 19, 2024 22:24:32.420458078 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 22:22:03.603127003 CET	192.168.2.13	8.8.8.8	0x2e81	Standard query (0)	raw.cardiacpure.ru	A (IP address)	IN (0x0001)	false
Dec 19, 2024 22:22:03.739435911 CET	192.168.2.13	8.8.8.8	0x915f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	379	false
Dec 19, 2024 22:22:03.863497972 CET	192.168.2.13	8.8.8.8	0x915f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	379	false
Dec 19, 2024 22:22:03.988106966 CET	192.168.2.13	8.8.8.8	0x915f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	380	false
Dec 19, 2024 22:22:04.113357067 CET	192.168.2.13	8.8.8.8	0x915f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	380	false
Dec 19, 2024 22:22:04.237209082 CET	192.168.2.13	8.8.8.8	0x915f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	380	false
Dec 19, 2024 22:22:06.451339960 CET	192.168.2.13	8.8.8.8	0xa50b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	382	false
Dec 19, 2024 22:22:06.579345942 CET	192.168.2.13	8.8.8.8	0xa50b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	382	false
Dec 19, 2024 22:22:06.704155922 CET	192.168.2.13	8.8.8.8	0xa50b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	382	false
Dec 19, 2024 22:22:06.829484940 CET	192.168.2.13	8.8.8.8	0xa50b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	382	false
Dec 19, 2024 22:22:06.956819057 CET	192.168.2.13	8.8.8.8	0xa50b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	383	false
Dec 19, 2024 22:22:09.157146931 CET	192.168.2.13	8.8.8.8	0x7443	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	385	false
Dec 19, 2024 22:22:09.282289028 CET	192.168.2.13	8.8.8.8	0x7443	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	385	false
Dec 19, 2024 22:22:09.425868988 CET	192.168.2.13	8.8.8.8	0x7443	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	385	false
Dec 19, 2024 22:22:09.552233934 CET	192.168.2.13	8.8.8.8	0x7443	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	385	false
Dec 19, 2024 22:22:09.677509069 CET	192.168.2.13	8.8.8.8	0x7443	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	385	false
Dec 19, 2024 22:22:11.818942070 CET	192.168.2.13	8.8.8.8	0x592b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	387	false
Dec 19, 2024 22:22:11.942475080 CET	192.168.2.13	8.8.8.8	0x592b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	387	false
Dec 19, 2024 22:22:12.066060066 CET	192.168.2.13	8.8.8.8	0x592b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	388	false
Dec 19, 2024 22:22:12.192011118 CET	192.168.2.13	8.8.8.8	0x592b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	388	false
Dec 19, 2024 22:22:12.315558910 CET	192.168.2.13	8.8.8.8	0x592b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	388	false
Dec 19, 2024 22:22:14.534918070 CET	192.168.2.13	8.8.8.8	0xa556	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	390	false
Dec 19, 2024 22:22:14.658196926 CET	192.168.2.13	8.8.8.8	0xa556	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	390	false
Dec 19, 2024 22:22:14.781636953 CET	192.168.2.13	8.8.8.8	0xa556	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	390	false
Dec 19, 2024 22:22:14.905545950 CET	192.168.2.13	8.8.8.8	0xa556	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	390	false
Dec 19, 2024 22:22:15.029052019 CET	192.168.2.13	8.8.8.8	0xa556	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	391	false
Dec 19, 2024 22:22:17.175510883 CET	192.168.2.13	8.8.8.8	0x4955	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	393	false
Dec 19, 2024 22:22:17.298777103 CET	192.168.2.13	8.8.8.8	0x4955	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	393	false
Dec 19, 2024 22:22:17.421828032 CET	192.168.2.13	8.8.8.8	0x4955	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	393	false
Dec 19, 2024 22:22:17.545027971 CET	192.168.2.13	8.8.8.8	0x4955	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	393	false
Dec 19, 2024 22:22:17.669080973 CET	192.168.2.13	8.8.8.8	0x4955	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	393	false
Dec 19, 2024 22:22:19.806869030 CET	192.168.2.13	8.8.8.8	0xb5f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	395	false
Dec 19, 2024 22:22:19.930473089 CET	192.168.2.13	8.8.8.8	0xb5f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	395	false
Dec 19, 2024 22:22:20.054029942 CET	192.168.2.13	8.8.8.8	0xb5f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 19, 2024 22:22:20.178006887 CET	192.168.2.13	8.8.8.8	0xb5f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 19, 2024 22:22:20.301846027 CET	192.168.2.13	8.8.8.8	0xb5f9	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 19, 2024 22:22:54.880786896 CET	192.168.2.13	8.8.8.8	0xd988	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	430	false
Dec 19, 2024 22:22:55.004432917 CET	192.168.2.13	8.8.8.8	0xd988	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 22:22:55.128067017 CET	192.168.2.13	8.8.8.8	0xd988	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 22:22:55.251617908 CET	192.168.2.13	8.8.8.8	0xd988	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 22:22:55.379062891 CET	192.168.2.13	8.8.8.8	0xd988	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	431	false
Dec 19, 2024 22:22:57.528381109 CET	192.168.2.13	8.8.8.8	0xd536	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 19, 2024 22:22:57.653752089 CET	192.168.2.13	8.8.8.8	0xd536	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 19, 2024 22:22:57.849587917 CET	192.168.2.13	8.8.8.8	0xd536	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 19, 2024 22:22:57.973817110 CET	192.168.2.13	8.8.8.8	0xd536	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	433	false
Dec 19, 2024 22:22:58.111994028 CET	192.168.2.13	8.8.8.8	0xd536	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	434	false
Dec 19, 2024 22:23:00.274081945 CET	192.168.2.13	8.8.8.8	0x1530	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 22:23:00.397547007 CET	192.168.2.13	8.8.8.8	0x1530	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 22:23:00.520761013 CET	192.168.2.13	8.8.8.8	0x1530	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 22:23:00.644408941 CET	192.168.2.13	8.8.8.8	0x1530	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 22:23:00.770982027 CET	192.168.2.13	8.8.8.8	0x1530	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	436	false
Dec 19, 2024 22:23:29.597311020 CET	192.168.2.13	1.1.1.1	0x55d7	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 22:23:29.597404003 CET	192.168.2.13	1.1.1.1	0x277	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 19, 2024 22:24:07.119755030 CET	192.168.2.13	8.8.8.8	0x740c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 19, 2024 22:24:07.244146109 CET	192.168.2.13	8.8.8.8	0x740c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 19, 2024 22:24:07.368323088 CET	192.168.2.13	8.8.8.8	0x740c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 19, 2024 22:24:07.492326975 CET	192.168.2.13	8.8.8.8	0x740c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 19, 2024 22:24:07.616863966 CET	192.168.2.13	8.8.8.8	0x740c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	503	false
Dec 19, 2024 22:24:09.867177963 CET	192.168.2.13	8.8.8.8	0xa096	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	505	false
Dec 19, 2024 22:24:09.995435953 CET	192.168.2.13	8.8.8.8	0xa096	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	506	false
Dec 19, 2024 22:24:10.121876955 CET	192.168.2.13	8.8.8.8	0xa096	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	506	false
Dec 19, 2024 22:24:10.245373011 CET	192.168.2.13	8.8.8.8	0xa096	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	506	false
Dec 19, 2024 22:24:10.369786024 CET	192.168.2.13	8.8.8.8	0xa096	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	506	false
Dec 19, 2024 22:24:12.511017084 CET	192.168.2.13	8.8.8.8	0x2601	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	508	false
Dec 19, 2024 22:24:12.636779070 CET	192.168.2.13	8.8.8.8	0x2601	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	508	false
Dec 19, 2024 22:24:12.767241955 CET	192.168.2.13	8.8.8.8	0x2601	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	508	false
Dec 19, 2024 22:24:12.891434908 CET	192.168.2.13	8.8.8.8	0x2601	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	509	false
Dec 19, 2024 22:24:13.016001940 CET	192.168.2.13	8.8.8.8	0x2601	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	509	false
Dec 19, 2024 22:24:15.162621975 CET	192.168.2.13	8.8.8.8	0x4e4a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	511	false
Dec 19, 2024 22:24:15.286626101 CET	192.168.2.13	8.8.8.8	0x4e4a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	511	false
Dec 19, 2024 22:24:15.410212040 CET	192.168.2.13	8.8.8.8	0x4e4a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	511	false
Dec 19, 2024 22:24:15.534128904 CET	192.168.2.13	8.8.8.8	0x4e4a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	511	false
Dec 19, 2024 22:24:15.659265041 CET	192.168.2.13	8.8.8.8	0x4e4a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	511	false
Dec 19, 2024 22:24:17.794703007 CET	192.168.2.13	8.8.8.8	0x803b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	257	false
Dec 19, 2024 22:24:17.919154882 CET	192.168.2.13	8.8.8.8	0x803b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	258	false
Dec 19, 2024 22:24:18.043783903 CET	192.168.2.13	8.8.8.8	0x803b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	258	false
Dec 19, 2024 22:24:18.167942047 CET	192.168.2.13	8.8.8.8	0x803b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	258	false
Dec 19, 2024 22:24:18.292351961 CET	192.168.2.13	8.8.8.8	0x803b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	258	false
Dec 19, 2024 22:24:20.427217007 CET	192.168.2.13	8.8.8.8	0xac66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	260	false
Dec 19, 2024 22:24:20.551800013 CET	192.168.2.13	8.8.8.8	0xac66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	260	false
Dec 19, 2024 22:24:20.676548958 CET	192.168.2.13	8.8.8.8	0xac66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	260	false
Dec 19, 2024 22:24:20.800888062 CET	192.168.2.13	8.8.8.8	0xac66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	260	false
Dec 19, 2024 22:24:20.925636053 CET	192.168.2.13	8.8.8.8	0xac66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	261	false
Dec 19, 2024 22:24:23.068844080 CET	192.168.2.13	8.8.8.8	0x361	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	263	false
Dec 19, 2024 22:24:23.193941116 CET	192.168.2.13	8.8.8.8	0x361	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	263	false
Dec 19, 2024 22:24:23.323661089 CET	192.168.2.13	8.8.8.8	0x361	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	263	false
Dec 19, 2024 22:24:23.449672937 CET	192.168.2.13	8.8.8.8	0x361	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	263	false
Dec 19, 2024 22:24:23.574090004 CET	192.168.2.13	8.8.8.8	0x361	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	263	false
Dec 19, 2024 22:24:25.725903988 CET	192.168.2.13	8.8.8.8	0x4f94	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	265	false
Dec 19, 2024 22:24:25.851739883 CET	192.168.2.13	8.8.8.8	0x4f94	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	265	false
Dec 19, 2024 22:24:25.976407051 CET	192.168.2.13	8.8.8.8	0x4f94	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	266	false
Dec 19, 2024 22:24:26.107095003 CET	192.168.2.13	8.8.8.8	0x4f94	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	266	false
Dec 19, 2024 22:24:26.233604908 CET	192.168.2.13	8.8.8.8	0x4f94	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	266	false
Dec 19, 2024 22:24:28.373060942 CET	192.168.2.13	8.8.8.8	0xd75f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	268	false
Dec 19, 2024 22:24:28.498317003 CET	192.168.2.13	8.8.8.8	0xd75f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	268	false
Dec 19, 2024 22:24:28.624897003 CET	192.168.2.13	8.8.8.8	0xd75f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	268	false
Dec 19, 2024 22:24:28.750088930 CET	192.168.2.13	8.8.8.8	0xd75f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	268	false
Dec 19, 2024 22:24:28.874181032 CET	192.168.2.13	8.8.8.8	0xd75f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	268	false
Dec 19, 2024 22:25:10.675817966 CET	192.168.2.13	8.8.8.8	0x2012	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	310	false
Dec 19, 2024 22:25:10.836159945 CET	192.168.2.13	8.8.8.8	0x2012	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	310	false
Dec 19, 2024 22:25:10.992804050 CET	192.168.2.13	8.8.8.8	0x2012	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 19, 2024 22:25:11.134315014 CET	192.168.2.13	8.8.8.8	0x2012	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 19, 2024 22:25:11.266582966 CET	192.168.2.13	8.8.8.8	0x2012	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 19, 2024 22:25:13.528357983 CET	192.168.2.13	8.8.8.8	0x1705	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	313	false
Dec 19, 2024 22:25:13.685480118 CET	192.168.2.13	8.8.8.8	0x1705	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	313	false
Dec 19, 2024 22:25:13.834248066 CET	192.168.2.13	8.8.8.8	0x1705	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	313	false
Dec 19, 2024 22:25:14.090502977 CET	192.168.2.13	8.8.8.8	0x1705	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	314	false
Dec 19, 2024 22:25:14.231134892 CET	192.168.2.13	8.8.8.8	0x1705	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	314	false
Dec 19, 2024 22:25:16.462950945 CET	192.168.2.13	8.8.8.8	0xee7f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 19, 2024 22:25:16.595688105 CET	192.168.2.13	8.8.8.8	0xee7f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 19, 2024 22:25:16.725363016 CET	192.168.2.13	8.8.8.8	0xee7f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 19, 2024 22:25:16.861248016 CET	192.168.2.13	8.8.8.8	0xee7f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 19, 2024 22:25:17.000463009 CET	192.168.2.13	8.8.8.8	0xee7f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	317	false
Dec 19, 2024 22:25:19.218347073 CET	192.168.2.13	8.8.8.8	0x6265	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 19, 2024 22:25:19.348927021 CET	192.168.2.13	8.8.8.8	0x6265	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 19, 2024 22:25:19.482511997 CET	192.168.2.13	8.8.8.8	0x6265	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 19, 2024 22:25:19.755196095 CET	192.168.2.13	8.8.8.8	0x6265	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 19, 2024 22:25:19.999392986 CET	192.168.2.13	8.8.8.8	0x6265	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	320	false
Dec 19, 2024 22:25:22.274758101 CET	192.168.2.13	8.8.8.8	0xc770	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 19, 2024 22:25:22.406806946 CET	192.168.2.13	8.8.8.8	0xc770	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 19, 2024 22:25:22.538511038 CET	192.168.2.13	8.8.8.8	0xc770	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 19, 2024 22:25:22.672036886 CET	192.168.2.13	8.8.8.8	0xc770	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 19, 2024 22:25:22.802891016 CET	192.168.2.13	8.8.8.8	0xc770	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 19, 2024 22:25:25.208339930 CET	192.168.2.13	8.8.8.8	0x2f3f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	325	false
Dec 19, 2024 22:25:25.339510918 CET	192.168.2.13	8.8.8.8	0x2f3f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	325	false
Dec 19, 2024 22:25:25.470700979 CET	192.168.2.13	8.8.8.8	0x2f3f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	325	false
Dec 19, 2024 22:25:25.599206924 CET	192.168.2.13	8.8.8.8	0x2f3f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	325	false
Dec 19, 2024 22:25:25.734013081 CET	192.168.2.13	8.8.8.8	0x2f3f	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	325	false
Dec 19, 2024 22:25:27.879399061 CET	192.168.2.13	8.8.8.8	0x5d68	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	328	false
Dec 19, 2024 22:25:28.005975008 CET	192.168.2.13	8.8.8.8	0x5d68	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	328	false
Dec 19, 2024 22:25:28.132807970 CET	192.168.2.13	8.8.8.8	0x5d68	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	328	false
Dec 19, 2024 22:25:28.260613918 CET	192.168.2.13	8.8.8.8	0x5d68	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	328	false
Dec 19, 2024 22:25:28.387049913 CET	192.168.2.13	8.8.8.8	0x5d68	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	328	false
Dec 19, 2024 22:25:30.710381985 CET	192.168.2.13	8.8.8.8	0x32e7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	330	false
Dec 19, 2024 22:25:30.837301016 CET	192.168.2.13	8.8.8.8	0x32e7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	330	false
Dec 19, 2024 22:25:30.983268023 CET	192.168.2.13	8.8.8.8	0x32e7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	331	false
Dec 19, 2024 22:25:31.109481096 CET	192.168.2.13	8.8.8.8	0x32e7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	331	false
Dec 19, 2024 22:25:31.234369993 CET	192.168.2.13	8.8.8.8	0x32e7	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	331	false
Dec 19, 2024 22:25:33.367784977 CET	192.168.2.13	8.8.8.8	0xe4bf	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	333	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 22:22:03.737267017 CET	8.8.8.8	192.168.2.13	0x2e81	No error (0)	raw.cardiacpure.ru	178.215.238.25	A (IP address)	IN (0x0001)	false
Dec 19, 2024 22:23:29.823127031 CET	1.1.1.1	192.168.2.13	0x55d7	No error (0)	daisy.ubuntu.com	162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 19, 2024 22:23:29.823127031 CET	1.1.1.1	192.168.2.13	0x55d7	No error (0)	daisy.ubuntu.com	162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: ngwa5.elf PID: 5423, Parent PID: 5345

General

Start time (UTC):	21:22:02
Start date (UTC):	19/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	/tmp/ngwa5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: ngwa5.elf PID: 5425, Parent PID: 5423

General

Start time (UTC):	21:22:02
Start date (UTC):	19/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: ngwa5.elf PID: 5427, Parent PID: 5425

General

Start time (UTC):	21:22:02
Start date (UTC):	19/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: ngwa5.elf PID: 5589, Parent PID: 5427

General

Start time (UTC):	21:22:05
Start date (UTC):	19/12/2024
Path:	/tmp/ngwa5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: sh PID: 5589, Parent PID: 5427

General

Start time (UTC):	21:22:05
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "ps -e -o pid,args="
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5593, Parent PID: 5589

General

Start time (UTC):	21:22:05
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: ps PID: 5593, Parent PID: 5589

General

Start time (UTC):	21:22:05
Start date (UTC):	19/12/2024
Path:	/usr/bin/ps
Arguments:	ps -e -o pid,args=
File size:	137688 bytes
MD5 hash:	ab48054475a6f70f8e7fa847331f3327

Chronological Activities

Analysis Process: gnome-session-binary PID: 5429, Parent PID: 1588

General

Start time (UTC):	21:22:03
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: sh PID: 5429, Parent PID: 1588

General

Start time (UTC):	21:22:03
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gsd-rfkill PID: 5429, Parent PID: 1588

General

Start time (UTC):	21:22:03
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-rfkill
Arguments:	/usr/libexec/gsd-rfkill
File size:	51808 bytes
MD5 hash:	88a16a3c0aba1759358c06215ecfb5cc

Chronological Activities

Analysis Process: systemd PID: 5434, Parent PID: 1

General

Start time (UTC):	21:22:04
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-hostnamed PID: 5434, Parent PID: 1

General

Start time (UTC):	21:22:04
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Chronological Activities

Analysis Process: gdm3 PID: 5582, Parent PID: 1400

General

Start time (UTC):	21:22:04
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5582, Parent PID: 1400

General

Start time (UTC):	21:22:04
Start date (UTC):	19/12/2024
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gdm3 PID: 5586, Parent PID: 1400

General

Start time (UTC):	21:22:04
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5586, Parent PID: 1400

General

Start time (UTC):	21:22:04
Start date (UTC):	19/12/2024
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemd PID: 5604, Parent PID: 1

General

Start time (UTC):	21:22:14
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-user-runtime-dir PID: 5604, Parent PID: 1

General

Start time (UTC):	21:22:14
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-user-runtime-dir
Arguments:	/lib/systemd/systemd-user-runtime-dir stop 127
File size:	22672 bytes
MD5 hash:	d55f4b0847f88131dbcfb07435178e54

Chronological Activities

Analysis Process: systemd PID: 5692, Parent PID: 1

General

Start time (UTC):	21:22:54
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: journalctl PID: 5692, Parent PID: 1

General

Start time (UTC):	21:22:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/journalctl
Arguments:	/usr/bin/journalctl --smart-relinquish-var
File size:	80120 bytes
MD5 hash:	bf3a987344f3bacafc44efd882abda8b

Chronological Activities

Analysis Process: systemd PID: 5713, Parent PID: 1

General

Start time (UTC):	21:22:54
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-journald PID: 5713, Parent PID: 1

General

Start time (UTC):	21:22:54
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

Chronological Activities

Analysis Process: systemd PID: 5716, Parent PID: 1

General

Start time (UTC):	21:22:56
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: journalctl PID: 5716, Parent PID: 1

General

Start time (UTC):	21:22:56
Start date (UTC):	19/12/2024
Path:	/usr/bin/journalctl
Arguments:	/usr/bin/journalctl --flush
File size:	80120 bytes
MD5 hash:	bf3a987344f3bacafc44efd882abda8b

Chronological Activities

Analysis Process: systemd PID: 5722, Parent PID: 1

General

Start time (UTC):	21:22:59
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5722, Parent PID: 1

General

Start time (UTC):	21:22:59
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: gdm3 PID: 5729, Parent PID: 1400

General

Start time (UTC):	21:22:59
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5729, Parent PID: 1400

General

Start time (UTC):	21:22:59
Start date (UTC):	19/12/2024
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemd PID: 5732, Parent PID: 2935

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: pulseaudio PID: 5732, Parent PID: 2935

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Chronological Activities

Analysis Process: systemd PID: 5733, Parent PID: 1

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5733, Parent PID: 1

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5736, Parent PID: 1

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-logind PID: 5736, Parent PID: 1

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Chronological Activities

Analysis Process: systemd PID: 5751, Parent PID: 1

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rtkit-daemon PID: 5751, Parent PID: 1

General

Start time (UTC):	21:23:00
Start date (UTC):	19/12/2024
Path:	/usr/libexec/rtkit-daemon
Arguments:	/usr/libexec/rtkit-daemon
File size:	68096 bytes
MD5 hash:	df0cacf1db4ec95ac70f5b6e06b8ffd7

Chronological Activities

Analysis Process: systemd PID: 5799, Parent PID: 1

General

Start time (UTC):	21:23:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: polkitd PID: 5799, Parent PID: 1

General

Start time (UTC):	21:23:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/policykit-1/polkitd
Arguments:	/usr/lib/policykit-1/polkitd --no-debug
File size:	121504 bytes
MD5 hash:	8efc9b4b5b524210ad2ea1954a9d0e69

Chronological Activities

Analysis Process: systemd PID: 5803, Parent PID: 1

General

Start time (UTC):	21:23:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gpu-manager PID: 5803, Parent PID: 1

General

Start time (UTC):	21:23:01
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: gpu-manager PID: 5804, Parent PID: 5803

General

Start time (UTC):	21:23:01
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5804, Parent PID: 5803

General

Start time (UTC):	21:23:01
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5806, Parent PID: 5804

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5806, Parent PID: 5804

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5807, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5807, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5808, Parent PID: 5807

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5808, Parent PID: 5807

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5809, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5809, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5810, Parent PID: 5809

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5810, Parent PID: 5809

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5811, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5811, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5812, Parent PID: 5811

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5812, Parent PID: 5811

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5813, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5813, Parent PID: 5803

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5814, Parent PID: 5813

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5814, Parent PID: 5813

General

Start time (UTC):	21:23:02
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5815, Parent PID: 5803

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5815, Parent PID: 5803

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5816, Parent PID: 5815

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5816, Parent PID: 5815

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5817, Parent PID: 5803

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5817, Parent PID: 5803

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5818, Parent PID: 5817

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5818, Parent PID: 5817

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5819, Parent PID: 5803

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5819, Parent PID: 5803

General

Start time (UTC):	21:23:03
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5820, Parent PID: 5819

General

Start time (UTC):	21:23:04
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5820, Parent PID: 5819

General

Start time (UTC):	21:23:04
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: systemd PID: 5805, Parent PID: 1

General

Start time (UTC):	21:23:07
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: agetty PID: 5805, Parent PID: 1

General

Start time (UTC):	21:23:07
Start date (UTC):	19/12/2024
Path:	/sbin/agetty
Arguments:	/sbin/agetty -o "-p -- \\u" --noclear tty2 linux
File size:	69000 bytes
MD5 hash:	3a374724ba7e863768139bdd60ca36f7

Chronological Activities

Analysis Process: gvfsd-fuse PID: 5824, Parent PID: 3122

General

Start time (UTC):	21:23:05
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Chronological Activities

Analysis Process: fusermount PID: 5824, Parent PID: 3122

General

Start time (UTC):	21:23:05
Start date (UTC):	19/12/2024
Path:	/bin/fusermount
Arguments:	fusermount -u -q -z -- /run/user/1000/gvfs
File size:	39144 bytes
MD5 hash:	576a1b135c82bdcbc97a91acea900566

Chronological Activities

Analysis Process: systemd PID: 5828, Parent PID: 1

General

Start time (UTC):	21:23:05
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: generate-config PID: 5828, Parent PID: 1

General

Start time (UTC):	21:23:05
Start date (UTC):	19/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: generate-config PID: 5829, Parent PID: 5828

General

Start time (UTC):	21:23:05
Start date (UTC):	19/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: pkill PID: 5829, Parent PID: 5828

General

Start time (UTC):	21:23:05
Start date (UTC):	19/12/2024
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: systemd PID: 5830, Parent PID: 1

General

Start time (UTC):	21:23:07
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gdm-wait-for-drm PID: 5830, Parent PID: 1

General

Start time (UTC):	21:23:07
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-wait-for-drm
Arguments:	/usr/lib/gdm3/gdm-wait-for-drm
File size:	14640 bytes
MD5 hash:	82043ba752c6930b4e6aaea2f7747545

Chronological Activities

Analysis Process: systemd PID: 5835, Parent PID: 1

General

Start time (UTC):	21:23:19
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: agetty PID: 5835, Parent PID: 1

General

Start time (UTC):	21:23:19
Start date (UTC):	19/12/2024
Path:	/sbin/agetty
Arguments:	/sbin/agetty -o "-p -- \\u" --noclear tty2 linux
File size:	69000 bytes
MD5 hash:	3a374724ba7e863768139bdd60ca36f7

Chronological Activities

Analysis Process: systemd PID: 5836, Parent PID: 1

General

Start time (UTC):	21:23:17
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5836, Parent PID: 1

General

Start time (UTC):	21:23:17
Start date (UTC):	19/12/2024
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5840, Parent PID: 1

General

Start time (UTC):	21:23:17
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gdm3 PID: 5840, Parent PID: 1

General

Start time (UTC):	21:23:17
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	/usr/sbin/gdm3
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: gdm3 PID: 5901, Parent PID: 5840

General

Start time (UTC):	21:23:18
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: plymouth PID: 5901, Parent PID: 5840

General

Start time (UTC):	21:23:18
Start date (UTC):	19/12/2024
Path:	/usr/bin/plymouth
Arguments:	plymouth --ping
File size:	51352 bytes
MD5 hash:	87003efd8dad470042f5e75360a8f49f

Chronological Activities

Analysis Process: gdm3 PID: 5917, Parent PID: 5840

General

Start time (UTC):	21:23:21
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: gdm-session-worker PID: 5917, Parent PID: 5840

General

Start time (UTC):	21:23:21
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	"gdm-session-worker [pam/gdm-launch-environment]"
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Chronological Activities

Analysis Process: systemd PID: 5842, Parent PID: 1

General

Start time (UTC):	21:23:17
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5842, Parent PID: 1

General

Start time (UTC):	21:23:17
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: systemd PID: 5846, Parent PID: 1

General

Start time (UTC):	21:23:18
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-logind PID: 5846, Parent PID: 1

General

Start time (UTC):	21:23:18
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Chronological Activities

Analysis Process: systemd PID: 5902, Parent PID: 1

General

Start time (UTC):	21:23:19
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: accounts-daemon PID: 5902, Parent PID: 1

General

Start time (UTC):	21:23:19
Start date (UTC):	19/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	/usr/lib/accountsservice/accounts-daemon
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Chronological Activities

Analysis Process: accounts-daemon PID: 5908, Parent PID: 5902

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	-
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Chronological Activities

Analysis Process: language-validate PID: 5908, Parent PID: 5902

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	/usr/share/language-tools/language-validate en_US.UTF-8
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: language-validate PID: 5909, Parent PID: 5908

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: language-options PID: 5909, Parent PID: 5908

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	/usr/share/language-tools/language-options
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Chronological Activities

Analysis Process: language-options PID: 5910, Parent PID: 5909

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	-
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Chronological Activities

Analysis Process: sh PID: 5910, Parent PID: 5909

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "locale -a \| grep -F .utf8 "
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5911, Parent PID: 5910

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: locale PID: 5911, Parent PID: 5910

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/bin/locale
Arguments:	locale -a
File size:	58944 bytes
MD5 hash:	c72a78792469db86d91369c9057f20d2

Chronological Activities

Analysis Process: sh PID: 5912, Parent PID: 5910

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5912, Parent PID: 5910

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -F .utf8
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: systemd PID: 5913, Parent PID: 1

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: polkitd PID: 5913, Parent PID: 1

General

Start time (UTC):	21:23:20
Start date (UTC):	19/12/2024
Path:	/usr/lib/policykit-1/polkitd
Arguments:	/usr/lib/policykit-1/polkitd --no-debug
File size:	121504 bytes
MD5 hash:	8efc9b4b5b524210ad2ea1954a9d0e69

Chronological Activities

Analysis Process: systemd PID: 5921, Parent PID: 1

General

Start time (UTC):	21:23:23
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: agetty PID: 5921, Parent PID: 1

General

Start time (UTC):	21:23:23
Start date (UTC):	19/12/2024
Path:	/sbin/agetty
Arguments:	/sbin/agetty -o "-p -- \\u" --noclear tty2 linux
File size:	69000 bytes
MD5 hash:	3a374724ba7e863768139bdd60ca36f7

Chronological Activities

Analysis Process: systemd PID: 5922, Parent PID: 1

General

Start time (UTC):	21:23:23
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5922, Parent PID: 1

General

Start time (UTC):	21:23:23
Start date (UTC):	19/12/2024
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5929, Parent PID: 1

General

Start time (UTC):	21:23:24
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gpu-manager PID: 5929, Parent PID: 1

General

Start time (UTC):	21:23:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: gpu-manager PID: 5932, Parent PID: 5929

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5932, Parent PID: 5929

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5933, Parent PID: 5932

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5933, Parent PID: 5932

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5934, Parent PID: 5929

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5934, Parent PID: 5929

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5935, Parent PID: 5934

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5935, Parent PID: 5934

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5938, Parent PID: 5929

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5938, Parent PID: 5929

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5939, Parent PID: 5938

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5939, Parent PID: 5938

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5940, Parent PID: 5929

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5940, Parent PID: 5929

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5941, Parent PID: 5940

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5941, Parent PID: 5940

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5942, Parent PID: 5929

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5942, Parent PID: 5929

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5943, Parent PID: 5942

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5943, Parent PID: 5942

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5944, Parent PID: 5929

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5944, Parent PID: 5929

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5945, Parent PID: 5944

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5945, Parent PID: 5944

General

Start time (UTC):	21:23:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5946, Parent PID: 5929

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5946, Parent PID: 5929

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5947, Parent PID: 5946

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5947, Parent PID: 5946

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 6006, Parent PID: 5929

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 6006, Parent PID: 5929

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6007, Parent PID: 6006

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 6007, Parent PID: 6006

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: systemd PID: 5937, Parent PID: 1

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5937, Parent PID: 1

General

Start time (UTC):	21:23:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: systemd PID: 5951, Parent PID: 1

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-logind PID: 5951, Parent PID: 1

General

Start time (UTC):	21:23:27
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Chronological Activities

Analysis Process: systemd PID: 6010, Parent PID: 1

General

Start time (UTC):	21:23:29
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: generate-config PID: 6010, Parent PID: 1

General

Start time (UTC):	21:23:29
Start date (UTC):	19/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: generate-config PID: 6011, Parent PID: 6010

General

Start time (UTC):	21:23:29
Start date (UTC):	19/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: pkill PID: 6011, Parent PID: 6010

General

Start time (UTC):	21:23:29
Start date (UTC):	19/12/2024
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: systemd PID: 6014, Parent PID: 1

General

Start time (UTC):	21:23:32
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: gdm-wait-for-drm PID: 6014, Parent PID: 1

General

Start time (UTC):	21:23:32
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-wait-for-drm
Arguments:	/usr/lib/gdm3/gdm-wait-for-drm
File size:	14640 bytes
MD5 hash:	82043ba752c6930b4e6aaea2f7747545

Analysis Process: systemd PID: 6019, Parent PID: 1

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: gdm3 PID: 6019, Parent PID: 1

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	/usr/sbin/gdm3
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: gdm3 PID: 6022, Parent PID: 6019

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: plymouth PID: 6022, Parent PID: 6019

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/bin/plymouth
Arguments:	plymouth --ping
File size:	51352 bytes
MD5 hash:	87003efd8dad470042f5e75360a8f49f

Analysis Process: gdm3 PID: 6036, Parent PID: 6019

General

Start time (UTC):	21:23:44
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: gdm-session-worker PID: 6036, Parent PID: 6019

General

Start time (UTC):	21:23:44
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	"gdm-session-worker [pam/gdm-launch-environment]"
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Analysis Process: gdm-session-worker PID: 6051, Parent PID: 6036

General

Start time (UTC):	21:23:49
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	-
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Analysis Process: gdm-wayland-session PID: 6051, Parent PID: 6036

General

Start time (UTC):	21:23:49
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-wayland-session
Arguments:	/usr/lib/gdm3/gdm-wayland-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"
File size:	76368 bytes
MD5 hash:	d3def63cf1e83f7fb8a0f13b1744ff7c

Analysis Process: gdm-wayland-session PID: 6060, Parent PID: 6051

General

Start time (UTC):	21:23:51
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-wayland-session
Arguments:	-
File size:	76368 bytes
MD5 hash:	d3def63cf1e83f7fb8a0f13b1744ff7c

Analysis Process: dbus-run-session PID: 6060, Parent PID: 6051

General

Start time (UTC):	21:23:51
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-run-session
Arguments:	dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: dbus-run-session PID: 6061, Parent PID: 6060

General

Start time (UTC):	21:23:51
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: dbus-daemon PID: 6061, Parent PID: 6060

General

Start time (UTC):	21:23:51
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	dbus-daemon --nofork --print-address 4 --session
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6067, Parent PID: 6061

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6068, Parent PID: 6067

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6068, Parent PID: 6067

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6070, Parent PID: 6061

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6071, Parent PID: 6070

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6071, Parent PID: 6070

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6072, Parent PID: 6061

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6073, Parent PID: 6072

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6073, Parent PID: 6072

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6074, Parent PID: 6061

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6075, Parent PID: 6074

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6075, Parent PID: 6074

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6076, Parent PID: 6061

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6077, Parent PID: 6076

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6077, Parent PID: 6076

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6078, Parent PID: 6061

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6079, Parent PID: 6078

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6079, Parent PID: 6078

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6083, Parent PID: 6061

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6084, Parent PID: 6083

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6084, Parent PID: 6083

General

Start time (UTC):	21:23:54
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-run-session PID: 6063, Parent PID: 6060

General

Start time (UTC):	21:23:52
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: gnome-session PID: 6063, Parent PID: 6060

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/usr/bin/gnome-session
Arguments:	gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gnome-session-binary PID: 6063, Parent PID: 6060

General

Start time (UTC):	21:23:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	/usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: gnome-session-binary PID: 6085, Parent PID: 6063

General

Start time (UTC):	21:23:55
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: session-migration PID: 6085, Parent PID: 6063

General

Start time (UTC):	21:23:55
Start date (UTC):	19/12/2024
Path:	/usr/bin/session-migration
Arguments:	session-migration
File size:	22680 bytes
MD5 hash:	5227af42ebf14ac2fe2acddb002f68dc

Analysis Process: gnome-session-binary PID: 6086, Parent PID: 6063

General

Start time (UTC):	21:23:55
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6086, Parent PID: 6063

General

Start time (UTC):	21:23:55
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gnome-shell PID: 6086, Parent PID: 6063

General

Start time (UTC):	21:23:55
Start date (UTC):	19/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	/usr/bin/gnome-shell
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Analysis Process: gdm3 PID: 6092, Parent PID: 6019

General

Start time (UTC):	21:23:59
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: gdm-session-worker PID: 6092, Parent PID: 6019

General

Start time (UTC):	21:23:59
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	"gdm-session-worker [pam/gdm-launch-environment]"
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Analysis Process: gdm-session-worker PID: 6099, Parent PID: 6092

General

Start time (UTC):	21:24:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	-
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Analysis Process: gdm-x-session PID: 6099, Parent PID: 6092

General

Start time (UTC):	21:24:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	/usr/lib/gdm3/gdm-x-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Analysis Process: gdm-x-session PID: 6101, Parent PID: 6099

General

Start time (UTC):	21:24:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	-
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Analysis Process: Xorg PID: 6101, Parent PID: 6099

General

Start time (UTC):	21:24:01
Start date (UTC):	19/12/2024
Path:	/usr/bin/Xorg
Arguments:	/usr/bin/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: Xorg.wrap PID: 6101, Parent PID: 6099

General

Start time (UTC):	21:24:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/xorg/Xorg.wrap
Arguments:	/usr/lib/xorg/Xorg.wrap vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3
File size:	14488 bytes
MD5 hash:	48993830888200ecf19dd7def0884dfd

Analysis Process: Xorg PID: 6101, Parent PID: 6099

General

Start time (UTC):	21:24:01
Start date (UTC):	19/12/2024
Path:	/usr/lib/xorg/Xorg
Arguments:	/usr/lib/xorg/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Analysis Process: Xorg PID: 6110, Parent PID: 6101

General

Start time (UTC):	21:24:11
Start date (UTC):	19/12/2024
Path:	/usr/lib/xorg/Xorg
Arguments:	-
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Analysis Process: sh PID: 6110, Parent PID: 6101

General

Start time (UTC):	21:24:11
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6111, Parent PID: 6110

General

Start time (UTC):	21:24:11
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: xkbcomp PID: 6111, Parent PID: 6110

General

Start time (UTC):	21:24:11
Start date (UTC):	19/12/2024
Path:	/usr/bin/xkbcomp
Arguments:	/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm
File size:	217184 bytes
MD5 hash:	c5f953aec4c00d2a1cc27acb75d62c9b

Analysis Process: Xorg PID: 6338, Parent PID: 6101

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/lib/xorg/Xorg
Arguments:	-
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Analysis Process: sh PID: 6338, Parent PID: 6101

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6339, Parent PID: 6338

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: xkbcomp PID: 6339, Parent PID: 6338

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/bin/xkbcomp
Arguments:	/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm
File size:	217184 bytes
MD5 hash:	c5f953aec4c00d2a1cc27acb75d62c9b

Analysis Process: gdm-x-session PID: 6116, Parent PID: 6099

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	-
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Analysis Process: Default PID: 6116, Parent PID: 6099

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/etc/gdm3/Prime/Default
Arguments:	/etc/gdm3/Prime/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gdm-x-session PID: 6117, Parent PID: 6099

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	-
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Analysis Process: dbus-run-session PID: 6117, Parent PID: 6099

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-run-session
Arguments:	dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: dbus-run-session PID: 6118, Parent PID: 6117

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: dbus-daemon PID: 6118, Parent PID: 6117

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	dbus-daemon --nofork --print-address 4 --session
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6131, Parent PID: 6118

General

Start time (UTC):	21:24:21
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6132, Parent PID: 6131

General

Start time (UTC):	21:24:21
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: at-spi-bus-launcher PID: 6132, Parent PID: 6131

General

Start time (UTC):	21:24:21
Start date (UTC):	19/12/2024
Path:	/usr/libexec/at-spi-bus-launcher
Arguments:	/usr/libexec/at-spi-bus-launcher
File size:	27008 bytes
MD5 hash:	1563f274acd4e7ba530a55bdc4c95682

Analysis Process: at-spi-bus-launcher PID: 6137, Parent PID: 6132

General

Start time (UTC):	21:24:22
Start date (UTC):	19/12/2024
Path:	/usr/libexec/at-spi-bus-launcher
Arguments:	-
File size:	27008 bytes
MD5 hash:	1563f274acd4e7ba530a55bdc4c95682

Analysis Process: dbus-daemon PID: 6137, Parent PID: 6132

General

Start time (UTC):	21:24:22
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 3
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6498, Parent PID: 6137

General

Start time (UTC):	21:24:41
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6499, Parent PID: 6498

General

Start time (UTC):	21:24:41
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: at-spi2-registryd PID: 6499, Parent PID: 6498

General

Start time (UTC):	21:24:41
Start date (UTC):	19/12/2024
Path:	/usr/libexec/at-spi2-registryd
Arguments:	/usr/libexec/at-spi2-registryd --use-gnome-session
File size:	100224 bytes
MD5 hash:	1d904c2693452edebc7ede3a9e24d440

Analysis Process: dbus-daemon PID: 6158, Parent PID: 6118

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6159, Parent PID: 6158

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6159, Parent PID: 6158

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6161, Parent PID: 6118

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6162, Parent PID: 6161

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6162, Parent PID: 6161

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6165, Parent PID: 6118

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6166, Parent PID: 6165

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6166, Parent PID: 6165

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6167, Parent PID: 6118

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6168, Parent PID: 6167

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6168, Parent PID: 6167

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6169, Parent PID: 6118

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6170, Parent PID: 6169

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6170, Parent PID: 6169

General

Start time (UTC):	21:24:24
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6171, Parent PID: 6118

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6172, Parent PID: 6171

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6172, Parent PID: 6171

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6174, Parent PID: 6118

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6175, Parent PID: 6174

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6175, Parent PID: 6174

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6340, Parent PID: 6118

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6341, Parent PID: 6340

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: ibus-portal PID: 6341, Parent PID: 6340

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/libexec/ibus-portal
Arguments:	/usr/libexec/ibus-portal
File size:	92536 bytes
MD5 hash:	562ad55bd9a4d54bd7b76746b01e37d3

Analysis Process: dbus-daemon PID: 6514, Parent PID: 6118

General

Start time (UTC):	21:24:44
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6515, Parent PID: 6514

General

Start time (UTC):	21:24:44
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: gjs PID: 6515, Parent PID: 6514

General

Start time (UTC):	21:24:44
Start date (UTC):	19/12/2024
Path:	/usr/bin/gjs
Arguments:	/usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications
File size:	23128 bytes
MD5 hash:	5f3eceb792bb65c22f23d1efb4fde3ad

Analysis Process: dbus-daemon PID: 6707, Parent PID: 6118

General

Start time (UTC):	21:24:58
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6708, Parent PID: 6707

General

Start time (UTC):	21:24:58
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6708, Parent PID: 6707

General

Start time (UTC):	21:24:59
Start date (UTC):	19/12/2024
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-run-session PID: 6119, Parent PID: 6117

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: gnome-session PID: 6119, Parent PID: 6117

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/bin/gnome-session
Arguments:	gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gnome-session-binary PID: 6119, Parent PID: 6117

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	/usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: gnome-session-binary PID: 6120, Parent PID: 6119

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: gnome-session-check-accelerated PID: 6120, Parent PID: 6119

General

Start time (UTC):	21:24:16
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-check-accelerated
Arguments:	/usr/libexec/gnome-session-check-accelerated
File size:	18752 bytes
MD5 hash:	a64839518af85b2b9de31aca27646396

Analysis Process: gnome-session-check-accelerated PID: 6138, Parent PID: 6120

General

Start time (UTC):	21:24:22
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-check-accelerated
Arguments:	-
File size:	18752 bytes
MD5 hash:	a64839518af85b2b9de31aca27646396

Analysis Process: gnome-session-check-accelerated-gl-helper PID: 6138, Parent PID: 6120

General

Start time (UTC):	21:24:22
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-check-accelerated-gl-helper
Arguments:	/usr/libexec/gnome-session-check-accelerated-gl-helper --print-renderer
File size:	22920 bytes
MD5 hash:	b1ab9a384f9e98a39ae5c36037dd5e78

Analysis Process: gnome-session-check-accelerated PID: 6147, Parent PID: 6120

General

Start time (UTC):	21:24:23
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-check-accelerated
Arguments:	-
File size:	18752 bytes
MD5 hash:	a64839518af85b2b9de31aca27646396

Analysis Process: gnome-session-check-accelerated-gles-helper PID: 6147, Parent PID: 6120

General

Start time (UTC):	21:24:23
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-check-accelerated-gles-helper
Arguments:	/usr/libexec/gnome-session-check-accelerated-gles-helper --print-renderer
File size:	14728 bytes
MD5 hash:	1bd78885765a18e60c05ed1fb5fa3bf8

Analysis Process: gnome-session-binary PID: 6176, Parent PID: 6119

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: session-migration PID: 6176, Parent PID: 6119

General

Start time (UTC):	21:24:25
Start date (UTC):	19/12/2024
Path:	/usr/bin/session-migration
Arguments:	session-migration
File size:	22680 bytes
MD5 hash:	5227af42ebf14ac2fe2acddb002f68dc

Analysis Process: gnome-session-binary PID: 6177, Parent PID: 6119

General

Start time (UTC):	21:24:26
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6177, Parent PID: 6119

General

Start time (UTC):	21:24:26
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gnome-shell PID: 6177, Parent PID: 6119

General

Start time (UTC):	21:24:26
Start date (UTC):	19/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	/usr/bin/gnome-shell
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Analysis Process: gnome-shell PID: 6328, Parent PID: 6177

General

Start time (UTC):	21:24:35
Start date (UTC):	19/12/2024
Path:	/usr/bin/gnome-shell
Arguments:	-
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Analysis Process: ibus-daemon PID: 6328, Parent PID: 6177

General

Start time (UTC):	21:24:35
Start date (UTC):	19/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	ibus-daemon --panel disable --xim
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-daemon PID: 6334, Parent PID: 6328

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-memconf PID: 6334, Parent PID: 6328

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/libexec/ibus-memconf
Arguments:	/usr/libexec/ibus-memconf
File size:	22904 bytes
MD5 hash:	523e939905910d06598e66385761a822

Analysis Process: ibus-daemon PID: 6336, Parent PID: 6328

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-daemon PID: 6337, Parent PID: 6336

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-x11 PID: 6337, Parent PID: 1

General

Start time (UTC):	21:24:36
Start date (UTC):	19/12/2024
Path:	/usr/libexec/ibus-x11
Arguments:	/usr/libexec/ibus-x11 --kill-daemon
File size:	100352 bytes
MD5 hash:	2aa1e54666191243814c2733d6992dbd

Analysis Process: ibus-daemon PID: 6550, Parent PID: 6328

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-engine-simple PID: 6550, Parent PID: 6328

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/ibus-engine-simple
Arguments:	/usr/libexec/ibus-engine-simple
File size:	14712 bytes
MD5 hash:	0238866d5e8802a0ce1b1b9af8cb1376

Analysis Process: gnome-session-binary PID: 6528, Parent PID: 6119

General

Start time (UTC):	21:24:49
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6528, Parent PID: 6119

General

Start time (UTC):	21:24:49
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sharing
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-sharing PID: 6528, Parent PID: 6119

General

Start time (UTC):	21:24:49
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-sharing
Arguments:	/usr/libexec/gsd-sharing
File size:	35424 bytes
MD5 hash:	e29d9025d98590fbb69f89fdbd4438b3

Analysis Process: gnome-session-binary PID: 6530, Parent PID: 6119

General

Start time (UTC):	21:24:49
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6530, Parent PID: 6119

General

Start time (UTC):	21:24:49
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-wacom
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-wacom PID: 6530, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-wacom
Arguments:	/usr/libexec/gsd-wacom
File size:	39520 bytes
MD5 hash:	13778dd1a23a4e94ddc17ac9caa4fcc1

Analysis Process: gnome-session-binary PID: 6534, Parent PID: 6119

General

Start time (UTC):	21:24:49
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6534, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-color
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-color PID: 6534, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-color
Arguments:	/usr/libexec/gsd-color
File size:	92832 bytes
MD5 hash:	ac2861ad93ce047283e8e87cefef9a19

Analysis Process: gnome-session-binary PID: 6536, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6536, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-keyboard
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-keyboard PID: 6536, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-keyboard
Arguments:	/usr/libexec/gsd-keyboard
File size:	39760 bytes
MD5 hash:	8e288fd17c80bb0a1148b964b2ac2279

Analysis Process: gnome-session-binary PID: 6537, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6537, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-print-notifications
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-print-notifications PID: 6537, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-print-notifications
Arguments:	/usr/libexec/gsd-print-notifications
File size:	51840 bytes
MD5 hash:	71539698aa691718cee775d6b9450ae2

Analysis Process: gsd-print-notifications PID: 6572, Parent PID: 6537

General

Start time (UTC):	21:24:57
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-print-notifications
Arguments:	-
File size:	51840 bytes
MD5 hash:	71539698aa691718cee775d6b9450ae2

Analysis Process: gsd-print-notifications PID: 6573, Parent PID: 6572

General

Start time (UTC):	21:24:57
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-print-notifications
Arguments:	-
File size:	51840 bytes
MD5 hash:	71539698aa691718cee775d6b9450ae2

Analysis Process: gsd-printer PID: 6573, Parent PID: 1

General

Start time (UTC):	21:24:58
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-printer
Arguments:	/usr/libexec/gsd-printer
File size:	31120 bytes
MD5 hash:	7995828cf98c315fd55f2ffb3b22384d

Analysis Process: gnome-session-binary PID: 6538, Parent PID: 6119

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6538, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-rfkill PID: 6538, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-rfkill
Arguments:	/usr/libexec/gsd-rfkill
File size:	51808 bytes
MD5 hash:	88a16a3c0aba1759358c06215ecfb5cc

Analysis Process: gnome-session-binary PID: 6540, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6540, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-smartcard
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-smartcard PID: 6540, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-smartcard
Arguments:	/usr/libexec/gsd-smartcard
File size:	109152 bytes
MD5 hash:	ea1fbd7f62e4cd0331eae2ef754ee605

Analysis Process: gnome-session-binary PID: 6542, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6542, Parent PID: 6119

General

Start time (UTC):	21:24:51
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-datetime
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-datetime PID: 6542, Parent PID: 6119

General

Start time (UTC):	21:24:52
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-datetime
Arguments:	/usr/libexec/gsd-datetime
File size:	76736 bytes
MD5 hash:	d80d39745740de37d6634d36e344d4bc

Analysis Process: gnome-session-binary PID: 6543, Parent PID: 6119

General

Start time (UTC):	21:24:52
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6543, Parent PID: 6119

General

Start time (UTC):	21:24:52
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-media-keys PID: 6543, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-media-keys
Arguments:	/usr/libexec/gsd-media-keys
File size:	232936 bytes
MD5 hash:	a425448c135afb4b8bfd79cc0b6b74da

Analysis Process: gnome-session-binary PID: 6546, Parent PID: 6119

General

Start time (UTC):	21:24:52
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6546, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-screensaver-proxy
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-screensaver-proxy PID: 6546, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-screensaver-proxy
Arguments:	/usr/libexec/gsd-screensaver-proxy
File size:	27232 bytes
MD5 hash:	77e309450c87dceee43f1a9e50cc0d02

Analysis Process: gnome-session-binary PID: 6548, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6548, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sound
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-sound PID: 6548, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-sound
Arguments:	/usr/libexec/gsd-sound
File size:	31248 bytes
MD5 hash:	4c7d3fb993463337b4a0eb5c80c760ee

Analysis Process: gnome-session-binary PID: 6551, Parent PID: 6119

General

Start time (UTC):	21:24:53
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6551, Parent PID: 6119

General

Start time (UTC):	21:24:54
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-a11y-settings
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-a11y-settings PID: 6551, Parent PID: 6119

General

Start time (UTC):	21:24:54
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-a11y-settings
Arguments:	/usr/libexec/gsd-a11y-settings
File size:	23056 bytes
MD5 hash:	18e243d2cf30ecee7ea89d1462725c5c

Analysis Process: gnome-session-binary PID: 6555, Parent PID: 6119

General

Start time (UTC):	21:24:54
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6555, Parent PID: 6119

General

Start time (UTC):	21:24:54
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-housekeeping
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-housekeeping PID: 6555, Parent PID: 6119

General

Start time (UTC):	21:24:55
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-housekeeping
Arguments:	/usr/libexec/gsd-housekeeping
File size:	51840 bytes
MD5 hash:	b55f3394a84976ddb92a2915e5d76914

Analysis Process: gnome-session-binary PID: 6558, Parent PID: 6119

General

Start time (UTC):	21:24:55
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6558, Parent PID: 6119

General

Start time (UTC):	21:24:55
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-power
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-power PID: 6558, Parent PID: 6119

General

Start time (UTC):	21:24:55
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gsd-power
Arguments:	/usr/libexec/gsd-power
File size:	88672 bytes
MD5 hash:	28b8e1b43c3e7f1db6741ea1ecd978b7

Analysis Process: gnome-session-binary PID: 7057, Parent PID: 6119

General

Start time (UTC):	21:25:19
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 7057, Parent PID: 6119

General

Start time (UTC):	21:25:20
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/spice-vdagent
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: spice-vdagent PID: 7057, Parent PID: 6119

General

Start time (UTC):	21:25:20
Start date (UTC):	19/12/2024
Path:	/usr/bin/spice-vdagent
Arguments:	/usr/bin/spice-vdagent
File size:	80664 bytes
MD5 hash:	80fb7f613aa78d1b8a229dbcf4577a9d

Analysis Process: gnome-session-binary PID: 7060, Parent PID: 6119

General

Start time (UTC):	21:25:22
Start date (UTC):	19/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 7060, Parent PID: 6119

General

Start time (UTC):	21:25:22
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh xbrlapi -q
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: xbrlapi PID: 7060, Parent PID: 6119

General

Start time (UTC):	21:25:23
Start date (UTC):	19/12/2024
Path:	/usr/bin/xbrlapi
Arguments:	xbrlapi -q
File size:	166384 bytes
MD5 hash:	0cfe25df39d38af32d6265ed947ca5b9

Analysis Process: gdm3 PID: 6093, Parent PID: 6019

General

Start time (UTC):	21:23:59
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: Default PID: 6093, Parent PID: 6019

General

Start time (UTC):	21:23:59
Start date (UTC):	19/12/2024
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gdm3 PID: 6094, Parent PID: 6019

General

Start time (UTC):	21:23:59
Start date (UTC):	19/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: Default PID: 6094, Parent PID: 6019

General

Start time (UTC):	21:23:59
Start date (UTC):	19/12/2024
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemd PID: 6023, Parent PID: 1

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: accounts-daemon PID: 6023, Parent PID: 1

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	/usr/lib/accountsservice/accounts-daemon
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: accounts-daemon PID: 6027, Parent PID: 6023

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	-
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: language-validate PID: 6027, Parent PID: 6023

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	/usr/share/language-tools/language-validate en_US.UTF-8
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-validate PID: 6028, Parent PID: 6027

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-validate
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-options PID: 6028, Parent PID: 6027

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	/usr/share/language-tools/language-options
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: language-options PID: 6029, Parent PID: 6028

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/share/language-tools/language-options
Arguments:	-
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: sh PID: 6029, Parent PID: 6028

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	sh -c "locale -a \| grep -F .utf8 "
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 6030, Parent PID: 6029

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: locale PID: 6030, Parent PID: 6029

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/bin/locale
Arguments:	locale -a
File size:	58944 bytes
MD5 hash:	c72a78792469db86d91369c9057f20d2

Analysis Process: sh PID: 6031, Parent PID: 6029

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: grep PID: 6031, Parent PID: 6029

General

Start time (UTC):	21:23:42
Start date (UTC):	19/12/2024
Path:	/usr/bin/grep
Arguments:	grep -F .utf8
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Analysis Process: systemd PID: 6032, Parent PID: 1

General

Start time (UTC):	21:23:43
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: polkitd PID: 6032, Parent PID: 1

General

Start time (UTC):	21:23:43
Start date (UTC):	19/12/2024
Path:	/usr/lib/policykit-1/polkitd
Arguments:	/usr/lib/policykit-1/polkitd --no-debug
File size:	121504 bytes
MD5 hash:	8efc9b4b5b524210ad2ea1954a9d0e69

Analysis Process: systemd PID: 6042, Parent PID: 1

General

Start time (UTC):	21:23:45
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-user-runtime-dir PID: 6042, Parent PID: 1

General

Start time (UTC):	21:23:45
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-user-runtime-dir
Arguments:	/lib/systemd/systemd-user-runtime-dir start 127
File size:	22672 bytes
MD5 hash:	d55f4b0847f88131dbcfb07435178e54

Analysis Process: systemd PID: 6044, Parent PID: 1

General

Start time (UTC):	21:23:46
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd PID: 6044, Parent PID: 1

General

Start time (UTC):	21:23:46
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	/lib/systemd/systemd --user
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd PID: 6046, Parent PID: 6044

General

Start time (UTC):	21:23:46
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd PID: 6047, Parent PID: 6046

General

Start time (UTC):	21:23:46
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: 30-systemd-environment-d-generator PID: 6047, Parent PID: 6046

General

Start time (UTC):	21:23:46
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator
Arguments:	/usr/lib/systemd/user-environment-generators/30-systemd-environment-d-generator
File size:	14480 bytes
MD5 hash:	42417da8051ba8ee0eea7854c62d99ca

Analysis Process: systemd PID: 6049, Parent PID: 6044

General

Start time (UTC):	21:23:48
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemctl PID: 6049, Parent PID: 6044

General

Start time (UTC):	21:23:48
Start date (UTC):	19/12/2024
Path:	/bin/systemctl
Arguments:	/bin/systemctl --user set-environment DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/127/bus
File size:	996584 bytes
MD5 hash:	4deddfb6741481f68aeac522cc26ff4b

Analysis Process: systemd PID: 6050, Parent PID: 6044

General

Start time (UTC):	21:23:49
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: pulseaudio PID: 6050, Parent PID: 6044

General

Start time (UTC):	21:23:49
Start date (UTC):	19/12/2024
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Analysis Process: systemd PID: 6055, Parent PID: 6044

General

Start time (UTC):	21:23:50
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: dbus-daemon PID: 6055, Parent PID: 6044

General

Start time (UTC):	21:23:50
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: systemd PID: 6385, Parent PID: 6044

General

Start time (UTC):	21:24:39
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: pulseaudio PID: 6385, Parent PID: 6044

General

Start time (UTC):	21:24:40
Start date (UTC):	19/12/2024
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Analysis Process: systemd PID: 6056, Parent PID: 1

General

Start time (UTC):	21:23:50
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: rtkit-daemon PID: 6056, Parent PID: 1

General

Start time (UTC):	21:23:50
Start date (UTC):	19/12/2024
Path:	/usr/libexec/rtkit-daemon
Arguments:	/usr/libexec/rtkit-daemon
File size:	68096 bytes
MD5 hash:	df0cacf1db4ec95ac70f5b6e06b8ffd7

Analysis Process: systemd PID: 6199, Parent PID: 1

General

Start time (UTC):	21:24:34
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-localed PID: 6199, Parent PID: 1

General

Start time (UTC):	21:24:34
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-localed
Arguments:	/lib/systemd/systemd-localed
File size:	43232 bytes
MD5 hash:	1244af9646256d49594f2a8203329aa9

Analysis Process: systemd PID: 6330, Parent PID: 2935

General

Start time (UTC):	21:24:35
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: dbus-daemon PID: 6330, Parent PID: 2935

General

Start time (UTC):	21:24:35
Start date (UTC):	19/12/2024
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: systemd PID: 6331, Parent PID: 2935

General

Start time (UTC):	21:24:35
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: pulseaudio PID: 6331, Parent PID: 2935

General

Start time (UTC):	21:24:35
Start date (UTC):	19/12/2024
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Analysis Process: systemd PID: 6347, Parent PID: 1

General

Start time (UTC):	21:24:39
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: upowerd PID: 6347, Parent PID: 1

General

Start time (UTC):	21:24:39
Start date (UTC):	19/12/2024
Path:	/usr/lib/upower/upowerd
Arguments:	/usr/lib/upower/upowerd
File size:	260328 bytes
MD5 hash:	1253eea2fe5fe4017069664284e326cd

Analysis Process: systemd PID: 6391, Parent PID: 1

General

Start time (UTC):	21:24:40
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: geoclue PID: 6391, Parent PID: 1

General

Start time (UTC):	21:24:40
Start date (UTC):	19/12/2024
Path:	/usr/libexec/geoclue
Arguments:	/usr/libexec/geoclue
File size:	301544 bytes
MD5 hash:	30ac5455f3c598dde91dc87477fb19f7

Analysis Process: systemd PID: 6506, Parent PID: 1

General

Start time (UTC):	21:24:42
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: wpa_supplicant PID: 6506, Parent PID: 1

General

Start time (UTC):	21:24:42
Start date (UTC):	19/12/2024
Path:	/sbin/wpa_supplicant
Arguments:	/sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
File size:	2893136 bytes
MD5 hash:	2a5acf2a7a908a1388a09991ed7881e1

Analysis Process: systemd PID: 6508, Parent PID: 1

General

Start time (UTC):	21:24:43
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: avahi-daemon PID: 6508, Parent PID: 1

General

Start time (UTC):	21:24:43
Start date (UTC):	19/12/2024
Path:	/usr/sbin/avahi-daemon
Arguments:	/usr/sbin/avahi-daemon -s
File size:	141832 bytes
MD5 hash:	0125e88392fec809934928f8638511ff

Analysis Process: avahi-daemon PID: 6510, Parent PID: 6508

General

Start time (UTC):	21:24:44
Start date (UTC):	19/12/2024
Path:	/usr/sbin/avahi-daemon
Arguments:	-
File size:	141832 bytes
MD5 hash:	0125e88392fec809934928f8638511ff

Analysis Process: systemd PID: 6509, Parent PID: 1

General

Start time (UTC):	21:24:44
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: packagekitd PID: 6509, Parent PID: 1

General

Start time (UTC):	21:24:44
Start date (UTC):	19/12/2024
Path:	/usr/lib/packagekit/packagekitd
Arguments:	/usr/lib/packagekit/packagekitd
File size:	289288 bytes
MD5 hash:	46b0c31f013b71a0eb63b1c040f11c86

Analysis Process: packagekitd PID: 6535, Parent PID: 6509

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/lib/packagekit/packagekitd
Arguments:	-
File size:	289288 bytes
MD5 hash:	46b0c31f013b71a0eb63b1c040f11c86

Analysis Process: dpkg PID: 6535, Parent PID: 6509

General

Start time (UTC):	21:24:50
Start date (UTC):	19/12/2024
Path:	/usr/bin/dpkg
Arguments:	/usr/bin/dpkg --print-foreign-architectures
File size:	309944 bytes
MD5 hash:	5e18156b434fc45062eec2f28b9147be

Analysis Process: systemd PID: 6574, Parent PID: 1

General

Start time (UTC):	21:24:58
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-hostnamed PID: 6574, Parent PID: 1

General

Start time (UTC):	21:24:58
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Analysis Process: systemd PID: 6746, Parent PID: 1

General

Start time (UTC):	21:25:06
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: fprintd PID: 6746, Parent PID: 1

General

Start time (UTC):	21:25:06
Start date (UTC):	19/12/2024
Path:	/usr/libexec/fprintd
Arguments:	/usr/libexec/fprintd
File size:	125312 bytes
MD5 hash:	b0d8829f05cd028529b84b061b660e84

Analysis Process: systemd PID: 6860, Parent PID: 1

General

Start time (UTC):	21:25:08
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: colord PID: 6860, Parent PID: 1

General

Start time (UTC):	21:25:08
Start date (UTC):	19/12/2024
Path:	/usr/libexec/colord
Arguments:	/usr/libexec/colord
File size:	346632 bytes
MD5 hash:	70861d1b2818c9279cd4a5c9035dac1f

Analysis Process: colord PID: 7059, Parent PID: 6860

General

Start time (UTC):	21:25:22
Start date (UTC):	19/12/2024
Path:	/usr/libexec/colord
Arguments:	-
File size:	346632 bytes
MD5 hash:	70861d1b2818c9279cd4a5c9035dac1f

Analysis Process: colord-sane PID: 7059, Parent PID: 6860

General

Start time (UTC):	21:25:22
Start date (UTC):	19/12/2024
Path:	/usr/libexec/colord-sane
Arguments:	/usr/libexec/colord-sane
File size:	18736 bytes
MD5 hash:	5f98d754a07bf1385c3ff001cde3882e

Analysis Process: systemd PID: 6871, Parent PID: 1

General

Start time (UTC):	21:25:11
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: ModemManager PID: 6871, Parent PID: 1

General

Start time (UTC):	21:25:11
Start date (UTC):	19/12/2024
Path:	/usr/sbin/ModemManager
Arguments:	/usr/sbin/ModemManager --filter-policy=strict
File size:	1588448 bytes
MD5 hash:	24379bf705a8ff3b2379314585843d4f

Analysis Process: systemd PID: 6909, Parent PID: 1

General

Start time (UTC):	21:25:12
Start date (UTC):	19/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-localed PID: 6909, Parent PID: 1

General

Start time (UTC):	21:25:12
Start date (UTC):	19/12/2024
Path:	/lib/systemd/systemd-localed
Arguments:	/lib/systemd/systemd-localed
File size:	43232 bytes
MD5 hash:	1244af9646256d49594f2a8203329aa9

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify systemd services to repeatedly execute malicious payloads as part of persistence. Systemd is a system and service manager commonly used for managing background daemon processes (also known as services) and other system resources.Systemd is the default initialization (init) system on many Linux distributions replacing legacy init systems, including SysVinit and Upstart, while remaining backwards compatible.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Creation, File: File Modification, Process: Process Creation, Service: Service Creation, Service: Service Modification
Platforms:	Linux
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ngwa5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/memfd:30-systemd-environment-d-generator (deleted)

/memfd:user-environment-generators (deleted)

/proc/6068/oom_score_adj

/proc/6071/oom_score_adj

/proc/6073/oom_score_adj

/proc/6075/oom_score_adj

/proc/6077/oom_score_adj

/proc/6079/oom_score_adj

/proc/6084/oom_score_adj

/proc/6132/oom_score_adj

/proc/6159/oom_score_adj

/proc/6162/oom_score_adj

/proc/6166/oom_score_adj

/proc/6168/oom_score_adj

/proc/6170/oom_score_adj

/proc/6172/oom_score_adj

/proc/6175/oom_score_adj

/proc/6341/oom_score_adj

/proc/6499/oom_score_adj

/proc/6515/oom_score_adj

/proc/6708/oom_score_adj

/run/avahi-daemon/pid

/run/gdm3.pid

/run/systemd/inhibit/.#1w84Hy9

Linux Analysis Report
ngwa5.elf