Edit tour

Linux Analysis Report
vevhea4.elf

Overview

General Information

Sample name:	vevhea4.elf
Analysis ID:	1585049
MD5:	4ebb21d496755fdd6c6129a9f7668717
SHA1:	0855f881bf16721afe0064d9ebcfaf8a748b44a7
SHA256:	98f95f1d6357598c8f50997a2c4a38ebf8a35adf864c33924f95745c02b4a5f0
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Reads system files that contain records of logged in users

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Sleeps for long times indicative of sandbox evasion

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585049
Start date and time:	2025-01-07 01:20:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	vevhea4.elf
Detection:	MAL
Classification:	mal68.spre.troj.evad.linELF@0/176@421/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
VT rate limit hit for: http://wiki.x.org
VT rate limit hit for: https://www.rsyslog.com

Runtime Messages

Command:	/tmp/vevhea4.elf
PID:	5572
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

vevhea4.elf (PID: 5572, Parent: 5490, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/vevhea4.elf

vevhea4.elf New Fork (PID: 5574, Parent: 5572)

vevhea4.elf New Fork (PID: 5576, Parent: 5574)

gnome-session-binary New Fork (PID: 5578, Parent: 1383)

sh (PID: 5578, Parent: 1383, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5578, Parent: 1383, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5615, Parent: 1)

dbus-daemon (PID: 5615, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gvfsd-fuse New Fork (PID: 5616, Parent: 3147)

fusermount (PID: 5616, Parent: 3147, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5617, Parent: 2955)

pulseaudio (PID: 5617, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5618, Parent: 1)

rsyslogd (PID: 5618, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5619, Parent: 1)

dbus-daemon (PID: 5619, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5620, Parent: 1)

rsyslogd (PID: 5620, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5628, Parent: 1)

systemd-logind (PID: 5628, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5687, Parent: 1)

agetty (PID: 5687, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

gdm3 New Fork (PID: 5690, Parent: 1289)

Default (PID: 5690, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5691, Parent: 1289)

Default (PID: 5691, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5692, Parent: 1289)

Default (PID: 5692, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5693, Parent: 1)

dbus-daemon (PID: 5693, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5694, Parent: 1)

agetty (PID: 5694, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 5695, Parent: 1)

gpu-manager (PID: 5695, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5697, Parent: 5695)

sh (PID: 5697, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5698, Parent: 5697)

grep (PID: 5698, Parent: 5697, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5702, Parent: 5695)

sh (PID: 5702, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5703, Parent: 5702)

grep (PID: 5703, Parent: 5702, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5704, Parent: 5695)

sh (PID: 5704, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5705, Parent: 5704)

grep (PID: 5705, Parent: 5704, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5706, Parent: 5695)

sh (PID: 5706, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5707, Parent: 5706)

grep (PID: 5707, Parent: 5706, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5769, Parent: 5695)

sh (PID: 5769, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5770, Parent: 5769)

grep (PID: 5770, Parent: 5769, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5772, Parent: 5695)

sh (PID: 5772, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5773, Parent: 5772)

grep (PID: 5773, Parent: 5772, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5837, Parent: 5695)

sh (PID: 5837, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5838, Parent: 5837)

grep (PID: 5838, Parent: 5837, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5842, Parent: 5695)

sh (PID: 5842, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5844, Parent: 5842)

grep (PID: 5844, Parent: 5842, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5696, Parent: 1)

rsyslogd (PID: 5696, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5710, Parent: 1)

systemd-logind (PID: 5710, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5771, Parent: 1)

journalctl (PID: 5771, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5776, Parent: 1)

systemd-logind (PID: 5776, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5835, Parent: 1)

rsyslogd (PID: 5835, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5836, Parent: 1)

systemd-journald (PID: 5836, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5843, Parent: 1)

dbus-daemon (PID: 5843, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5847, Parent: 1)

generate-config (PID: 5847, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5848, Parent: 5847)

pkill (PID: 5848, Parent: 5847, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5849, Parent: 1)

gdm-wait-for-drm (PID: 5849, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5850, Parent: 1)

journalctl (PID: 5850, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --flush

systemd New Fork (PID: 5856, Parent: 1)

gdm3 (PID: 5856, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

gdm3 New Fork (PID: 5859, Parent: 5856)

plymouth (PID: 5859, Parent: 5856, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: plymouth --ping

gdm3 New Fork (PID: 5873, Parent: 5856)

gdm-session-worker (PID: 5873, Parent: 5856, MD5: 692243754bd9f38fe9bd7e230b5c060a) Arguments: "gdm-session-worker [pam/gdm-launch-environment]"

gdm-session-worker New Fork (PID: 5879, Parent: 5873)

gdm-wayland-session (PID: 5879, Parent: 5873, MD5: d3def63cf1e83f7fb8a0f13b1744ff7c) Arguments: /usr/lib/gdm3/gdm-wayland-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"

gdm-wayland-session New Fork (PID: 5883, Parent: 5879)

dbus-run-session (PID: 5883, Parent: 5879, MD5: 245f3ef6a268850b33b0225a8753b7f4) Arguments: dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart

dbus-run-session New Fork (PID: 5884, Parent: 5883)

dbus-daemon (PID: 5884, Parent: 5883, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: dbus-daemon --nofork --print-address 4 --session

dbus-daemon New Fork (PID: 5888, Parent: 5884)

dbus-daemon New Fork (PID: 5889, Parent: 5888)

false (PID: 5889, Parent: 5888, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5891, Parent: 5884)

dbus-daemon New Fork (PID: 5892, Parent: 5891)

false (PID: 5892, Parent: 5891, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5893, Parent: 5884)

dbus-daemon New Fork (PID: 5894, Parent: 5893)

false (PID: 5894, Parent: 5893, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5895, Parent: 5884)

dbus-daemon New Fork (PID: 5896, Parent: 5895)

false (PID: 5896, Parent: 5895, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5897, Parent: 5884)

dbus-daemon New Fork (PID: 5898, Parent: 5897)

false (PID: 5898, Parent: 5897, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5899, Parent: 5884)

dbus-daemon New Fork (PID: 5900, Parent: 5899)

false (PID: 5900, Parent: 5899, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5902, Parent: 5884)

dbus-daemon New Fork (PID: 5903, Parent: 5902)

false (PID: 5903, Parent: 5902, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-run-session New Fork (PID: 5885, Parent: 5883)

gnome-session (PID: 5885, Parent: 5883, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: gnome-session --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary (PID: 5885, Parent: 5883, MD5: d9b90be4f7db60cb3c2d3da6a1d31bfb) Arguments: /usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary New Fork (PID: 5904, Parent: 5885)

session-migration (PID: 5904, Parent: 5885, MD5: 5227af42ebf14ac2fe2acddb002f68dc) Arguments: session-migration

gnome-session-binary New Fork (PID: 5905, Parent: 5885)

sh (PID: 5905, Parent: 5885, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell

gnome-shell (PID: 5905, Parent: 5885, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell

gdm3 New Fork (PID: 5913, Parent: 5856)

gdm-session-worker (PID: 5913, Parent: 5856, MD5: 692243754bd9f38fe9bd7e230b5c060a) Arguments: "gdm-session-worker [pam/gdm-launch-environment]"

gdm-session-worker New Fork (PID: 5918, Parent: 5913)

gdm-x-session (PID: 5918, Parent: 5913, MD5: 498a824333f1c1ec7767f4612d1887cc) Arguments: /usr/lib/gdm3/gdm-x-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"

gdm-x-session New Fork (PID: 5920, Parent: 5918)

Xorg (PID: 5920, Parent: 5918, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/bin/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3

Xorg.wrap (PID: 5920, Parent: 5918, MD5: 48993830888200ecf19dd7def0884dfd) Arguments: /usr/lib/xorg/Xorg.wrap vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3

Xorg (PID: 5920, Parent: 5918, MD5: 730cf4c45a7ee8bea88abf165463b7f8) Arguments: /usr/lib/xorg/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3

Xorg New Fork (PID: 5927, Parent: 5920)

sh (PID: 5927, Parent: 5920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""

sh New Fork (PID: 5928, Parent: 5927)

xkbcomp (PID: 5928, Parent: 5927, MD5: c5f953aec4c00d2a1cc27acb75d62c9b) Arguments: /usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm

Xorg New Fork (PID: 6151, Parent: 5920)

sh (PID: 6151, Parent: 5920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""

sh New Fork (PID: 6153, Parent: 6151)

xkbcomp (PID: 6153, Parent: 6151, MD5: c5f953aec4c00d2a1cc27acb75d62c9b) Arguments: /usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm

gdm-x-session New Fork (PID: 5933, Parent: 5918)

Default (PID: 5933, Parent: 5918, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/Prime/Default

gdm-x-session New Fork (PID: 5934, Parent: 5918)

dbus-run-session (PID: 5934, Parent: 5918, MD5: 245f3ef6a268850b33b0225a8753b7f4) Arguments: dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart

dbus-run-session New Fork (PID: 5935, Parent: 5934)

dbus-daemon (PID: 5935, Parent: 5934, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: dbus-daemon --nofork --print-address 4 --session

dbus-daemon New Fork (PID: 5948, Parent: 5935)

dbus-daemon New Fork (PID: 5949, Parent: 5948)

at-spi-bus-launcher (PID: 5949, Parent: 5948, MD5: 1563f274acd4e7ba530a55bdc4c95682) Arguments: /usr/libexec/at-spi-bus-launcher

at-spi-bus-launcher New Fork (PID: 5954, Parent: 5949)

dbus-daemon (PID: 5954, Parent: 5949, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 3

dbus-daemon New Fork (PID: 6317, Parent: 5954)

dbus-daemon New Fork (PID: 6318, Parent: 6317)

at-spi2-registryd (PID: 6318, Parent: 6317, MD5: 1d904c2693452edebc7ede3a9e24d440) Arguments: /usr/libexec/at-spi2-registryd --use-gnome-session

dbus-daemon New Fork (PID: 5975, Parent: 5935)

dbus-daemon New Fork (PID: 5976, Parent: 5975)

false (PID: 5976, Parent: 5975, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5978, Parent: 5935)

dbus-daemon New Fork (PID: 5979, Parent: 5978)

false (PID: 5979, Parent: 5978, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5980, Parent: 5935)

dbus-daemon New Fork (PID: 5981, Parent: 5980)

false (PID: 5981, Parent: 5980, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5982, Parent: 5935)

dbus-daemon New Fork (PID: 5983, Parent: 5982)

false (PID: 5983, Parent: 5982, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5984, Parent: 5935)

dbus-daemon New Fork (PID: 5985, Parent: 5984)

false (PID: 5985, Parent: 5984, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5986, Parent: 5935)

dbus-daemon New Fork (PID: 5987, Parent: 5986)

false (PID: 5987, Parent: 5986, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 5991, Parent: 5935)

dbus-daemon New Fork (PID: 5992, Parent: 5991)

false (PID: 5992, Parent: 5991, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-daemon New Fork (PID: 6154, Parent: 5935)

dbus-daemon New Fork (PID: 6155, Parent: 6154)

ibus-portal (PID: 6155, Parent: 6154, MD5: 562ad55bd9a4d54bd7b76746b01e37d3) Arguments: /usr/libexec/ibus-portal

dbus-daemon New Fork (PID: 6333, Parent: 5935)

dbus-daemon New Fork (PID: 6334, Parent: 6333)

gjs (PID: 6334, Parent: 6333, MD5: 5f3eceb792bb65c22f23d1efb4fde3ad) Arguments: /usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications

dbus-daemon New Fork (PID: 6533, Parent: 5935)

dbus-daemon New Fork (PID: 6534, Parent: 6533)

false (PID: 6534, Parent: 6533, MD5: 3177546c74e4f0062909eae43d948bfc) Arguments: /bin/false

dbus-run-session New Fork (PID: 5936, Parent: 5934)

gnome-session (PID: 5936, Parent: 5934, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: gnome-session --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary (PID: 5936, Parent: 5934, MD5: d9b90be4f7db60cb3c2d3da6a1d31bfb) Arguments: /usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart

gnome-session-binary New Fork (PID: 5937, Parent: 5936)

gnome-session-check-accelerated (PID: 5937, Parent: 5936, MD5: a64839518af85b2b9de31aca27646396) Arguments: /usr/libexec/gnome-session-check-accelerated

gnome-session-check-accelerated New Fork (PID: 5955, Parent: 5937)

gnome-session-check-accelerated-gl-helper (PID: 5955, Parent: 5937, MD5: b1ab9a384f9e98a39ae5c36037dd5e78) Arguments: /usr/libexec/gnome-session-check-accelerated-gl-helper --print-renderer

gnome-session-check-accelerated New Fork (PID: 5964, Parent: 5937)

gnome-session-check-accelerated-gles-helper (PID: 5964, Parent: 5937, MD5: 1bd78885765a18e60c05ed1fb5fa3bf8) Arguments: /usr/libexec/gnome-session-check-accelerated-gles-helper --print-renderer

gnome-session-binary New Fork (PID: 5993, Parent: 5936)

session-migration (PID: 5993, Parent: 5936, MD5: 5227af42ebf14ac2fe2acddb002f68dc) Arguments: session-migration

gnome-session-binary New Fork (PID: 5994, Parent: 5936)

sh (PID: 5994, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell

gnome-shell (PID: 5994, Parent: 5936, MD5: da7a257239677622fe4b3a65972c9e87) Arguments: /usr/bin/gnome-shell

gnome-shell New Fork (PID: 6093, Parent: 5994)

ibus-daemon (PID: 6093, Parent: 5994, MD5: 1e00fb9860b198c73f6e364e3ff16f31) Arguments: ibus-daemon --panel disable --xim

ibus-daemon New Fork (PID: 6148, Parent: 6093)

ibus-memconf (PID: 6148, Parent: 6093, MD5: 523e939905910d06598e66385761a822) Arguments: /usr/libexec/ibus-memconf

ibus-daemon New Fork (PID: 6149, Parent: 6093)

ibus-daemon New Fork (PID: 6150, Parent: 6149)

ibus-x11 (PID: 6150, Parent: 1, MD5: 2aa1e54666191243814c2733d6992dbd) Arguments: /usr/libexec/ibus-x11 --kill-daemon

ibus-daemon New Fork (PID: 6367, Parent: 6093)

ibus-engine-simple (PID: 6367, Parent: 6093, MD5: 0238866d5e8802a0ce1b1b9af8cb1376) Arguments: /usr/libexec/ibus-engine-simple

gnome-session-binary New Fork (PID: 6349, Parent: 5936)

sh (PID: 6349, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sharing

gsd-sharing (PID: 6349, Parent: 5936, MD5: e29d9025d98590fbb69f89fdbd4438b3) Arguments: /usr/libexec/gsd-sharing

gnome-session-binary New Fork (PID: 6351, Parent: 5936)

sh (PID: 6351, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-wacom

gsd-wacom (PID: 6351, Parent: 5936, MD5: 13778dd1a23a4e94ddc17ac9caa4fcc1) Arguments: /usr/libexec/gsd-wacom

gnome-session-binary New Fork (PID: 6353, Parent: 5936)

sh (PID: 6353, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-color

gsd-color (PID: 6353, Parent: 5936, MD5: ac2861ad93ce047283e8e87cefef9a19) Arguments: /usr/libexec/gsd-color

gnome-session-binary New Fork (PID: 6354, Parent: 5936)

sh (PID: 6354, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-keyboard

gsd-keyboard (PID: 6354, Parent: 5936, MD5: 8e288fd17c80bb0a1148b964b2ac2279) Arguments: /usr/libexec/gsd-keyboard

gnome-session-binary New Fork (PID: 6356, Parent: 5936)

sh (PID: 6356, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-print-notifications

gsd-print-notifications (PID: 6356, Parent: 5936, MD5: 71539698aa691718cee775d6b9450ae2) Arguments: /usr/libexec/gsd-print-notifications

gsd-print-notifications New Fork (PID: 6530, Parent: 6356)

gsd-print-notifications New Fork (PID: 6531, Parent: 6530)

gsd-printer (PID: 6531, Parent: 1, MD5: 7995828cf98c315fd55f2ffb3b22384d) Arguments: /usr/libexec/gsd-printer

gnome-session-binary New Fork (PID: 6357, Parent: 5936)

sh (PID: 6357, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6357, Parent: 5936, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

gnome-session-binary New Fork (PID: 6358, Parent: 5936)

sh (PID: 6358, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-smartcard

gsd-smartcard (PID: 6358, Parent: 5936, MD5: ea1fbd7f62e4cd0331eae2ef754ee605) Arguments: /usr/libexec/gsd-smartcard

gnome-session-binary New Fork (PID: 6360, Parent: 5936)

sh (PID: 6360, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-datetime

gsd-datetime (PID: 6360, Parent: 5936, MD5: d80d39745740de37d6634d36e344d4bc) Arguments: /usr/libexec/gsd-datetime

gnome-session-binary New Fork (PID: 6361, Parent: 5936)

sh (PID: 6361, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys

gsd-media-keys (PID: 6361, Parent: 5936, MD5: a425448c135afb4b8bfd79cc0b6b74da) Arguments: /usr/libexec/gsd-media-keys

gnome-session-binary New Fork (PID: 6364, Parent: 5936)

sh (PID: 6364, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-screensaver-proxy

gsd-screensaver-proxy (PID: 6364, Parent: 5936, MD5: 77e309450c87dceee43f1a9e50cc0d02) Arguments: /usr/libexec/gsd-screensaver-proxy

gnome-session-binary New Fork (PID: 6366, Parent: 5936)

sh (PID: 6366, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sound

gsd-sound (PID: 6366, Parent: 5936, MD5: 4c7d3fb993463337b4a0eb5c80c760ee) Arguments: /usr/libexec/gsd-sound

gnome-session-binary New Fork (PID: 6368, Parent: 5936)

sh (PID: 6368, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-a11y-settings

gsd-a11y-settings (PID: 6368, Parent: 5936, MD5: 18e243d2cf30ecee7ea89d1462725c5c) Arguments: /usr/libexec/gsd-a11y-settings

gnome-session-binary New Fork (PID: 6373, Parent: 5936)

sh (PID: 6373, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-housekeeping

gsd-housekeeping (PID: 6373, Parent: 5936, MD5: b55f3394a84976ddb92a2915e5d76914) Arguments: /usr/libexec/gsd-housekeeping

gnome-session-binary New Fork (PID: 6375, Parent: 5936)

sh (PID: 6375, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-power

gsd-power (PID: 6375, Parent: 5936, MD5: 28b8e1b43c3e7f1db6741ea1ecd978b7) Arguments: /usr/libexec/gsd-power

gnome-session-binary New Fork (PID: 6706, Parent: 5936)

sh (PID: 6706, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/spice-vdagent

spice-vdagent (PID: 6706, Parent: 5936, MD5: 80fb7f613aa78d1b8a229dbcf4577a9d) Arguments: /usr/bin/spice-vdagent

gnome-session-binary New Fork (PID: 6750, Parent: 5936)

sh (PID: 6750, Parent: 5936, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh xbrlapi -q

xbrlapi (PID: 6750, Parent: 5936, MD5: 0cfe25df39d38af32d6265ed947ca5b9) Arguments: xbrlapi -q

gdm3 New Fork (PID: 5914, Parent: 5856)

Default (PID: 5914, Parent: 5856, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5915, Parent: 5856)

Default (PID: 5915, Parent: 5856, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5860, Parent: 1)

accounts-daemon (PID: 5860, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 5864, Parent: 5860)

language-validate (PID: 5864, Parent: 5860, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 5865, Parent: 5864)

language-options (PID: 5865, Parent: 5864, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 5866, Parent: 5865)

sh (PID: 5866, Parent: 5865, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 5867, Parent: 5866)

locale (PID: 5867, Parent: 5866, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 5868, Parent: 5866)

grep (PID: 5868, Parent: 5866, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

systemd New Fork (PID: 5869, Parent: 1)

polkitd (PID: 5869, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5881, Parent: 1299)

dbus-daemon (PID: 5881, Parent: 1299, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6014, Parent: 1)

systemd-localed (PID: 6014, Parent: 1, MD5: 1244af9646256d49594f2a8203329aa9) Arguments: /lib/systemd/systemd-localed

systemd New Fork (PID: 6164, Parent: 1)

upowerd (PID: 6164, Parent: 1, MD5: 1253eea2fe5fe4017069664284e326cd) Arguments: /usr/lib/upower/upowerd

systemd New Fork (PID: 6204, Parent: 1299)

pulseaudio (PID: 6204, Parent: 1299, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6207, Parent: 1)

geoclue (PID: 6207, Parent: 1, MD5: 30ac5455f3c598dde91dc87477fb19f7) Arguments: /usr/libexec/geoclue

systemd New Fork (PID: 6315, Parent: 1)

rtkit-daemon (PID: 6315, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6327, Parent: 1)

wpa_supplicant (PID: 6327, Parent: 1, MD5: 2a5acf2a7a908a1388a09991ed7881e1) Arguments: /sbin/wpa_supplicant -u -s -O /run/wpa_supplicant

systemd New Fork (PID: 6328, Parent: 1)

avahi-daemon (PID: 6328, Parent: 1, MD5: 0125e88392fec809934928f8638511ff) Arguments: /usr/sbin/avahi-daemon -s

avahi-daemon New Fork (PID: 6330, Parent: 6328)

systemd New Fork (PID: 6331, Parent: 1)

packagekitd (PID: 6331, Parent: 1, MD5: 46b0c31f013b71a0eb63b1c040f11c86) Arguments: /usr/lib/packagekit/packagekitd

packagekitd New Fork (PID: 6355, Parent: 6331)

dpkg (PID: 6355, Parent: 6331, MD5: 5e18156b434fc45062eec2f28b9147be) Arguments: /usr/bin/dpkg --print-foreign-architectures

systemd New Fork (PID: 6392, Parent: 1)

systemd-hostnamed (PID: 6392, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

systemd New Fork (PID: 6565, Parent: 1)

fprintd (PID: 6565, Parent: 1, MD5: b0d8829f05cd028529b84b061b660e84) Arguments: /usr/libexec/fprintd

systemd New Fork (PID: 6682, Parent: 1)

colord (PID: 6682, Parent: 1, MD5: 70861d1b2818c9279cd4a5c9035dac1f) Arguments: /usr/libexec/colord

colord New Fork (PID: 6751, Parent: 6682)

colord-sane (PID: 6751, Parent: 6682, MD5: 5f98d754a07bf1385c3ff001cde3882e) Arguments: /usr/libexec/colord-sane

systemd New Fork (PID: 6711, Parent: 1)

ModemManager (PID: 6711, Parent: 1, MD5: 24379bf705a8ff3b2379314585843d4f) Arguments: /usr/sbin/ModemManager --filter-policy=strict

systemd New Fork (PID: 6757, Parent: 2955)

dbus-daemon (PID: 6757, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6758, Parent: 2955)

pulseaudio (PID: 6758, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: vevhea4.elf	Virustotal: Detection: 28%			Perma Link
Source: vevhea4.elf	ReversingLabs: Detection: 34%

Source: /usr/bin/pkill (PID: 5848)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5937)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5955)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5964)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/gnome-shell (PID: 5994)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6204)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6758)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: vevhea4.elf

String: EOF/proc//proc/%s/cmdlinewgetcurlftpechokillbashrebootshutdownhaltpoweroff[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: fingwi.cardiacpure.ru. [malformed]

Source: global traffic	TCP traffic: 192.168.2.14:34684 -> 178.215.238.112:33966
Source: global traffic	TCP traffic: 192.168.2.14:57258 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5620)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5696)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5835)	Reads hosts file: /etc/hosts	Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 5836)	Socket: unknown address family	Jump to behavior
Source: /usr/sbin/gdm3 (PID: 5856)	Socket: unknown address family	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5884)	Socket: unknown address family	Jump to behavior
Source: /usr/libexec/gnome-session-binary (PID: 5885)	Socket: unknown address family	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Socket: unknown address family	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	Socket: unknown address family	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5954)	Socket: unknown address family
Source: /usr/libexec/gnome-session-binary (PID: 5936)	Socket: unknown address family
Source: /usr/bin/ibus-daemon (PID: 6093)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: fingwi.cardiacpure.ru. [malformed]

Source: syslog.79.dr, Xorg.0.log.168.dr	String found in binary or memory: http://wiki.x.org
Source: syslog.79.dr, Xorg.0.log.168.dr	String found in binary or memory: http://www.ubuntu.com/support)
Source: syslog.47.dr, syslog.79.dr, syslog.29.dr	String found in binary or memory: https://www.rsyslog.com

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1639, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5578, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 661, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 791, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1289, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1309, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1382, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1589, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 2991, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 3094, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5556, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5557, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5615, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5616, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5617, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5618, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5619, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5620, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5687, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 769, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5409, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5584, result: no such process	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5693, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5696, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5710, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	SIGKILL sent: pid: 5948, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	SIGKILL sent: pid: 6154, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	SIGKILL sent: pid: 6333, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5954)	SIGKILL sent: pid: 6317, result: successful

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1639, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5578, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 661, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 791, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1289, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1309, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1382, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1589, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 2991, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 3094, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5556, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5557, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5615, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5616, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5617, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5618, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5619, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5620, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5687, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 769, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5409, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5584, result: no such process	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5693, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5696, result: successful	Jump to behavior
Source: /tmp/vevhea4.elf (PID: 5576)	SIGKILL sent: pid: 5710, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	SIGKILL sent: pid: 5948, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	SIGKILL sent: pid: 6154, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	SIGKILL sent: pid: 6333, result: successful	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5954)	SIGKILL sent: pid: 6317, result: successful

Source: classification engine

Classification label: mal68.spre.troj.evad.linELF@0/176@421/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5615)	File: /proc/5615/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5616)	File: /proc/5616/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5616)	File: /proc/5616/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5619)	File: /proc/5619/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5693)	File: /proc/5693/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5843)	File: /proc/5843/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5884)	File: /proc/5884/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File: /proc/5935/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5954)	File: /proc/5954/mounts
Source: /usr/bin/gjs (PID: 6334)	File: /proc/6334/mounts
Source: /usr/bin/gnome-shell (PID: 5994)	File: /proc/5994/mounts
Source: /usr/bin/dbus-daemon (PID: 5881)	File: /proc/5881/mounts
Source: /usr/bin/dbus-daemon (PID: 6757)	File: /proc/6757/mounts

Source: /lib/systemd/systemd-logind (PID: 5628)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5628)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5628)	File: /run/systemd/seats/.#seat0vdNTcM	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat0HeGzoV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127Hmi4dY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#1278QUDmZ	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (20)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (19)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat0xUZXgV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127WVF47W	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c1BvkjbW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127jfGTLW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat05uHvmV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#1271jenvY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c1y0SVkV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c19LAbQX	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127KuZk2Y	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c1JpPOcY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c1KqbivV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c139fAgW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#1273fSTZV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat0s9QwIV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127vpgCKY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat0hDcK0W	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127bxioRV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat0gZk9dW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127NQTDFY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c2hePDvZ	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127ehmktZ	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/seats/.#seat0pQ6xUW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c2JuV8oX	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c2bTPfzY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/users/.#127gOySmV	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c23lSWUW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (21)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (20)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c2ULSLUX	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (22)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (21)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c2EiV34V	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (23)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (22)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c201QilX	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (24)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	Directory: <invalid fd (23)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/sessions/.#c26QIMKY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/inhibit/.#1s4lp8V	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/inhibit/.#24EVzTY	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/inhibit/.#3eHARLX	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/inhibit/.#43M01yW	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File: /run/systemd/inhibit/.#5ZqM0hW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69477akcfgt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69478nGNbaw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:694855nKuss	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:694927fibew	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69493hah6ds	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69494UFaZIu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69593aOTTZt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69600NYq8Qt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69605MxhDew	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69627yOtXzv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69628BwQUSw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:68432vIcgLv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:68434JRWcPw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:68440eD499t	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:684672gqSDt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:68563ViAHAv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:68565TIs7ls	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70657IYAr4s	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70659Pcwrzu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70699Xe0TIt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70701DXvsVt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:69816TeHf5u	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70928699Iut	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70930zH1ZOt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:71104reuoEv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:71284q7xLbu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:71285YLEHLv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:71295aJoAvu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:71301s2SzFw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:71442guUocv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:715641nWIOt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70265QSRfYs	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:703032BJ2ys	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70304J37s9u	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:703253lyhhs	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70327IdF6xw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:703285pAoct	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70329rctUFw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70331cypDsu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70348Xulxav	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70349DigoZv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70350GqcAdu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70351qjB70s	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File: /run/systemd/journal/streams/.#9:70352PEwTls	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 5905)	Directory: <invalid fd (11)>/..	Jump to behavior
Source: /usr/bin/gnome-shell (PID: 5905)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Directory: <invalid fd (23)>/..	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Directory: <invalid fd (22)>/..	Jump to behavior
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5937)	Directory: /var/lib/gdm3/.drirc
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5937)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5937)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5955)	Directory: /var/lib/gdm3/.drirc
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5964)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5964)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5964)	Directory: /var/lib/gdm3/.drirc
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: /var/lib/gdm3/.drirc
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: <invalid fd (12)>/..
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: <invalid fd (11)>/..
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: <invalid fd (14)>/..
Source: /usr/bin/gnome-shell (PID: 5994)	Directory: <invalid fd (13)>/..
Source: /usr/libexec/ibus-x11 (PID: 6150)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/ibus-x11 (PID: 6150)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-wacom (PID: 6351)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-wacom (PID: 6351)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-color (PID: 6353)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-color (PID: 6353)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-keyboard (PID: 6354)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-keyboard (PID: 6354)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-rfkill (PID: 6357)	Directory: <invalid fd (9)>/..
Source: /usr/libexec/gsd-rfkill (PID: 6357)	Directory: <invalid fd (8)>/..
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale-langpack/en_US/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale-langpack/en.utf8/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Directory: /usr/share/locale-langpack/en/LC_MESSAGES/.mo
Source: /usr/libexec/gsd-power (PID: 6375)	Directory: /var/lib/gdm3/.Xdefaults
Source: /usr/libexec/gsd-power (PID: 6375)	Directory: /var/lib/gdm3/.Xdefaults-galassia
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5860)	Directory: /var/lib/gdm3/.pam_environment
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5860)	Directory: /root/.cache
Source: /usr/lib/policykit-1/polkitd (PID: 5869)	Directory: /root/.cache
Source: /usr/lib/upower/upowerd (PID: 6164)	Directory: <invalid fd (12)>/..
Source: /usr/lib/upower/upowerd (PID: 6164)	Directory: <invalid fd (11)>/..
Source: /usr/lib/packagekit/packagekitd (PID: 6331)	Directory: /root/.cache
Source: /lib/systemd/systemd-hostnamed (PID: 6392)	Directory: <invalid fd (10)>/..
Source: /usr/libexec/colord (PID: 6682)	Directory: /var/lib/colord/.cache
Source: /usr/sbin/ModemManager (PID: 6711)	Directory: <invalid fd (12)>/..
Source: /usr/sbin/ModemManager (PID: 6711)	Directory: <invalid fd (11)>/..

Source: /usr/bin/dbus-daemon (PID: 5881)	File opened: /proc/5881/status
Source: /usr/bin/dbus-daemon (PID: 5881)	File opened: /proc/5881/attr/current
Source: /usr/bin/dbus-daemon (PID: 5881)	File opened: /proc/5918/cmdline
Source: /usr/bin/dbus-daemon (PID: 5881)	File opened: /proc/1299/cmdline
Source: /usr/bin/dbus-daemon (PID: 5881)	File opened: /proc/6204/cmdline
Source: /usr/bin/dbus-daemon (PID: 5881)	File opened: /proc/5879/cmdline
Source: /usr/bin/dbus-daemon (PID: 5619)	File opened: /proc/5619/status	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5619)	File opened: /proc/5619/attr/current	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5619)	File opened: /proc/1/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5619)	File opened: /proc/1364/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5619)	File opened: /proc/2946/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5619)	File opened: /proc/5628/cmdline	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/6375/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/6375/stat	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5873/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5873/sessionid	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5994/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5994/stat	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/environ	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/sched	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/1/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5920/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5913/cgroup	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5776)	File opened: /proc/5913/sessionid	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6351/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6361/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6353/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6375/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6354/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/5994/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6150/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/5937/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/5964/cmdline
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/5954/status
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/5954/attr/current
Source: /usr/bin/dbus-daemon (PID: 5954)	File opened: /proc/6318/cmdline
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6373/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6351/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6155/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6353/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6375/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6531/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6354/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6357/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6334/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6356/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6093/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5937/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6349/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5935/status	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5935/attr/current	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5936/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5936/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6361/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6364/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6366/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6368/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5994/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6360/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/5949/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6358/cmdline	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5935)	File opened: /proc/6318/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/6331/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5881/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5860/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5884/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/5937/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cgroup	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/comm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/status	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/attr/current	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/sessionid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/loginuid	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	File opened: /proc/1299/cgroup	Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5697)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5702)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5704)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5706)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5769)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5772)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5837)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5842)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5927)	Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 6151)	Shell command executed: sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""	Jump to behavior
Source: /usr/share/language-tools/language-options (PID: 5866)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "

Source: /bin/sh (PID: 5698)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5703)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5705)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5707)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5770)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5773)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5838)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5844)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5868)	Grep executable: /usr/bin/grep -> grep -F .utf8

Source: /usr/share/gdm/generate-config (PID: 5848)

Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 5836)

Reads from proc file: /proc/meminfo

Jump to behavior

Source: /sbin/agetty (PID: 5687)	Reads version info: /etc/issue			Jump to behavior
Source: /sbin/agetty (PID: 5694)	Reads version info: /etc/issue			Jump to behavior

Source: /usr/sbin/gdm3 (PID: 5856)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)	Jump to behavior
Source: /usr/sbin/gdm3 (PID: 5856)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)	Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5860)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5860)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)

Source: /usr/sbin/rsyslogd (PID: 5620)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5620)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 5695)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 5696)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5835)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 5835)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/lib/xorg/Xorg (PID: 5920)	Log file created: /var/log/Xorg.0.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/vevhea4.elf (PID: 5574)

File: /tmp/vevhea4.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5695)	Truncated file: /var/log/gpu-manager.log			Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Truncated file: /var/log/Xorg.pid-5920.log			Jump to behavior

Source: /usr/bin/pkill (PID: 5848)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5937)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5955)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5964)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/gnome-shell (PID: 5994)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6204)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6758)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/vevhea4.elf (PID: 5576)

Sleeps longer then 60s: 300.0s

Jump to behavior

Source: /tmp/vevhea4.elf (PID: 5572)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5620)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5687)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 5694)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5695)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5696)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5835)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5836)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/gdm3/gdm-session-worker (PID: 5873)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/libexec/gnome-session-binary (PID: 5885)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/gdm3/gdm-session-worker (PID: 5913)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/gdm3/gdm-x-session (PID: 5918)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/xorg/Xorg (PID: 5920)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/libexec/at-spi-bus-launcher (PID: 5949)	Queries kernel information via 'uname':
Source: /usr/libexec/at-spi2-registryd (PID: 6318)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-binary (PID: 5936)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated (PID: 5937)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated-gl-helper (PID: 5955)	Queries kernel information via 'uname':
Source: /usr/libexec/gnome-session-check-accelerated-gles-helper (PID: 5964)	Queries kernel information via 'uname':
Source: /usr/bin/gnome-shell (PID: 5994)	Queries kernel information via 'uname':
Source: /usr/libexec/ibus-x11 (PID: 6150)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-wacom (PID: 6351)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-color (PID: 6353)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-keyboard (PID: 6354)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-smartcard (PID: 6358)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-media-keys (PID: 6361)	Queries kernel information via 'uname':
Source: /usr/libexec/gsd-power (PID: 6375)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6204)	Queries kernel information via 'uname':
Source: /usr/sbin/avahi-daemon (PID: 6328)	Queries kernel information via 'uname':
Source: /usr/lib/packagekit/packagekitd (PID: 6331)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-hostnamed (PID: 6392)	Queries kernel information via 'uname':
Source: /usr/libexec/fprintd (PID: 6565)	Queries kernel information via 'uname':
Source: /usr/libexec/colord-sane (PID: 6751)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6758)	Queries kernel information via 'uname':

Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.211] (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.749] (II) vmware(0): Modeline "1152x864"x75.0 104.99 1152 1224 1352 1552 864 865 868 902 -hsync +vsync (67.6 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.690] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.849] (**) vmware(0): Default mode "832x624": 57.3 MHz, 49.7 kHz, 74.6 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.472] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.765] (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1024x576": 46.5 MHz, 35.9 kHz, 59.9 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.099] (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.410] (--) vmware(0): vis: 4
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.493] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): mwidt: 1176
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.367] (--) vmware(0): mwidt: 1176
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "360x200" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): mheig: 885
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Clock range: 0.00 to 400000.00 MHz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x100.0 143.47 1152 1232 1360 1568 864 865 868 915 -hsync +vsync (91.5 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 81.6 MHz, 53.7 kHz, 60.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1024x768"x85.0 94.50 1024 1072 1168 1376 768 769 772 808 +hsync +vsync (68.7 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x75.0 104.99 1152 1224 1352 1552 864 865 868 902 -hsync +vsync (67.6 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.405] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.909] (II) vmware(0): Modeline "800x600"x72.2 50.00 800 856 976 1040 600 637 643 666 +hsync +vsync (48.1 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.474] (II) vmware(0): Not using default mode "320x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.619] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): w.grn: 8
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.283] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 161.948] (II) Module vmware: vendor="X.Org Foundation"
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.498] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.862] (**) vmware(0): Default mode "960x540": 40.8 MHz, 33.5 kHz, 59.6 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.599] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x70.0 96.77 1152 1224 1344 1536 864 865 868 900 -hsync +vsync (63.0 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.527] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.572] (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 163.981] (EE) vmware(0): Failed to open drm.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.771] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.433] (II) vmware(0): Initialized VMware Xv extension successfully.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x480": 25.2 MHz, 31.5 kHz, 59.9 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.769] (**) vmware(0): Default mode "1152x864": 81.6 MHz, 53.7 kHz, 60.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.461] (II) vmware(0): Clock range: 0.00 to 400000.00 MHz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "800x600"x75.0 49.50 800 816 896 1056 600 601 604 625 +hsync +vsync (46.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.417] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 8)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.546] (II) vmware(0): Not using default mode "512x384i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.875] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.639] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "864x486": 32.5 MHz, 30.3 kHz, 59.9 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.093] (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: vevhea4.elf, 5572.1.00005628a1169000.00005628a1297000.rw-.sdmp	Binary or memory string: (V!/etc/qemu-binfmt/arm
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.020] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.050] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.970] (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.5 kHz, 75.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.684] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.473] (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.569] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): pbase: 0xe8000000
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.373] (--) vmware(0): mheig: 885
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.333] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): caps: 0xFDFF83E2
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.434] (==) vmware(0): Default visual is TrueColor
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "320x175" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.856] (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.930] (II) vmware(0): Not using default mode "800x512" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: message repeated 4 times: [ (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)]
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.007] (II) vmware(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.784] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.707] (II) vmware(0): Modeline "1152x864"x85.1 121.50 1152 1216 1344 1568 864 865 868 911 +hsync -vsync (77.5 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "800x600": 36.0 MHz, 35.2 kHz, 56.2 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.205] (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "512x384i" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.341] (--) vmware(0): depth: 24
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.321] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.737] (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): w.blu: 8
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): w.red: 8
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.827] (II) vmware(0): Modeline "1024x768"x60.0 65.00 1024 1048 1184 1344 768 771 777 806 -hsync -vsync (48.4 kHz d)
Source: vevhea4.elf, 5572.1.00007ffc152cd000.00007ffc152ee000.rw-.sdmp	Binary or memory string: (V/tmp/qemu-open.vAKtKw:
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "720x450" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:25 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Creating default Display subsection in Screen section
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.361] (--) vmware(0): pbase: 0xe8000000
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.564] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.972] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.757] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.819] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.485] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.638] (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.156] (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) event3 - VirtualPS/2 VMware VMMouse: device removed
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.655] (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.247] (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x350"x85.1 31.50 640 672 736 832 350 382 385 445 +hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.797] (II) vmware(0): Not using default mode "416x312" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:26 galassia /usr/lib/gdm3/gdm-x-session[5920]: (WW) vmware(0): Disabling 3D support.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.814] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.517] (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "2560x1600" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.068] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 161.885] (II) Loading /usr/lib/xorg/modules/drivers/vmware_drv.so
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.218] (II) vmware(0): Not using default mode "1368x768" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.893] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.257] (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.497] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.426] (==) vmware(0): RGB weight 888
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "960x540"x59.6 40.75 960 992 1088 1216 540 543 548 562 -hsync +vsync (33.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.398] (--) vmware(0): w.grn: 8
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1024x768i" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "vmwlegacy-default-800x600"x60.0 36.25 800 801 802 1002 600 601 602 603 (36.2 kHz ez)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Virtual size is 800x600 (pitch 1176)
Source: vevhea4.elf, 5572.1.00007ffc152cd000.00007ffc152ee000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.vAKtKw
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.449] (==) vmware(0): Will set up a driver mode with dimensions 800x600.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.921] (II) vmware(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Initialized VMware Xinerama extension.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.345] (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 96.8 MHz, 63.0 kHz, 70.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.520] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.824] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.117] (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.609] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.625] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.389] (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.828] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x60.0 81.62 1152 1216 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.523] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.111] (II) vmware(0): Not using default mode "360x202" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Will set up a driver mode with dimensions 800x600.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.646] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.447] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.150] (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.466] (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.957] (**) vmware(0): Default mode "640x480": 36.0 MHz, 43.3 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.575] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.559] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.912] (II) vmware(0): Not using default mode "1440x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.081] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x350": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.059] (II) vmware(0): Modeline "640x400"x85.1 31.50 640 672 736 832 400 401 404 445 -hsync +vsync (37.9 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.033] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.596] (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.162] (II) vmware(0): Not using default mode "1024x576" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.661] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.430] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.992] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.665] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "800x600": 40.0 MHz, 37.9 kHz, 60.3 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.380] (--) vmware(0): depth: 24
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.887] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.348] (--) vmware(0): bpp: 32
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse0)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.651] (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.425] (==) vmware(0): Silken mouse enabled
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:24 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) Matched vmware as autoconfigured driver 0
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.529] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.615] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "416x312" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.738] (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.833] (**) vmware(0): Default mode "1024x576": 46.5 MHz, 35.9 kHz, 59.9 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.903] (**) vmware(0): Default mode "800x600": 50.0 MHz, 48.1 kHz, 72.2 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.382] (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x360": 17.8 MHz, 22.2 kHz, 59.3 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.809] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "480x270" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.468] (II) vmware(0): Not using default mode "320x175" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.778] (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "800x600": 56.3 MHz, 53.7 kHz, 85.1 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x400": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.629] (II) vmware(0): Not using default mode "640x512" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 121.5 MHz, 77.5 kHz, 85.1 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.581] (II) vmware(0): Not using default mode "1280x960" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.697] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Initialized VMWARE_CTRL extension version 0.2
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.565] (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.9 kHz, 72.8 Hz
Source: vevhea4.elf, 5572.1.00007ffc152cd000.00007ffc152ee000.rw-.sdmp	Binary or memory string: }\|x86_64/usr/bin/qemu-arm/tmp/vevhea4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/vevhea4.elf
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.870] (II) vmware(0): Modeline "960x540"x59.6 40.75 960 992 1088 1216 540 543 548 562 -hsync +vsync (33.5 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:25 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware: driver for VMware SVGA: vmware0405, vmware0710
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.644] (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:26 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): VMware SVGA regs at (0x1070, 0x1071)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.198] (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.510] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.559] (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.001] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "320x200" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "832x624"x74.6 57.28 832 864 928 1152 624 625 628 667 -hsync -vsync (49.7 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.843] (II) vmware(0): Not using default mode "680x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.553] (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.915] (**) vmware(0): Default mode "800x600": 40.0 MHz, 37.9 kHz, 60.3 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.192] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.042] (II) vmware(0): Modeline "720x400"x85.0 35.50 720 756 828 936 400 401 404 446 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.602] (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.097] (II) vmware(0): Modeline "640x350"x85.1 31.50 640 672 736 832 350 382 385 445 +hsync -vsync (37.9 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: message repeated 3 times: [ (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)]
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.964] (II) vmware(0): Modeline "640x480"x85.0 36.00 640 696 752 832 480 481 484 509 -hsync -vsync (43.3 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.989] (II) vmware(0): Modeline "640x480"x72.8 31.50 640 664 704 832 480 489 492 520 -hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.357] (II) vmware(0): Initialized VMware Xinerama extension.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.017] (WW) vmware(0): Disabling RandR12+ support.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x85.1 121.50 1152 1216 1344 1568 864 865 868 911 +hsync -vsync (77.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.998] (**) vmware(0): Default mode "640x480": 25.2 MHz, 31.5 kHz, 59.9 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Silken mouse enabled
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.710] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "800x600": 50.0 MHz, 48.1 kHz, 72.2 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.455] (==) vmware(0): Using gamma correction (1.0, 1.0, 1.0)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.856] (II) vmware(0): Modeline "832x624"x74.6 57.28 832 864 928 1152 624 625 628 667 -hsync -vsync (49.7 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.716] (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "720x405": 22.5 MHz, 25.1 kHz, 59.5 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.514] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.392] (--) vmware(0): w.red: 8
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.869] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x480"x85.0 36.00 640 696 752 832 480 481 484 509 -hsync -vsync (43.3 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.928] (**) vmware(0): Default mode "800x600": 36.0 MHz, 35.2 kHz, 56.2 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.263] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.592] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.589] (II) vmware(0): Not using default mode "640x480" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) event2 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.976] (II) vmware(0): Modeline "640x480"x75.0 31.50 640 656 720 840 480 481 484 500 -hsync -vsync (37.5 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): vis: 4
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.329] (--) vmware(0): caps: 0xFDFF83E2
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "720x400"x85.0 35.50 720 756 828 936 400 401 404 446 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.890] (**) vmware(0): Default mode "800x600": 49.5 MHz, 46.9 kHz, 75.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.747] (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.896] (II) vmware(0): Modeline "800x600"x75.0 49.50 800 816 896 1056 600 601 604 625 +hsync +vsync (46.9 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1024x768"x70.1 75.00 1024 1048 1184 1328 768 771 777 806 -hsync -vsync (56.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.687] (**) vmware(0): Default mode "1152x864": 143.5 MHz, 91.5 kHz, 100.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.803] (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.863] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "800x600": 49.5 MHz, 46.9 kHz, 75.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.808] (**) vmware(0): Default mode "1024x768": 75.0 MHz, 56.5 kHz, 70.1 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) event3 - VirtualPS/2 VMware VMMouse: is tagged by udev as: Mouse
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.289] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.363] (II) vmware(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.254] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "800x600"x72.2 50.00 800 856 976 1040 600 637 643 666 +hsync +vsync (48.1 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.717] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration threshold: 4
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.833] (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x360": 18.0 MHz, 22.5 kHz, 59.8 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.144] (II) vmware(0): Not using default mode "960x540" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.703] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.027] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.308] (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x360"x59.8 18.00 640 664 720 800 360 363 368 376 -hsync +vsync (22.5 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1600x1024" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.978] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.502] (II) vmware(0): Not using default mode "320x240" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.924] (II) vmware(0): Not using default mode "1600x1024" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.134] (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.453] (II) vmware(0): Not using default mode "5120x2880" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x480": 31.5 MHz, 37.5 kHz, 75.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.168] (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x480"x72.8 31.50 640 664 704 832 480 489 492 520 -hsync -vsync (37.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.062] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.905] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.714] (**) vmware(0): Default mode "1152x864": 119.7 MHz, 77.1 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.940] (**) vmware(0): Default mode "864x486": 32.5 MHz, 30.3 kHz, 59.9 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x85.0 119.65 1152 1224 1352 1552 864 865 868 907 -hsync +vsync (77.1 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "684x384" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.460] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.392] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.959] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 143.5 MHz, 91.5 kHz, 100.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.478] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.700] (**) vmware(0): Default mode "1152x864": 121.5 MHz, 77.5 kHz, 85.1 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:26 galassia /usr/lib/gdm3/gdm-x-session[5920]: (EE) vmware(0): Failed to open drm.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1440x900" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "864x486"x59.9 32.50 864 888 968 1072 486 489 494 506 -hsync +vsync (30.3 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.230] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: vevhea4.elf, 5572.1.00007ffc152cd000.00007ffc152ee000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "720x405" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.338] (II) vmware(0): Initialized VMWARE_CTRL extension version 0.2
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1400x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.950] (II) vmware(0): Modeline "864x486"x59.9 32.50 864 888 968 1072 486 489 494 506 -hsync +vsync (30.3 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.311] (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.359] (II) vmware(0): Not using default mode "2880x1620" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.026] (--) vmware(0): VMware SVGA regs at (0x1070, 0x1071)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.883] (II) vmware(0): Modeline "800x600"x85.1 56.30 800 832 896 1048 600 601 604 631 +hsync +vsync (53.7 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) VirtualPS/2 VMware VMMouse: Applying InputClass "libinput pointer catchall"
Source: Xorg.0.log.168.dr	Binary or memory string: [ 163.992] (WW) vmware(0): Disabling 3D support.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "800x600"x85.1 56.30 800 832 896 1048 600 601 604 631 +hsync +vsync (53.7 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.248] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "960x720" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.579] (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.814] (II) vmware(0): Modeline "1024x768"x70.1 75.00 1024 1048 1184 1328 768 771 777 806 -hsync -vsync (56.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 162.355] (II) vmware(0): Creating default Display subsection in Screen section
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1024x768": 75.0 MHz, 56.5 kHz, 70.1 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.652] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.186] (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:24 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) Loading /usr/lib/xorg/modules/drivers/vmware_drv.so
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "960x540" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.622] (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x400"x85.1 31.50 640 672 736 832 400 401 404 445 -hsync +vsync (37.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.721] (II) vmware(0): Modeline "1152x864"x85.0 119.65 1152 1224 1352 1552 864 865 868 907 -hsync +vsync (77.1 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.091] (**) vmware(0): Default mode "640x350": 31.5 MHz, 37.9 kHz, 85.1 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.730] (II) vmware(0): Not using default mode "1792x1344" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.239] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event3)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:24 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) Module vmware: vendor="X.Org Foundation"
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): RGB weight 888
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Using gamma correction (1.0, 1.0, 1.0)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.411] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x360"x59.3 17.75 640 688 720 800 360 363 368 374 +hsync -vsync (22.2 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.105] (II) vmware(0): Not using default mode "720x405" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.075] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.508] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.965] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.446] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.546] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.416] (==) vmware(0): Backing store enabled
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.239] (II) vmware(0): Not using default mode "800x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.586] (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "640x480": 36.0 MHz, 43.3 kHz, 85.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "320x180" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.354] (--) vmware(0): vram: 4194304
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.631] (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.071] (II) vmware(0): Modeline "640x360"x59.8 18.00 640 664 720 800 360 363 368 376 -hsync +vsync (22.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.078] (**) vmware(0): Default mode "640x360": 17.8 MHz, 22.2 kHz, 59.3 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "864x486" (monitor doesn't support reduced blanking)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:26 galassia /usr/lib/gdm3/gdm-x-session[5920]: (WW) vmware(0): Disabling RandR12+ support.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.521] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/event2)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.480] (II) event3 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.372] (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.612] (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.056] (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.036] (**) vmware(0): Default mode "720x400": 35.5 MHz, 37.9 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.277] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.065] (**) vmware(0): Default mode "640x360": 18.0 MHz, 22.5 kHz, 59.8 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 108.0 MHz, 67.5 kHz, 75.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: Xorg.0.log.168.dr	Binary or memory string: [ 161.863] (II) LoadModule: "vmware"
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.399] (II) event3 - VirtualPS/2 VMware VMMouse: device removed
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: message repeated 3 times: [ (II) vmware(0): Not using default mode "512x384" (bad mode clock/interlace/doublescan)]
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.727] (**) vmware(0): Default mode "1152x864": 108.0 MHz, 67.5 kHz, 75.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): depth: 24
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.417] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 119.7 MHz, 77.1 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.711] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "720x405"x59.5 22.50 720 744 808 896 405 408 413 422 -hsync +vsync (25.1 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.605] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.385] (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.398] (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.004] (WW) vmware(0): Disabling Render Acceleration.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.899] (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.327] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1024x576" (monitor doesn't support reduced blanking)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.585] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: message repeated 5 times: [ (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)]
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1400x1050" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.493] (II) config/udev: Adding input device VirtualPS/2 VMware VMMouse (/dev/input/mouse1)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "3840x2160" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.694] (II) vmware(0): Modeline "1152x864"x100.0 143.47 1152 1232 1360 1568 864 865 868 915 -hsync +vsync (91.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.270] (II) vmware(0): Not using default mode "960x540" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.953] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) event2 - VirtualPS/2 VMware VMMouse: device removed
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.366] (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.788] (II) vmware(0): Modeline "1024x768"x85.0 94.50 1024 1072 1168 1376 768 769 772 808 +hsync +vsync (68.7 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.122] (II) vmware(0): Not using default mode "864x486" (monitor doesn't support reduced blanking)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): bpp: 32
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 8)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.504] (II) vmware(0): Not using default mode "15360x8640" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.850] (II) vmware(0): Not using default mode "1360x768" (width requires unsupported line pitch)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1280x1024" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "576x432" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.442] (**) VirtualPS/2 VMware VMMouse: (accel) acceleration factor: 2.000
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.936] (II) vmware(0): Not using default mode "1680x1050" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "720x400": 35.5 MHz, 37.9 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.378] (II) vmware(0): Not using default mode "1600x900" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.743] (II) event2 - VirtualPS/2 VMware VMMouse: device is a pointer
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:32 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) VirtualPS/2 VMware VMMouse: always reports core events
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1024x768": 65.0 MHz, 48.4 kHz, 60.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.821] (**) vmware(0): Default mode "1024x768": 65.0 MHz, 48.4 kHz, 60.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.552] (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.480] (II) vmware(0): Not using default mode "360x200" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.525] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.423] (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.671] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.934] (II) vmware(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.840] (II) vmware(0): Modeline "1024x576"x59.9 46.50 1024 1064 1160 1296 576 579 584 599 -hsync +vsync (35.9 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.658] (II) vmware(0): Not using default mode "800x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.404] (--) vmware(0): w.blu: 8
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Default visual is TrueColor
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.795] (**) vmware(0): Default mode "1024x768": 78.8 MHz, 60.0 kHz, 75.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1024x768": 78.8 MHz, 60.0 kHz, 75.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1152x864": 105.0 MHz, 67.6 kHz, 75.0 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "640x360" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Backing store enabled
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "640x480"x75.0 31.50 640 656 720 840 480 481 484 500 -hsync -vsync (37.5 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.753] (II) vmware(0): Not using default mode "928x696" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.179] (II) vmware(0): Not using default mode "1280x720" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.776] (II) vmware(0): Modeline "1152x864"x60.0 81.62 1152 1216 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.687] (II) XINPUT: Adding extended input device "VirtualPS/2 VMware VMMouse" (type: MOUSE, id 9)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.782] (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.301] (II) vmware(0): Not using default mode "2048x1152" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:26 galassia /usr/lib/gdm3/gdm-x-session[5920]: (WW) vmware(0): Disabling Render Acceleration.
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.681] (II) vmware(0): Modeline "vmwlegacy-default-800x600"x60.0 36.25 800 801 802 1002 600 601 602 603 (36.2 kHz ez)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.029] (II) vmware(0): Modeline "720x405"x59.5 22.50 720 744 808 896 405 408 413 422 -hsync +vsync (25.1 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.386] (--) vmware(0): bpp: 32
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Initialized VMware Xv extension successfully.
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (*) vmware(0): Driver mode "vmwlegacy-default-800x600": 36.3 MHz, 36.2 kHz, 60.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.174] (II) vmware(0): Not using default mode "512x288" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.443] (==) vmware(0): Using HW cursor
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.668] (II) vmware(0): Virtual size is 800x600 (pitch 1176)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 161.828] (==) Matched vmware as autoconfigured driver 0
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.534] (II) Using input driver 'libinput' for 'VirtualPS/2 VMware VMMouse'
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.677] (II) vmware(0): Not using default mode "1600x1200" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.434] (**) VirtualPS/2 VMware VMMouse: (accel) selected scheme none/0
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.984] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.012] (II) vmware(0): Not using default mode "1920x1080" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 162.198] (II) vmware: driver for VMware SVGA: vmware0405, vmware0710
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (--) vmware(0): vram: 4194304
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.801] (II) vmware(0): Modeline "1024x768"x75.0 78.75 1024 1040 1136 1312 768 769 772 800 +hsync +vsync (60.0 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Depth 24, (==) framebuffer bpp 32
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.946] (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.723] (II) vmware(0): Not using default mode "896x672" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.648] (II) vmware(0): Not using default mode "1280x800" (width requires unsupported line pitch)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.043] (II) vmware(0): Not using default mode "1920x1440" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.087] (II) vmware(0): Not using default mode "1024x768" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.740] (**) vmware(0): Default mode "1152x864": 105.0 MHz, 67.6 kHz, 75.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.295] (II) vmware(0): Not using default mode "1024x576" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.491] (II) vmware(0): Not using default mode "7680x4320" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "2048x1536" (insufficient memory for mode)
Source: vevhea4.elf, 5572.1.00005628a1169000.00005628a1297000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): Using HW cursor
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "3200x1800" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.535] (II) vmware(0): Not using default mode "640x400" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.436] (II) vmware(0): Not using default mode "4096x2304" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.756] (**) vmware(0): Default mode "1152x864": 96.8 MHz, 63.0 kHz, 70.0 Hz
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.314] (II) vmware(0): Not using default mode "2560x1440" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1152x864"x75.0 108.00 1152 1216 1344 1600 864 865 868 900 +hsync +vsync (67.5 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.881] (II) vmware(0): Not using default mode "700x525" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 169.657] (II) event2 - VirtualPS/2 VMware VMMouse: device removed
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "960x540": 40.8 MHz, 33.5 kHz, 59.6 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (**) vmware(0): Default mode "832x624": 57.3 MHz, 49.7 kHz, 74.6 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1024x576"x59.9 46.50 1024 1064 1160 1296 576 579 584 599 -hsync +vsync (35.9 kHz d)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:29 galassia /usr/lib/gdm3/gdm-x-session[5920]: (==) vmware(0): DPI set to (96, 96)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.918] (II) vmware(0): Not using default mode "720x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.351] (II) vmware(0): Not using default mode "1440x810" (insufficient memory for mode)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Modeline "1024x768"x75.0 78.75 1024 1040 1136 1312 768 769 772 800 +hsync +vsync (60.0 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.129] (II) vmware(0): Not using default mode "432x243" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.530] (II) vmware(0): Not using default mode "400x300" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.763] (II) vmware(0): Modeline "1152x864"x70.0 96.77 1152 1224 1344 1536 864 865 868 900 -hsync +vsync (63.0 kHz d)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 164.759] (II) vmware(0): Not using default mode "1856x1392" (insufficient memory for mode)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 165.877] (**) vmware(0): Default mode "800x600": 56.3 MHz, 53.7 kHz, 85.1 Hz
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:27 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "840x525" (bad mode clock/interlace/doublescan)
Source: syslog.79.dr	Binary or memory string: Jan 6 18:22:28 galassia /usr/lib/gdm3/gdm-x-session[5920]: (II) vmware(0): Not using default mode "700x450" (bad mode clock/interlace/doublescan)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.104] (==) vmware(0): DPI set to (96, 96)
Source: Xorg.0.log.168.dr	Binary or memory string: [ 166.084] (II) vmware(0): Modeline "640x360"x59.3 17.75 640 688 720 800 360 363 368 374 +hsync -vsync (22.2 kHz d)

Language, Device and Operating System Detection

Reads system files that contain records of logged in users

Source: /usr/lib/accountsservice/accounts-daemon (PID: 5860)

Logged in records file read: /var/log/wtmp

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Virtualization/Sandbox Evasion	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File and Directory Permissions Modification	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Disable or Modify Tools	Security Account Manager	1 System Owner/User Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Hidden Files and Directories	NTDS	11 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Indicator Removal	LSA Secrets	3 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 File Deletion	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
vevhea4.elf	29%	Virustotal		Browse
vevhea4.elf	34%	ReversingLabs	Linux.Backdoor.Mirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://wiki.x.org	0%	Avira URL Cloud	safe
https://www.rsyslog.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fingwi.cardiacpure.ru	178.215.238.112	true	false		high
fingwi.cardiacpure.ru. [malformed]	unknown	unknown	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.47.dr, syslog.79.dr, syslog.29.dr	false	Avira URL Cloud: safe	unknown
http://wiki.x.org	syslog.79.dr, Xorg.0.log.168.dr	false	Avira URL Cloud: safe	unknown
http://www.ubuntu.com/support)	syslog.79.dr, Xorg.0.log.168.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
178.215.238.112	fingwi.cardiacpure.ru	Germany		10753	LVLT-10753US	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
178.215.238.112	qbfwdbg.elf	Get hash	malicious	Unknown	Browse
	wlw68k.elf	Get hash	malicious	Unknown	Browse
	ivwebcda7.elf	Get hash	malicious	Mirai	Browse
	fbhervbhsl.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Unknown	Browse
	debvps.elf	Get hash	malicious	Unknown	Browse
	wev86.elf	Get hash	malicious	Unknown	Browse
	gnjqwpc.elf	Get hash	malicious	Unknown	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	qbfwdbg.elf	Get hash	malicious	Unknown	Browse
	wlw68k.elf	Get hash	malicious	Unknown	Browse
	ivwebcda7.elf	Get hash	malicious	Mirai	Browse
	fbhervbhsl.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Unknown	Browse
	debvps.elf	Get hash	malicious	Unknown	Browse
	wev86.elf	Get hash	malicious	Unknown	Browse
	gnjqwpc.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	jefne64.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fingwi.cardiacpure.ru	qbfwdbg.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	fbhervbhsl.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	debvps.elf	Get hash	malicious	Unknown	Browse	178.215.238.112

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	qbfwdbg.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	wlw68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	ivwebcda7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fbhervbhsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	ngwa5.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	debvps.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	wev86.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	gnjqwpc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	jefne64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
LVLT-10753US	qbfwdbg.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	wlw68k.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	ivwebcda7.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	fbhervbhsl.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	ngwa5.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	debvps.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	wev86.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	gnjqwpc.elf	Get hash	malicious	Unknown	Browse	178.215.238.112
	arm7.elf	Get hash	malicious	Mirai	Browse	178.215.238.112
	arm.elf	Get hash	malicious	Mirai	Browse	178.215.238.112

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/proc/5889/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0

/proc/5892/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0

/proc/5894/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5896/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5898/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5900/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5903/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5949/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5976/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5979/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5981/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5983/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5985/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5987/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/5992/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6155/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6318/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6334/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/proc/6534/oom_score_adj

Download File

Process:	/usr/bin/dbus-daemon
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

/run/avahi-daemon/pid

Download File

Process:	/usr/sbin/avahi-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:ct:ct
MD5:	E447B50258E3D6EC9B34BB53C1DFB633
SHA1:	8AE8DE685A478E31D4C28323BC7CF43536F63A5E
SHA-256:	28DFCFACDFDB2F56B151B448684A88918E8981B6446E33AB63AB3D8C664C7002
SHA-512:	9744347889AE79B645C53F7B48AC19365441CF3265CCD5AEF79EA164976B861D54341E40BC5CFAA667772A4199073C5C5301BA9412F3AB8D176AACE53D927793
Malicious:	false
Preview:	6328.

/run/gdm3.pid

Download File

Process:	/usr/sbin/gdm3
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:IGv:I4
MD5:	7230424E7D3E372FC3B7652A32CA23EA
SHA1:	ACE4182875EF90D5C3E88BDAE9FD0ACB22565BF2
SHA-256:	2BCD075A0755DD77FC0D81B5AEDB64D33F5E81AF6938603334559F7F07271213
SHA-512:	F14D19C686155140C8912CD3E080713DCD4646CF04B33F42ED37222479D38D455988E61CE58238F1EBE6EFF9481C3A6ABB4FFF3C7036AFB9396AC138F6C9AAFE
Malicious:	false
Preview:	5856.

/run/systemd/inhibit/.#1s4lp8V

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	143
Entropy (8bit):	5.095924324939378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifg+jAIppTMXSHK72X8/Sf9n:SbFuFyL8OAApfFAApLHK7wR9n
MD5:	A5F77ABEEFFE1369F0C689B54D415617
SHA1:	A6A156F8E7A320EA40EBE9DE9E7670BEE6158FAF
SHA-256:	58665743C27930387236671DA74195DD0BC62D1B1C1EC99744C6080CCA0017A0
SHA-512:	D411CBC9EC07B8D9494CE14DFAEAD5E82E962A9E9A0263FADA5372B76F42226E039D19764397D619DC8B61D298A87288DBA6FDCA047DB0AFB4CBC8E52A0125B1
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6164.WHO=UPower.WHY=Pause device polling.FIFO=/run/systemd/inhibit/1.ref.

/run/systemd/inhibit/.#24EVzTY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.209300645304899
Encrypted:	false
SSDEEP:	6:SbFuFyL8NEL1QXccIRI/cIlGjdC+2DqKLXv0Rsz:qgFqXQXTI1IljqKjcRsz
MD5:	291E38AD4C2C226D361A65E481C690CD
SHA1:	6B0F60F90C1EDA0296E32DA1CF7EF1D5F000B80A
SHA-256:	E7D436C15BD090C3AA5F3B926A3192198F62B342F6C21B29AA1204091A702F5D
SHA-512:	AE5C1161DC540856E7915BF6D2EE26BFF68555AC64E0DF37F657416F3699A7883008744D71E3B8BE06DEF9C267756BC860693F1A09AC7B78F77B27FC537CD001
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=handle-power-key:handle-suspend-key:handle-hibernate-key.MODE=block.UID=127.PID=6361.WHO=gdm.WHY=GNOME handling keypresses.FIFO=/run/systemd/inhibit/2.ref.

/run/systemd/inhibit/.#3eHARLX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	147
Entropy (8bit):	5.153322349592419
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9c++Nq4iXoqKZLXviX8/SfWADv:SbFuFyL8OAAx+2DqKLXv0RT
MD5:	0D379EC32FA06B557855FFDF14204BF9
SHA1:	F9F9964B05FBC9530F2D10FAC9CD1670ECC01915
SHA-256:	267013FF2D412E035EF174A4E34BED18C8EA73DE98BCAF916AF8C65454ECB217
SHA-512:	3E1A86D50603C572CFA127B7455CC0A8B763F76F144E5FDCA707B05B54E635F19F5A2D84EA4210DB4E74D1A45917513FD9B725E2064DE5DB04E6D1376B862932
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=127.PID=6361.WHO=gdm.WHY=GNOME handling keypresses.FIFO=/run/systemd/inhibit/3.ref.

/run/systemd/inhibit/.#43M01yW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	152
Entropy (8bit):	5.165199761184817
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9c++b1C3iXulpv5RX8/SflY:SbFuFyL8OAAx+HlpLRS
MD5:	A11BC39E9CD6A9AACF9142A124581856
SHA1:	E49E5C01C40D0C1A01EE9BB8992CF6AC3B051C1F
SHA-256:	9C1E6916B6EF76B81F0424B55583E7CACE1B6F1C68A008C3577E4286BC0099FD
SHA-512:	D06913C151825A8FFC5F7150AF05454B98F742B478AEF3C4DF93F013AEB0CA72A3EA755C75DD20A2A8534C87C47E5FCB4A1B12CA540E7CC86A18E02C91A1093E
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=127.PID=6375.WHO=gdm.WHY=GNOME needs to lock the screen.FIFO=/run/systemd/inhibit/4.ref.

/run/systemd/inhibit/.#5ZqM0hW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	164
Entropy (8bit):	4.974198609053518
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs/eWJAAVu9ifgWiDkBoDWicRF2Tg+tX8/Sf5:SbFuFyL8OAApfjiDjDJcjKR5
MD5:	1374D4DED5076E97713B63DEBA57EF35
SHA1:	4CE4D4228C4717BC692036D97CFE7BCE42BE05F6
SHA-256:	453967932C006AADD30D09690EE82F9C4FC2FA5F5CD3FA4E29AB25B0F446DAB4
SHA-512:	406B956DB6F95CE2BA0DDDE54A8A2F12FAF0A713165917C2816EA5CD42340E8D44A484B3EF50A7C2AEC57EC5D846DF8DB4E2421725788B9FFDE3EE12436E4466
Malicious:	false
Preview:	# This is private data. Do not parse..WHAT=sleep.MODE=delay.UID=0.PID=6711.WHO=ModemManager.WHY=ModemManager needs to reset devices.FIFO=/run/systemd/inhibit/5.ref.

/run/systemd/journal/streams/.#9:68432vIcgLv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.517526080286305
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MoYTCRsbZjFQMzKaBu:qgFqo6g7/+0+f+MoLmvTmh
MD5:	08645BB0A9D543E6B33315D845B9B56C
SHA1:	5FFF03F55BA3B05211C1923E3DF77DF9C2D8CC85
SHA-256:	D2D02A14644B416002F2A8C0FB8F4DA0C26ADAE6BFB19D54DAED0BF15473F5D1
SHA-512:	2F4F0B8FCEDBB0C87EFDF8743078C76B8916CE18A4FDD81AD0CFF2A904256693621F2F56263CF755D14A2DFF8F809633B83CAFEA2A5F51809DA8A919269914B1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b616d080969c4d0faa2e8fdcd15375eb.IDENTIFIER=/usr/lib/gdm3/gdm-wayland-session.

/run/systemd/journal/streams/.#9:68434JRWcPw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.514529935128731
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmrhWbd4ojs+QMzKh:SbFuFyLVI6g7/+BG+f+MydtjFQMzKaBu
MD5:	889993275CFACE145DE076A2E997466E
SHA1:	29CDA3E8277FD808D1FB1B51203889C770082A3F
SHA-256:	94CA53C56AF64773BE0F7CF10BFB44883B61AB2BFEC494CD44FE55D40F95D89D
SHA-512:	D608694D2CBF55C4206216D7A52E081C6E8321D4F4032760824623F56B545BEB64F1965708ADACBC0B9C96A463086D06A5D6C7CED8DA3EC3C0DFDAF7577A598C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a4b397f9f2dc4c77a361d8094fbbd9c4.IDENTIFIER=/usr/lib/gdm3/gdm-wayland-session.

/run/systemd/journal/streams/.#9:68440eD499t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.389421604258064
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoyCcEHTNcnEmBErQc:SbFuFyLVIg1BG+f+Moy2TOEmBErQ0Tjx
MD5:	848367423B58094C414691EF36FA8C91
SHA1:	6CEDE636A3AFC9DCD1506CF35B380CBFDE2857F3
SHA-256:	94906153C38C1C74E439CD6F1717B0435A4EA55D9BABD40966B579381362AFF2
SHA-512:	CBB7503B38BCD448F8B142AFD326C58A8A889B91A561EE407502878D807C96E01F5162708288F2DBCDDFCA8B07B1E9EFBCCDE5DE0BD92A6402B9A4B3FE08D3AA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b41c09ae0eb646ff971a6b7d22a24856.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:684672gqSDt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	190
Entropy (8bit):	5.363701016753659
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmz6oS8VL0js2LTYW:SbFuFyLVK6g7/+BG+f+M+PoL0jN3r
MD5:	5E1DA034C65482999320DC76AAD9A60C
SHA1:	F491C8697689F40BC0293CAFFA7ED2509C121229
SHA-256:	F1DF52424A7D2FDB348F700A8E435E2BB6350452F9E7BD8B0758DAFDA8069B2C
SHA-512:	F0484357A744B0D4376275616E651CFEC7C8284DF21CABEC6BBD7551A62F5EA54972AB371E9658A72B609365009CD473886A60F720A4D2EF6C3F1A6A970A80BD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9cc92d8ed77944a9927ae53dc86db7fe.IDENTIFIER=gnome-session.

/run/systemd/journal/streams/.#9:68563ViAHAv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.468508655126854
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+Mh1V4wP0jFmzXvn:qgFqo6g7/+0+f+Mh1V4wGQXvn
MD5:	9505243A2F5589C240A91BB0FB6EFC4A
SHA1:	E156CD931CBF01A3F4EC1C598F6DB0AEBBAC948D
SHA-256:	53157B86E7594536C514D0883167CBFD74D902B871CCC70894469AC7823B2CF0
SHA-512:	85FD0A21D95C40760C3B148E273FFDA84B8C4BBF63AF949050127C5D8A143268EB66262086912FA08F77B5E0ACAD9C6BEED2B8A971076C9C91D6D3A52504F57F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3361b787e3b047c0aff43b92f92fce51.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:68565TIs7ls

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.400959780105219
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm5ukH7kRrjs+XWIU:SbFuFyLVI6g7/+BG+f+MRbkRrjFmzXvn
MD5:	30BE67D2D9E07DCDB4C753C445662A3B
SHA1:	B9FDE8B9757CB59E05B6FE2F68A6F3421BCEC736
SHA-256:	C5CAAEE54F79D7DBD6FDBC62E86AF30F442182AD3DCC867E8C20324FF6E8AD69
SHA-512:	37D45567939236F244279CFAFC9970BC7A7736ADFF571A854A4F5D019F1DEACE1AAFC7EAB56293090A453DCC06A37C28F56A81C0D02C7C10605E75E501DA26D7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=37d9ccdc7402422792a776af0ef640f5.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:69477akcfgt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.480871382533549
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu6WGjRxVmyAA5qjsv:SbFuFyLVIg1BG+f+MurGHQ8qji4s
MD5:	5181B27DD0A3DEF3A13D3B703C5FE1CB
SHA1:	3E33C961F95B33C82F5F524A79D36F8C2845F170
SHA-256:	B9092549283324F3A017101AC4D73BFCC3C1CEACD7C56FFDC598F4A86B4228F8
SHA-512:	215213D165CF1C2516F89F77B09E3FB0B9D09DFECDC781EAA2BE6E010539616108CF19119A38FEDA25595B390C7CCBB7973860FABA5FC53F8D384B0A72089A42
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0bcfecb7c974bc88a8e9f23cedfb3ee.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:69478nGNbaw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.476037169753439
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MMu0JSQeP9ATjZcHcljX+:qgFq6g10+f+MMuESQpmAu
MD5:	16D62232519DD21B88F5712738D1254A
SHA1:	9E812B238D92BFB92793721F9CD2A1C13A1061DB
SHA-256:	1FA5549262DABDFD1370D4C8A270FD7CB11E3763033BBEA9C707C2C10FCECC16
SHA-512:	50719A4D0946C1A086CD3750AE77B0C3FC706E491E4BA62A311AAD5EDCD6E28EA7BC20EF6197DAD062899E577852E1DE2A010CBCE280C8BEAFF6B1799954CF63
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=59085a04e2dd4ef9b24e7175d721186d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:694855nKuss

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.433960628619404
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyXXBZTDCpcKggS3Zd:SbFuFyLVIg1BG+f+MyXzTDCEgojosQu
MD5:	BEB0CF5F5266647C32872B7117066E2D
SHA1:	88089311FF8B8F0FA4C7413C65CA493DAAC345FA
SHA-256:	2032E1E2B73433B4A3813BEC3E507218512FB66C3A3AFCBB4FB3116D75CE66EB
SHA-512:	78512FB8B2C55689C0C191D9BC4E58C48471952FE95DDBE2272E6152CC7BF322F08653CDD80246DC0B0A754183B6F5C8B944083597F76F8005AA283C17A8CA9E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8521b28feef84f929a2c98656cbebe7e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:694927fibew

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4338362152873945
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7bfcE922kmK02lsjs2o:SbFuFyLVIg1BAf+MMEHY2jNALyAZD
MD5:	EC3FD8C23B86B65B66DD88A08D122885
SHA1:	27CA7D3B78095C429D6AA61DA5D8C08B8150ECCC
SHA-256:	45CA5591945216137166A04A470926DEC86C798B8C8F9EA1087D145EE0386254
SHA-512:	6B73DA753D08A24C274703FD192BF167CEB92391E105546A4F1469EAEBC8A138E779C87CDAA6A0A79D3612378E02FA7098D1645C007B45CEA7FB25726501E751
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1a365949ac5843f0940cecf0210b97f3.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69493hah6ds

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.468342835377422
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoeXSnDZ0yQvPsjs2BbM:SbFuFyLVIg1BAf+MoeXJyTjNdQIeXD
MD5:	27D76D1C720172B69A270417EABD4CEE
SHA1:	07A7AD79E84C1085F1D322967F236DAA7197E1A9
SHA-256:	68691C6938C77EC39F65D1F47225AAC57D2F5D334ABBD97D76EF8B87DC2ABB2B
SHA-512:	431ACF74D3F4FC3F4A53823760C3F0F8B50EF83C9640EE75625368080C0FFEBC9F56659BED83FB49F5E011FE58B889617BDCCE76C2E00D68F429B6035EFA06E4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b67270b5af85447abe1d4f3aa541579b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69494UFaZIu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.54097377885156
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+71/EAh+sjs7Lbgw3:SbFuFyLVIg1BG+f+M+h/EETji4s
MD5:	019ACF90C675A5E10B5949C55B62CD1D
SHA1:	1F4CB6BD45CBE25FB4489DCDD1B85CA49451EC56
SHA-256:	7CC8E7E1618CE24452D55AF789A88707881C032F41CA43AB2D4DF3688E8809CF
SHA-512:	FA07520B01D56EBBEE6E5C5323D37DB71AA167CCD95A6924061EB88DF8E9139C95A62AFFAF84FD4AE2DE9C09A28E0A72D382CD505E20F874941BBFFB7603A4FD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4de94058b18f4a9ea7114b67e3f6b612.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:69593aOTTZt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.422039695571341
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrxcHEMuGXQTX/EX5A20:SbFuFyLVIg1BAf+MgEMJXQQX54jNTZD
MD5:	2B831125E358D2418B288915C250FE8C
SHA1:	F19EFFE042D13D4C1AD8C83003C1C3E7A80AD4D7
SHA-256:	B6EB806F955ED5CE19A991F98686C77B93CFF28C121A9CC101FBB62CFC257DF2
SHA-512:	7B747F33A1EBE80294E9A6A01AC44EE34BC396B7103414E8A6258CC010A64D2C976B1FB259ACC78CE8A6EA0192A82DBC17B501A1BD61C85F72C89ED3980C3DCA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=adb9280a107c4528b4f32562a8ca2e9f.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69600NYq8Qt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.438843986431711
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MrkRWurqjLTTIWTIL:qgFq6g10+f+MMWBEWEL
MD5:	AE475DA70DB540EA2329F57AFD3665A4
SHA1:	66B7F7634B18DEC0918400D65F3DE06C058D7055
SHA-256:	3F0C6342766C19067986E082D5F741B55DCB7A59A037B237B438318A51A8FBAE
SHA-512:	850BBBA34EED05AE57A7A8999281FDBB0ACB64FEA8A91302D0A74E3660BF116EDBD8E006796CD084C91F1838F8548CA67BC10A51BB50F22F7BD0AEB96F639B8B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5577ce4711f24ba5ad1326ab519043f1.IDENTIFIER=accounts-daemon.UNIT=accounts-daemon.service.

/run/systemd/journal/streams/.#9:69605MxhDew

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.452150662435301
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9xQ3WWXfiKjY+sjs1:SbFuFyLVIg1BG+f+MLQ3WWWjbVC
MD5:	1462DFE642C6B82414242F9827F7A795
SHA1:	C6878553C4ABB08B4D7D020681D594C7646F435D
SHA-256:	EF4263111F50F71D83DC0EEF34E058D4E8BD4220D4B1785B04EB64D95C7427BB
SHA-512:	B6C5403FD52FE797DAB171851FEECCCF8EEB6D40C8F3D583FDA923AFB4C7CCA6569FECE822A2AF4310B9B786BE377C4CC7235469FF7224EB8D7C3AE1FB2F97F3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=739c58508afd46a1b23279b96cf66d7c.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:69627yOtXzv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.391058980532509
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MsGX/HlvWxTjNq:qgFqo6g7/+0+f+MsGX/HlvWXq
MD5:	44C153EE221068AFD801780A27B76B52
SHA1:	6B4C18D91EB915A80BFA73272B77CB1C416E38AD
SHA-256:	66DC8A479CA4DF2A5B6C380123247217E22DA004A56FF0A8058666A57AABF4D6
SHA-512:	2329E06E3D615D2386011603E7E64224C96C921D9F9E14900943FEC3835E3EC7E0CF2C4555E1EC83CD1FF8D4C370CBBC2BDB93415AF7016B0CDA8B60C47F1D6B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=adccd2da3b734512b642d6d753ccdb50.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:69628BwQUSw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.445485534645776
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm6CW0RWbnvkX0sZQ:SbFuFyLVI6g7/+BG+f+M6CWoysfjNq
MD5:	C60D5244D8C619C71801A01680D335E5
SHA1:	11ED4989012D2791419F9251A6A50AA0763DD054
SHA-256:	0094A58928039EA53DB48AD8645FE7357C55B198D46918A67A2DF2D54702CD1F
SHA-512:	6C658CCF6D1F6E6E6DE21813E3C6B882E172FCB4E6E96FD11D223F876853F695E1B5C7B784318B28DDD1D9CF04F685E82B04183F91EDF981D4732C6B7034CC99
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=02b71bc6f5a8433f805893aced2a8374.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:69816TeHf5u

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	190
Entropy (8bit):	5.343258268864782
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm4VRZPR9kuG9VwAd:SbFuFyLVK6g7/+BG+f+M4VRxlGvTjN3r
MD5:	E05CAE46538633DC085FF9AF4B220C2A
SHA1:	500ABFD41B2DDD3B064CB27B86E0263C5B4B6202
SHA-256:	A20D35C2010371A9AB9DFFD00B67699926F22F1850F36FFC3D6808F47D2EC877
SHA-512:	8CF529C4982AE3A95AC09C12436039A73C65D61EEA203C1A575DCB675AD86CF8FA96E147EDD53397A4D54D28229CBE23FBCDF8C1D6774C3DD415911E81007774
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=210147160d604a169b8b822abcb8079c.IDENTIFIER=gnome-session.

/run/systemd/journal/streams/.#9:70265QSRfYs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	213
Entropy (8bit):	5.371650509650345
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu7gMB5AMqjshEGuM1:SbFuFyLVIg1BG+f+Mu7yZjuTt
MD5:	699F3D53044386CA5DF3187F1AE595E3
SHA1:	C497175DCD09CE83BD41D4A02539A82E5D926923
SHA-256:	89CF32A67CA328301F0C4B1AD8B8FF60E3BA198F34C20D0F1120D4665130C874
SHA-512:	5CD4FBDFB68C89988DFA1719F48897A46F4380778AE04842BEE871C21C51B27F6950A7A040BCC3B36225675A984B896585B756C7D724E6A89C5D64486EEC900A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d941f7fdc3c74fff993d6141fee21016.IDENTIFIER=packagekitd.UNIT=packagekit.service.

/run/systemd/journal/streams/.#9:703032BJ2ys

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.3706105627558465
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+Mu9NASVqjFmShmWc0vn:qgFqo6g7/+0+f+M03V49kWc0vn
MD5:	8A6694DAF2EB601D5B82E741983BFD6C
SHA1:	BD2C103AEBE0E0FFCE3FD38B27BDCA6764591581
SHA-256:	F48AED8A61E607ED5AC0BB2F47DFC7C1867DED58049DA3BAA0D664065AD257F2
SHA-512:	EECEC932F42E8647F2CA1F923ED6F33DE1F7C85AF57E3346436E529C7E96D1D78E84F416DE75DD603CFC1484DF349B04A01D0872C7D97B23661A5614BF6C758E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3877eceeecf4a6e99b97fca61e7a4d7.IDENTIFIER=org.gnome.SettingsDaemon.Sharing.desktop.

/run/systemd/journal/streams/.#9:70304J37s9u

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.401266222061813
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M+E5YTjFmShmWc0vn:qgFqdg7/+0+f+M55YN9kWc0vn
MD5:	4534E1D19E12E85C22778193CF693791
SHA1:	3A42E277DB790A5FB5EDCA0C55C355AE921C6E66
SHA-256:	087BEB6EE89CBB1A3AE259C1691BB9B9B4C6C7E2863A7A0039E932549CD91D40
SHA-512:	F1135B1CCF0993F1FC4F1E1A1772612281215744602E0512E7B3C7F7C1394C9757DD48D0BDF992EA7DA6C43B1B1C2432013199E488FFDBBD9392D5DC2281AF04
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4eaf032764b04609b1ef4b90b19dd551.IDENTIFIER=org.gnome.SettingsDaemon.Sharing.desktop.

/run/systemd/journal/streams/.#9:703253lyhhs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.4336179623000564
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M6qz3cxW0jFmShmVxfvn:qgFqo6g7/+0+f+M6qzMxW+9kVxfvn
MD5:	E6A74A3A5EBA734E6D113C36D96902A4
SHA1:	37E78FEB02396AF1C3E3A8ED1DADDA4B04879D62
SHA-256:	D4B735318294941D45CCC3B8EFDF2A05AD5A080E9BCF6A8D37505EA2141FF352
SHA-512:	0D7FADC64D665B2539B465833099087470F6AF99C33AD040E877ADA620E7220DC22A3CDD0784A4A05BC0E5DE52E1FE1FCDA3CB65891BE048DECAA08EA23623EF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7ca36d937cc945859e07594488b18db3.IDENTIFIER=org.gnome.SettingsDaemon.Wacom.desktop.

/run/systemd/journal/streams/.#9:70327IdF6xw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.417218183162828
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MKTvpCON2jFmShmVxfvn:qgFqdg7/+0+f+MI0F9kVxfvn
MD5:	E21298C3E3A461357ADB6EB224B327DC
SHA1:	B1F1A2486F5C465EA552F7848AFA5786197AD573
SHA-256:	32E525C6BD528C15A58883A43D42170934DA1A799FB5DBBA03200A56AC50160E
SHA-512:	6DB55D8D5CC8B3415E7429349E141491CEBE82C477B2B35A0C9758F861BB3F5ACD163970E962D004CEC528B2826AAF5FD78F569FC8EB02DA37CB0ED147B41186
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cdc01856ec1f4ebeb19ec92792b152db.IDENTIFIER=org.gnome.SettingsDaemon.Wacom.desktop.

/run/systemd/journal/streams/.#9:703285pAoct

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.424012861623571
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+Ms0aTxYZjFmShmDxfvn:qgFqo6g7/+0+f+Ms0aGv9kDBvn
MD5:	CF03E30A74207CF89500C67AEBE8CC8E
SHA1:	DB713078C4B17F3F36B75777759FED276192BE71
SHA-256:	712108FEA342C8B08FBF7977D7C9F5E58C55E3781FE23FA3DE8E6EBC7BC452AC
SHA-512:	3E2C3A8A8E50CD24AFC6902D4B42F473C86AAF70E224EFA2390FBE4358E13C9DA9B688FE664A563EF231874017F47793BE6D68371A609AB59C5D0F040BF81C91
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fc7a74f1ce134bfe9fd469884a93e0a1.IDENTIFIER=org.gnome.SettingsDaemon.Color.desktop.

/run/systemd/journal/streams/.#9:70329rctUFw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.469400885250613
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M3XRFigqjFmShmDxfvn:qgFqdg7/+0+f+MviL9kDBvn
MD5:	06F9AAEA5DE1BFB53595C2F5404775AE
SHA1:	C05F38BDC0D71BA2AA46A5BCB607E98941BCF8FB
SHA-256:	D670045D21E33811985AB551765D176006678C647C6B1C1C796629A26D31161C
SHA-512:	0F25232C7DBAD63091D4C604D06895061C2E2FF2C5DDA14A022649C34AA73F3566759835ECCD7C04881F7061AB98FA274267F68B9EA5E15627E534C79B1A090E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=307fa07665b3489294fc61c4c2c45a1c.IDENTIFIER=org.gnome.SettingsDaemon.Color.desktop.

/run/systemd/journal/streams/.#9:70331cypDsu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.450448871437645
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M9oLtsXTt0hTjFmShmxBrvn:qgFqo6g7/+0+f+MWL0TuhN9kxBvn
MD5:	6481E5BBB2A2550D292BA456E6A0EE98
SHA1:	E4C4E579D812DC36C7313FA10241ECF828BA8CCD
SHA-256:	E39C7737E061E2AEF55B48C88839793DC0EFD909FBCBF10B9D9FF916DA2E117D
SHA-512:	B8A4D19B960F52C4C6AACB1EDD57969E358D5E1AD2D9E7632B216A7AFD7EF1DA4AA809B4369C7F861BB09C3599CBD84771842C9984AA737E60E1310F57402D73
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=94b172cf1f5b44aeb310df9969ec260b.IDENTIFIER=org.gnome.SettingsDaemon.Keyboard.desktop.

/run/systemd/journal/streams/.#9:70348Xulxav

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.432100247584435
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M4D9HtP5qjFmShmxBrvn:qgFqdg7/+0+f+M4D9Hx549kxBvn
MD5:	65AB25678A4EC18D6E83E76F16CE9B30
SHA1:	662BAC649CD7039026E0F22FC3DB1AE504F47444
SHA-256:	3D3031C84E880D4289EA5A088C1EDC37B1A89B510BE6876C5855670FDC169D1C
SHA-512:	57B02D375741196199B46DCC6635EFB4A707EE1E4F46DDBB01892C7A4BDCD8FC82BEEEE59C31E4AE50163DB5E0AFE24F516237125DF2866792C7FD475EA88A75
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=550fb1ab48204d44b3b38f81946aa952.IDENTIFIER=org.gnome.SettingsDaemon.Keyboard.desktop.

/run/systemd/journal/streams/.#9:70349DigoZv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.418816190072504
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MqpTAOZjFmShm5PKJ0vn:qgFqo6g7/+0+f+MCb9kYJ0vn
MD5:	6C0CDFA13A607C3D2685AF98F0319562
SHA1:	9F773C528DAECB7B01FB4691F1B4D03A2BA16371
SHA-256:	EAC940D496A2514DCA06AFEE265C1F058EBB79169FF1065AD5D9740BE7FD17E8
SHA-512:	87259E5FA7DEA8374385E16308BDEDD6B26AE707A8AC8C1B6268132135E380A6BF66781A92BF16DC3948C701C2B3D2E0029644F2B45E2BA6512ACB09DBEFFDAD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=35bccb3312dc40b98a4383158c2ae3af.IDENTIFIER=org.gnome.SettingsDaemon.PrintNotifications.desktop.

/run/systemd/journal/streams/.#9:70350GqcAdu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.395799275772085
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MwtVG1WQ5jFmShm5PKJ0vn:qgFqdg7/+0+f+Mw/O9kYJ0vn
MD5:	6C155EDDE6A5AB22A6C0DD939D2F6AA3
SHA1:	ADCFFBF989CB5F6C8819C606C1739D9F843C76E2
SHA-256:	292D652BCA976E960FF6AE97A83FB4FC883CABC3D9BD14C70FD407D1EA52EF7E
SHA-512:	FC5CE52E26F9BC92D9651B31B9C271DF7D2153C019695495F8164EB1373A82F602A7E6B383B94059007E5BAA973651CCAE51558F5356032A0375539BE22D6ED8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c81dc2ee9d0d406c8df316a1b837dc00.IDENTIFIER=org.gnome.SettingsDaemon.PrintNotifications.desktop.

/run/systemd/journal/streams/.#9:70351qjB70s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.434965921079871
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MuFptqNjm48jFmShmatvn:qgFqo6g7/+0+f+Maptwm429katvn
MD5:	ED1FE44D1C092A10423357575B51299E
SHA1:	8E73EB26259A802261F91ABE7B59B8630D862A2E
SHA-256:	EFB0E252FC81378DCFDE73EC43229EFF5990F9B428CDEA1AE9CDB2795C9F86C5
SHA-512:	6E82EE4BCA3622EAB66E6003AD20C5344C87C9253D9DBAF3C75CF8D1F2A0A2469536E55F9D16BC649525E8A9FD26178F52CF8B8882161471F899B07BCDB1E2DF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3503de4a2e1478281db0c326474e4ec.IDENTIFIER=org.gnome.SettingsDaemon.Rfkill.desktop.

/run/systemd/journal/streams/.#9:70352PEwTls

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.47065807823055
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MuASBD88jFmShmatvn:qgFqdg7/+0+f+MufBY29katvn
MD5:	F357B8021ADB56230F04FB9AE17CC577
SHA1:	6907524D166799BB7596800B4801FCE1DEE26085
SHA-256:	6CB9305E8EA2DE4255E0F30FC2BE16DBC9C88C0CB9A4CF4721210171FF2A7308
SHA-512:	6CA582795FD4B6C26B7FC589D03F62407381E97ED36FFAA3918C264A36C3B1268A472FBC45DB2674E03F99E550C669B06E342D19A6E74589F7CD1577C1FF562C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=325851fe676846399f32b9eaec418fe2.IDENTIFIER=org.gnome.SettingsDaemon.Rfkill.desktop.

/run/systemd/journal/streams/.#9:703532Xzjju

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.426746204485435
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MuJhDQVkjFmShmzxvvn:qgFqo6g7/+0+f+MuJh79kztvn
MD5:	E03005D14A1D929CB8B5515D61EB97E1
SHA1:	E04572AF4B74AE957C40D61336D769A973D17F95
SHA-256:	243DEDDA325C0AF214AAF1BA57CCA96DD5A39AE50B2B42DFE1E4EA1432B116B2
SHA-512:	C1D0167969EA9F85F20F88FAF45E543E9C3CADADD87F281C5129056CB55FF9A8F6C176142C7A6AE874AD04C0B82E2F212179837602D3AF14DDDAC0AC6758FAE5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7ca4911af74d4e5fb8de5bbff5418742.IDENTIFIER=org.gnome.SettingsDaemon.Smartcard.desktop.

/run/systemd/journal/streams/.#9:70354Aw2fds

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.358342323246412
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MKaAR6jFmShmzxvvn:qgFqdg7/+0+f+MKHRI9kztvn
MD5:	75EB5A8802F2DCDE215514B6A7250C52
SHA1:	0444FC56664231850DD41F0183D0DF66C3AFE107
SHA-256:	41BBC7FBF7BBA76531E7757E8A6A9695C350F5AD13F723AD296CA464EE9A2B28
SHA-512:	6DF55BADF0311122669AFD848139D7ECA00C644C537D37D15364DE03AD5F49A661840D2A76C79F5D3A9500A78C5A095310D7A17341F30A6F1302618A44386504
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa68827c7eda4c62a5fb2eafc20722c7.IDENTIFIER=org.gnome.SettingsDaemon.Smartcard.desktop.

/run/systemd/journal/streams/.#9:70375PMG3it

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.386838548238196
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+Mo3gP30ZjFmShmZBvn:qgFqo6g7/+0+f+Mo3I+9kZBvn
MD5:	9795D78CDF7D7F73D4167CA2812D5341
SHA1:	A60A6C2B97ECACD751AF447C3372BD1BA8C70F72
SHA-256:	A422E9EBF422134C1844599993D2D52534F68B00A070F2AD336F17EB8F75E4D5
SHA-512:	A4CD47C7A51E950D3664DEFC4EBABCF548B6071ABBDB56F61DB8BD93AA3ABE0B29E45040800A148537E30782338D6ACF62E70B0FFF42647CBBDC3A72C3C7DAFA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b50fe3eebe2d428b9fda1710f6efa5c4.IDENTIFIER=org.gnome.SettingsDaemon.Datetime.desktop.

/run/systemd/journal/streams/.#9:703770OQz6v

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.360655882218512
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M6S5XDHWjFmShmZBvn:qgFqdg7/+0+f+Mh5XDHk9kZBvn
MD5:	4668C323DE6D4606764825AE72B50FB7
SHA1:	217AE4AB1833ABF48B9980DB3DED77D2819F625A
SHA-256:	751F54DC70E66C132CFD67FDA5C27908C82F6BFA9944EF049EA6F4733FEEBAB0
SHA-512:	9AF746A12A5E6FE068F47CF5C871B4E91118F300A5ACE194288D05BF0EDCFA60CEAE1F93DA14D120525BDDAA3A405C6212DE600564FCED8615A1A9A83E097766
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0acc666fdd404c02bf1c7ddb8a30b6ea.IDENTIFIER=org.gnome.SettingsDaemon.Datetime.desktop.

/run/systemd/journal/streams/.#9:70378BfqnIv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.436407747412897
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M871HFIT0jFmShmwtvn:qgFqo6g7/+0+f+M87NuT+9kwtvn
MD5:	3BE87B87DF71A4D3EBFF462F0D3CC82A
SHA1:	1EBBC5C5C499540B48FD6E6A68D5F6E4813A6094
SHA-256:	BC12A02E42447E238F6B942266021323E50AA5051C600261A7F115DC3B51DFEB
SHA-512:	B231B8C444110063E38524391C9F12EB3B2852FF34B2A3BF4602979FBA09AABAC9DD034BA6F91EFC60BBDFB6D3EA38E971A2E3AD058825C4A3629BBFFC72BE29
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=691ff9c8a3084acb89c0740c74998bb6.IDENTIFIER=org.gnome.SettingsDaemon.MediaKeys.desktop.

/run/systemd/journal/streams/.#9:70379RLKqfw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	219
Entropy (8bit):	5.380615305214764
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M1GUESGd2c0jFmShmwtvn:qgFqdg7/+0+f+MVEvd7+9kwtvn
MD5:	580F92BD7A7DB82C963820D5B75D1BD1
SHA1:	51CE114C25397F6C7B42B61A0D755360CA3A0528
SHA-256:	FE46B0563ABE5533B07B62C7D8912AC907CA2563E31CCC85468685ADCCA193B4
SHA-512:	BC9C7D029C2AF27C08CCFA68644FA554788FB8030F93419FDBD0B80E4D79F46D03DB8A484CD61E906B3605FC3F21E9A77969EE1527A9CC921300DED89E08A39C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11067c1a756840caa5d661dd8e83ede9.IDENTIFIER=org.gnome.SettingsDaemon.MediaKeys.desktop.

/run/systemd/journal/streams/.#9:70380dH8Azs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.436173625303835
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MkYuNRb35TjFmShmkiEovn:qgFqo6g7/+0+f+MlwRb3n9kVEovn
MD5:	F34EAC3FF2338A66DE7FE35D230BF0ED
SHA1:	098C641BF2FD7907147C12CC1816F907DFE894C8
SHA-256:	073700C7C908C73257C931384219FE70A0F81ABC1EC499CAB2300396E93C218C
SHA-512:	13BA14C9BDB0FFA1696D79A42E8598DD8FD0982B8BAEA63CBCE291283C8B5E4FF6B998AD477325142129F4D233019C50FFBA168E12520F9FB84478FE25CAD814
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7012ad0a6d4a488b92359b8e443a48d3.IDENTIFIER=org.gnome.SettingsDaemon.ScreensaverProxy.desktop.

/run/systemd/journal/streams/.#9:70381gHyR7v

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.428112444225914
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M2n72yBqjFmShmkiEovn:qgFqdg7/+0+f+M27W9kVEovn
MD5:	7A22C28579269EF924ECB8F8A9DC3450
SHA1:	B4EB531B53BB1F5427B5A0310E7E2DA1F9CAF760
SHA-256:	B773A000B88590B38A6ABB46D9DD68282DFE49C0E574383EFDCA87E335EAAB76
SHA-512:	B31004CBD6C9674C2F9C90BFCDD41340FCF648A3F76CD53F0D13571888A00BAB29DC9718F51F1F94EBBBC52ED5B23FDBE9EAE5500441EE0E86FA8AA594E53AA4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e5316653244343859dc2ed4c19432413.IDENTIFIER=org.gnome.SettingsDaemon.ScreensaverProxy.desktop.

/run/systemd/journal/streams/.#9:70383olkPyw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.43960380638286
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MX/VVk0jFmShmpvn:qgFqo6g7/+0+f+MvVVL9kpvn
MD5:	040EF75CB16185328B942BD2AFD95F00
SHA1:	C43B55F07FE1D95F3E216E44165A09C8459DFD09
SHA-256:	A0CE46EFDBA12C74565C2917D79483E23A4A09AEB1DF4906C552555AEE521556
SHA-512:	6763F17BB37B4A3C71BBEE85951568309B720B5E50233BA2CB89D966859012FCAA5AF95C23E2362B2E5C36F07B6EAFC901686D8613DCAD95E0097659469F9559
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c4e34cc2d7074fd3bfb81ae25fb30090.IDENTIFIER=org.gnome.SettingsDaemon.Sound.desktop.

/run/systemd/journal/streams/.#9:70401JAG3Kt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.408770362275461
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M48anqR3VvF2jFmShmpvn:qgFqdg7/+0+f+M48aqR1FE9kpvn
MD5:	DB3BB6A997C30109C785302D2EF83F00
SHA1:	08524CDC277762012FFE0FECCF672A8F5C98C84A
SHA-256:	6CA51CB6A86FD2787301C070B4B55E8E5510C51B5294BF2DAD8FB3AF3D66AF0F
SHA-512:	3730EA49F318F84AAF3B2BD14A04069D618DEFE4C4CCA6E6863042563B4E7F8466739B6236B3128676765BF41502CF0F8FA22855040D2E0CD1508FC7804BD681
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=226db450db934750ae3107f0e4473820.IDENTIFIER=org.gnome.SettingsDaemon.Sound.desktop.

/run/systemd/journal/streams/.#9:704033hW4mt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.414938231860689
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M+QsQgjFmShmQmc0vn:qgFqo6g7/+0+f+MFQ9kQmtvn
MD5:	19C4AF7A4813458DCEC3874D30537044
SHA1:	71B7BC203DE051E8764848304774791E1D4565A8
SHA-256:	016021ADDD5297EAC51EDB8808787E25EC7F1B9326E5079C64B201DD495D83A8
SHA-512:	DF4D80E811DBE5B86420756BD97D5556B86751DFBC4AEB15AFC385331AD88065E59C6215CC16B153B00686DF9AAF69109FB7E111C085959495E748B3776EE6BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4163c1f1f6fa479e88fcff61b00c73de.IDENTIFIER=org.gnome.SettingsDaemon.A11ySettings.desktop.

/run/systemd/journal/streams/.#9:70404iBHQJv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.427567991488756
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+M4ANTXYjFmShmQmc0vn:qgFqdg7/+0+f+M4SS9kQmtvn
MD5:	F3D86BBD39AFADD1F6CA62EC3758156C
SHA1:	297EAF053656A1858C70D1DE8277785922F140C2
SHA-256:	8A8328265778B2582CAAC60E0F5F29E693BE1D21D6762633C119F5BD1279BC4F
SHA-512:	EA1FAC33208BE917731453DB97A83B40B46E4602DCB261792AF4111455B4E1037F3DCC1FE12A5826869E9920B9AFB43E510F35E9E3AE440CD0239E928966AF0E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2252899062b5462dbf01df805f6edf7e.IDENTIFIER=org.gnome.SettingsDaemon.A11ySettings.desktop.

/run/systemd/journal/streams/.#9:70439wlRpfw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.493811092240541
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M4ORoTjFmShmx+0vn:qgFqo6g7/+0+f+M4L9k40vn
MD5:	C0FB2688900D295130FD21765AE6B799
SHA1:	45FD6F80370A387DBFE98883B1A012FD6491B245
SHA-256:	07A31601DD1C777457BA459461EF5F26DF8A1E25582D313D03D8351B352FCEB2
SHA-512:	6279407179B27B139D7F1E843C1BA4A17E4C77527D0FAF61D2426A20A99C2C5B8B108A89E2E2475917EE72AEF7AEBE0846DB8B5B9FCB08C03D0F30BC8CE134D2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=20455cc689b540348c1bb52c8f77dd26.IDENTIFIER=org.gnome.SettingsDaemon.Housekeeping.desktop.

/run/systemd/journal/streams/.#9:704413bUwEw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.46688806335002
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MZTSoCBv2jFmShmx+0vn:qgFqdg7/+0+f+MtABvE9k40vn
MD5:	FA85E1B9B704150E26AE019AF72574D2
SHA1:	580DC18CAA85685A2EA27C0127F5B22CB34CEC6A
SHA-256:	30F0F3FDEDC55181482A9E9AB8997E2863664197A5ED3A88D4539894DB499B52
SHA-512:	3B5DEE4692CF2EE323CE4923AA17020F1A82D6522BA5FBFC026F17CACA2A49E6FFE7306F44E2EA38AFABE78D832F1CD467424D9F13108624DD3B3B1CB00F8F13
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1b4d067c0a8343e4a17f2513cf63c8b6.IDENTIFIER=org.gnome.SettingsDaemon.Housekeeping.desktop.

/run/systemd/journal/streams/.#9:70445VCZ8ys

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.4526118597881155
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+MmH2wjFmShm3vn:qgFqo6g7/+0+f+Mk269k3vn
MD5:	96F4CAA059432BBD4BDC3682994EB130
SHA1:	76F4C44EBB68495E647CE7B34961ED8D99C1B07C
SHA-256:	F31867B3A8975882F2F9FE3F9303CBBEFE0FDEFBD4B310ED940D7CA2B01BE4FA
SHA-512:	F669AEDCE82ABEFE92965A1BEFD08963CC6329185D58D68CE4E74BBBD2741920D3521B72D793A57C0A6AD12FC510BB47C1C47D7CE5AB85B34F4E6BF7B1E35255
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c9229249b63047dbbe141c3f236726bf.IDENTIFIER=org.gnome.SettingsDaemon.Power.desktop.

/run/systemd/journal/streams/.#9:70446v6hA6s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	215
Entropy (8bit):	5.417488050558844
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MuAxVGyHSCN2jFmShm3vn:qgFqdg7/+0+f+MPiuNE9k3vn
MD5:	7E0D74599B7E2D9469359CF3BA9A438D
SHA1:	3296E1FBE1F9F41633D2AA1F76355D39B0CF94C8
SHA-256:	566C1C114ED1FF7FA128B6164357245984C370C5809AD96C7C8F01D50BA2E8D5
SHA-512:	3A5F5BD8E8EA742DFE3EF5050E683C460F5A32A334A2B46BC91AF148658B2F115866F34E08A8FFB4FDC81A0E83FC0AB6E2F7EB6249270DA247965253BE91FBB9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=354bdd4903e24b08a641a9ef418fb78e.IDENTIFIER=org.gnome.SettingsDaemon.Power.desktop.

/run/systemd/journal/streams/.#9:70505UnPyEt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.432770803123459
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4DTAynGBc5sI5qjsF:SbFuFyLVIg1BG+f+M4PBWCqjZcHdzqDq
MD5:	F5DD06A95397269AC3E44821463E0849
SHA1:	5C6E415EDB03BB70FEAAE758A4792CC264EE61CE
SHA-256:	6B903941E4A0F0EFFFC96E9AE69CA04B9ABE7129ADBBCA19796DCDB2D9BC1769
SHA-512:	DF4EF7E136C3398B19AC14C55FD99895EDA42F5EE8733B55D6E9418DCB162025F8EEF12FBC170D4F60DFA173800F6FE521EE4351E8BCFC0C1AB94DFB1BC9B671
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=23a6eb0ee7d64b8baf9ce45d9a5984f7.IDENTIFIER=systemd-hostnamed.UNIT=systemd-hostnamed.service.

/run/systemd/journal/streams/.#9:70657IYAr4s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.412037252918322
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmuBssWU3ujH5xsjk:SbFuFyLVK6g7/+BG+f+MuBd+jH0jNq
MD5:	27B0BA7C8570E256B3BEBBD165FE36F9
SHA1:	888049731D4B2B6538C6011DD7155011913C791F
SHA-256:	D7C735240A7727A3A813CE2A19C35B465941ECB4047377EF4B3BAFC0C62C27AF
SHA-512:	F094DA7852B9FC658AEC6DD20B58469ECC0A56B3A9B537B3B94670A4EF9D002292D2F5FFD0DB5C148AD2B3DE2C2B76A40D25986C72570734E5F8D6DE93640057
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d952470b762444d19329bfb2bf77a7eb.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:70659Pcwrzu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	195
Entropy (8bit):	5.39084439601986
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm43wXvXVRQZ+sjsz:SbFuFyLVI6g7/+BG+f+M4A/XVRQRjNq
MD5:	DB6375DF6A31C675FFDF18389D46F692
SHA1:	DF2FDBB70B66611FC89A89B0EE73F8E3BF11EC8B
SHA-256:	70F68F5D03CE37EAFE50E61E071F14D4126C528A05ABEFE4CB97EB64A1ED2B30
SHA-512:	1ED67A1F9D96E79A7EE6227F1C0C6D02F8C628EE7C3193DFEB727F307170BC535D84BA955F8B69E72CFD823D5693EFE340E0271F5627FDA1A59DC28F367BA39C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27adadfb33384eac8c540fce0cc5949c.IDENTIFIER=gdm-session-worker.

/run/systemd/journal/streams/.#9:70699Xe0TIt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.441945715345764
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+M8MWmlSW3WvRqjFQMzKYA9:qgFqo6g7/+0+f+M8Xml1u4Tmt9
MD5:	BB75F0D6D3B0A4D075E82C60B9587A72
SHA1:	05016F64A165F7FFEEC2386A5141C71595DA89AB
SHA-256:	A22E4227A36AD2809D0180D3E3091060C9311AF88CFB151001A2CD38DCC6F874
SHA-512:	1AC10B6F6E45481F7E957B293F16FF0EAAF8EC462C7C2F26A27DA04296E903EFD76DC015FBF0D7BC06929DDFB6664E05122BE74C29681F558D912685E2CC91DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6e9d79033bc74c64939339cdfce33783.IDENTIFIER=/usr/lib/gdm3/gdm-x-session.

/run/systemd/journal/streams/.#9:70701DXvsVt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.466424727403074
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MsdFXB/B8jFQMzKYA9:qgFqdg7/+0+f+Msx/B2Tmt9
MD5:	38F535684F5083A637E79997CD3A2083
SHA1:	E22F79B5ACAE7343024D1589F2FE4C4FDABCB7C6
SHA-256:	F18274565378026AAAFB2F7D4CF2B78321C284837E44FDDF98C1B46EB9935C6D
SHA-512:	D820A16DC7BC5F64A66A80E0527F6A16E1FDF8A0C7E6F9837DFB94E2D8C471CA665386E8DFF5F96B5CAAF0F5A3D63FFEFFF260717453D03CF828051118EE16F1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fef66bbed0cc4607900bc7224a3d4a56.IDENTIFIER=/usr/lib/gdm3/gdm-x-session.

/run/systemd/journal/streams/.#9:70928699Iut

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.4473945624942335
Encrypted:	false
SSDEEP:	6:SbFuFyLVK6g7/+BG+f+Mfo/ByWFqjFmzXvn:qgFqo6g7/+0+f+Mfo/ByC4QXvn
MD5:	0704E603FF10666DBABBF4726B848AC3
SHA1:	82CD1CE860C92F72600F52EFBF089F63409FDC5F
SHA-256:	BB866F4109EEC32B770DA4F3EE85C3F76501DDBD3211F26F9794477E4FAFAF69
SHA-512:	6E5604F1A60C8A2F44198C785A235EFFC0AAEC45DBF86B16B8A39BB13F7EEB5723278E648E6CF22D6397A489EF48FC237E296B898D2AA2E4996EB5AC2598C006
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9c265040ef8b4cf3a8238fd6bccd27fc.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:70930zH1ZOt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.453620124983416
Encrypted:	false
SSDEEP:	6:SbFuFyLVI6g7/+BG+f+MujjD+f8jFmzXvn:qgFqdg7/+0+f+M8+f2QXvn
MD5:	5DEFD6F4E8DBDEDAEE2871F30A66CE2D
SHA1:	471381475437A274F001CD9B931469A69B446022
SHA-256:	82FDCF59A986355533780E9DAD1296004D76CC36DD7B2633C20E05507CA68C0D
SHA-512:	7DA84A78D6867A73343166D874E8D09533F3556E26C43784E9C7691948C1D0E6ACFAADF110CCB52AC3B4CA83B280FF39FD8A377EFB23F8D7FBDBC92F517173B0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=739331b667684609b53f61b15f54d8fe.IDENTIFIER=org.gnome.Shell.desktop.

/run/systemd/journal/streams/.#9:71104reuoEv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.437098229425423
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsS0R7J5HcoqjZcH5CHq:qgFq6g10+f+MspKmmq
MD5:	A1D05462F8F5A405B6E205ADD945E0DA
SHA1:	46F853735787DE42173636A69BA2ADC17CF16D50
SHA-256:	74875FBE9C7C77F48B56D7D5F10D95D5CDE489907D5E773D8360823AC272703B
SHA-512:	09F346E51AE1EB9F304C65C4B53952297034D7157676F886DF06C7ED7BCD2976A78738150EB8EBDAD23F93DB020A2050C2FC744EBD75FDD4CD10F73B87022413
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f6e6810741404e749d3aaaa4288b9d05.IDENTIFIER=systemd-localed.UNIT=systemd-localed.service.

/run/systemd/journal/streams/.#9:71284q7xLbu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.429555860260913
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyREj1qrmEGvsh+sjW:SbFuFyLVIg1BG+f+Mye1qrmpv8jfGt
MD5:	B97DE24915D206BC8CC2E974169E4633
SHA1:	99D59BEEA1D01CD25ECF2334D537CCB6C7D3A56C
SHA-256:	E0E3430E6B2B3A6F6FEA1D09F2696E7125773C54BB0464A94CB593A7FD11C239
SHA-512:	18126B13954D3087B44AAC18366E2020CAD65876D5C04CEEEE9EF9C1A7EAF9BB08600FB42AC4ACC5283D4460745442407632958F7D3C9C7F30BA43006587FE7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8683f1ba514d4467b8bc8c1364eb7223.IDENTIFIER=upowerd.UNIT=upower.service.

/run/systemd/journal/streams/.#9:71285YLEHLv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.338295580544614
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrehS84Qu3GAHPXsjt:SbFuFyLVIg1BG+f+MyE84QgP8jtWL0
MD5:	938A4204AB6D05D6E45F42665B753152
SHA1:	E428E517076EC597F9553E13D639482D8838A12F
SHA-256:	CA6D7A918A6A140668247070C8F9DA5B7FC1B3E997169D0A2A0C67EF0DD98431
SHA-512:	05B7B083C4805854837B0E81DA5802A34E354A84E6D661B7A427EA21A32C0F6372032D7AF4A3243B28773C00489355104050E454C64DD8446ABE7104EE2BD53A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a6786b7a0dda4884bcb9749d0823e22b.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:71295aJoAvu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.407503925228576
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+cUGQuMqjNALQru+u:qgFq6g10+f+MRbMwWr
MD5:	B9B5E7C4CFEDAE119C0EE7298BC34FF7
SHA1:	50B493B06A004059295C1D859943E7965AFEE253
SHA-256:	AF78CCEEE39C05638D9CDCB2194EA850321754186C1124D4716DD0388F0DF88A
SHA-512:	AC37002C5CE3A65C81F137F94122A8332CCF0A142E18B852C9A1DCA73D955DF2CAC61493A0B46D5B4275F78D97437C32D13D61E6AD7A8DECB6BD6AEA2183C4F1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4858073ff7db4c5d9a5384a19dafe9ce.IDENTIFIER=geoclue.UNIT=geoclue.service.

/run/systemd/journal/streams/.#9:71301s2SzFw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.446468302948729
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4034jSQPGvAg2jsjF:SbFuFyLVIg1BG+f+M4BqvAg2jNE
MD5:	A8CB68536509DBA1FC58E70B86C42AD6
SHA1:	D36732EFA5FA7CC860D9CB8A1810FAA13ECC6DB9
SHA-256:	56B1B64A8E1A68C09C31000589B487F9204F64D9077A48E7C603739ED15F879F
SHA-512:	48ABD82E5D3E9B354CA768107B69F964896E837D6E897507E2A0FE7CF35B269C581B97C8C6B01B952A96CE713BC4F7DD18CDD779C4452ECCC2D1CC70762DCB91
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=252b84ee15934c24984374237f4c520d.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:71442guUocv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.440086093004501
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsrNBBTTjsmVa5+4eU:SbFuFyLVIg1BG+f+MsrNBhTjdcjemEg
MD5:	493C933B31671706C2548A079759EF94
SHA1:	87312AEBC8FF2DE67DEEE5205D73AC82107AD1B4
SHA-256:	6154A981773CF9EDE75DB02348B805DD0E8E191C05B9596BD8464346BF199905
SHA-512:	E3BB9561A27671AB4EA7814074010804520F17368FFDC4D585E56247E976834111512E1B5E2ED244F0143EE6ABF3BE9F77B8813FDC1F3E8A9234CAADEA669CFF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f61b6452e38f4dd9bd66fc0aef1d39c7.IDENTIFIER=wpa_supplicant.UNIT=wpa_supplicant.service.

/run/systemd/journal/streams/.#9:715641nWIOt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.404785258607756
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuoEQe5FRqjLIiAvAW:qgFq6g10+f+MvEPFR9iAvAW
MD5:	276994521B8758B53E086C9662B8A821
SHA1:	9AC67340061A0915F9FF8E8CE9081AA06955F3F3
SHA-256:	D029F9967A97336FF059CCFB1F368619B9CAF75C86E6CEBE2300E20FAEB9C675
SHA-512:	9ADE1D29126F61D821476405E47177AC9CC6A6291A64117FBB67A5AFD9366630B9AC78ACF42C2CB5FBF929B50B5F8981E964E1B315EA1CC0123EC63A02987A8B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d34104ed48a84481969f5dab1b82f25e.IDENTIFIER=avahi-daemon.UNIT=avahi-daemon.service.

/run/systemd/journal/streams/.#9:728436oCTLw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.343895172569543
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6fcXbFyuRGXAQIkhW:SbFuFyLVIg1BG+f+M6ubFyuRlqjXjK
MD5:	B598D7ED7B4972F2A63FF2D8D2036417
SHA1:	71D737CC667432AD4C6DD24C28FB65C966950F0F
SHA-256:	ACA5950810464D8ED17501EC1C436E1C5831249D0ED0EF3AEEE090F6E6907C65
SHA-512:	12C5AB2F83F9DA6BB0E8C02837FFEE74FF236EC2DA6336CC27D864A5FF4F69CAA1204B40C119A207D54C288C08CC51DBB4D2C722FD9E3F3D04FB037D72F542DE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=01c920d80812475985d0a4c2e512ec22.IDENTIFIER=fprintd.UNIT=fprintd.service.

/run/systemd/journal/streams/.#9:72898qVRv9t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.376699592094389
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DVTMS4gHKQgwsjsJ:SbFuFyLVIg1BG+f+M8DggcjJKJMBNr+
MD5:	2EF2D4457BDFB7A2A2BFC35052C97D84
SHA1:	87F8446BD8E64E0D98E35734AFC1EE76FA71999F
SHA-256:	DCDFB88039F9CD901C26768C48754B05C87517D74B570B998B43F11A03FAE8C5
SHA-512:	7B9D532867A045DD3A8C4915D0294A9A8655944D0AC5D3599C05B5950182161D73ACF64EAA1E3C6DA425E045224D9D21EBF57DCCAC33154799FC4EF235143B78
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f0635fef1824e96a5c6a4db6c5da5bb.IDENTIFIER=colord.UNIT=colord.service.

/run/systemd/journal/streams/.#9:72999iO2Ytv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.364146486721159
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm/XTxVdIbEzF2jsf:SbFuFyLVK6g7/+BG+f+MXHJ2jZarvn
MD5:	8F04F7D3FAE7CD87376EFD97B2D1A797
SHA1:	D2B9A46827F468B89C4BE9E1B1ECBB05775ED5CE
SHA-256:	30F28D088820A5B9AE0CA6BC6B86C87324F5F30667ABD419454E363C02A4DA47
SHA-512:	2BA21230AA680A980D2F477545F2F9D4964477FAA0270694081DBC7A9D75A74B6DFACC3558E3BD61BA57BEE126539CAEC6CE2BD1A7C29203FBF887E25D170A65
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5356e95f501a4db5afee089d8e8cfa26.IDENTIFIER=spice-vdagent.desktop.

/run/systemd/journal/streams/.#9:73000G1ORzu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.402367681137678
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmocfSRSQQW0/sjsf:SbFuFyLVI6g7/+BG+f+MocfS2kjZarvn
MD5:	A1B25345241A3028206CC22AD5BCD5B2
SHA1:	1FA3222E4A1F6478C840E89DB35CA9E394DB67EF
SHA-256:	322B7B7BA001AA44A9ADA813790EAF692AA803D71C9AA606B7F2178B8A7F17BC
SHA-512:	D9C7B2EFD22A6370B4C80C3C86422FE33BB8DADE50CF19D0433D218910DF3C715A85BB75F1EF921B46C35BCF88BB69902C1333FFC086E546A6F87A9D7B415CE8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b1e29e528cc7475e857f8ae869f4a22b.IDENTIFIER=spice-vdagent.desktop.

/run/systemd/journal/streams/.#9:73027FatGts

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.3771788480069365
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzyTdlEDAd5EudvRq+:SbFuFyLVIg1BG+f+MWTdeszd0jhD1DTu
MD5:	5FB0943A46BB691466C038E3C74EA5D0
SHA1:	69A7C13C2A5CF469D26ECAD8DFF137EE6E664805
SHA-256:	E8EB8DE0139B8F6D6F119311A91C3BCB60CF0387F19D799ED649AEFB459D724B
SHA-512:	FA85183A45013B27E1B41544F74D81B9C5C800DA96066CC6C1C1E3A4290D9BA23EADB700D50C13F4D539A864985D56B9CEB33DB6ED04AD1EC69C529F631F2F27
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=97fbf5787a974150afe8e9a1f79f48b8.IDENTIFIER=ModemManager.UNIT=ModemManager.service.

/run/systemd/journal/streams/.#9:73072RNrKIw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	192
Entropy (8bit):	5.345253514408877
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOdvP69ms947z+h6SnLAqC+h6KV+h6CQzuxm8EQT0HzHHnHW/uR:SbFuFyLVK6g7/+BG+f+M8twBqj022vn
MD5:	0D79B09B2E2A8146F59397300E24BA92
SHA1:	7E79815BCBA0A91E2BA8A80ED0E118C8E806A3D6
SHA-256:	B031221A388104D59B96BABE5BF23824D0C748C66CC993649DB30DF182F9E084
SHA-512:	593DDC2A2B3DE75D707CB8766D816A87339755DED31C9B1BB151DAF3603133B5701AF33678BD63706E276F01AA0F2A1585D7350EBF7D9EDABE7BEFE4AFAEF469
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=6.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6a2946de6be84dcbbc96b9d7fc48266c.IDENTIFIER=xbrlapi.desktop.

/run/systemd/journal/streams/.#9:73073JQUcIu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	192
Entropy (8bit):	5.347235495698478
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOfvP69ms947z+h6SnLAqC+h6KV+h6CQzuxmpFAmyAi9VaMU2so:SbFuFyLVI6g7/+BG+f+M4myAi9VaMULo
MD5:	F062A9CD456C7BC1A2AC998E710F826E
SHA1:	2EA55C6992C3C416CEBB1731EA794900310BADD9
SHA-256:	5315BD99DA412A2A732482C2576CF94A15EDA4CDA9F87CC45B9AD2149BAB97D0
SHA-512:	4668230D32FEA847ED026BDDF170D4113CD95819BB697D982104460589867A444334C86FB8C03F626BBB3A0795AF7198C2948A2F3F94F89D065EAFBA2BB5131B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=4.LEVEL_PREFIX=0.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cc7e7041e343419e80afba2063101a31.IDENTIFIER=xbrlapi.desktop.

/run/systemd/journal/streams/.#9:73116qQ4BBu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.401319223705085
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsgDRRHdD1LIU9rqjx:SbFuFyLVIg1BG+f+Msg/HdDJqjoa
MD5:	B9F7C3E0428DCBD9C854A4AFDB590693
SHA1:	A0AD766836D83952F8A66B7D3C5A0C20A9B4C8AC
SHA-256:	E4F9532A263B397A6FCDA732A08742A5DA020F3326CDE9205DDD78E20E78C6F4
SHA-512:	92CC8E46919ED6EDC348C09C7707CF17339B24AE4086980C7A365E9EA9544B6C7BA67CD8EE0D675ECD47C8AF2E7C47921B4D29915F620989ECD8F2CD03D06728
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f94f4318b64f45778afd2bc07cadc1ce.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:73122Ji8Uis

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.342310939598674
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr2TRXo+URwsjshQJT:SbFuFyLVIg1BG+f+MY6RZjtWL0
MD5:	3D42BA56B2AD73F6D8B1DE8B2A9641A4
SHA1:	7EF02489DB4E3C5452876CC4AA2B1AEB5F0F29F3
SHA-256:	67FA274390973837E22D1AA8629D03616FE9216002526FEAF4AD673B6FE3F183
SHA-512:	C96454C660D4918A8FDC71810C5DDF628294143B2598992D3908D6A448D0184A0E4252597B3F4ECBD8CC5149A4A36793DF63614267F2040BD70E5F90127894DD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a51c2061836f4cebb2e8a2158feb8afb.IDENTIFIER=pulseaudio.

/run/systemd/seats/.#seat05uHvmV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.960504169374753
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G88mNvt2KwshcXSv:SbFuFyLwH47Pg20ggW8Gc12rNXc
MD5:	0EDD8049A9E5176912C3C2CBE234DFDB
SHA1:	616927BAAF2CF712B1D1F7F3A8F0507CAA5EAC6C
SHA-256:	434739B0976400CCB6A6302EF461A199F0A5D77E2AF9920D50DE2D799F07E9D6
SHA-512:	171A582F760BF8F9E23DB8ED7EDCE5D88B3B6532E1A46ECB3200291F480682EC5ABAA3B4464E639410A9098CD9AA464EDF6D92CEA0D625C40AACF65FED79E3D4
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c1.ACTIVE_UID=127.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat0HeGzoV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0gZk9dW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.974985332353238
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G/aQvt2ze5XSv:SbFuFyLwH47Pg20ggW8Od12z0Xc
MD5:	638FD4D562360E2AE0FE6842F6853400
SHA1:	CBDEA5AA977FAB4C2DA4C6947CFECFD4B641A644
SHA-256:	565DDE081A5672324151D2EFF5E529ACF29FA96FFCAB42C24FE8A246E929364A
SHA-512:	07CD1D41240B27E815AF85BBF6195001A672FEFA70DBF3B89AD5A128E850BA740DEEE3EA8A77A5ABFBC5ECD86F3EAFD40B5512348C1161265C90EE858DD51F86
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c2.ACTIVE_UID=127.SESSIONS=c2.UIDS=127.

/run/systemd/seats/.#seat0hDcK0W

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.957035419463244
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+ugKQ2KwshcXSv:SbFuFyLwH47Pg20ggWunQ2rNXc
MD5:	66D114877B3B4DB3BDD8A3AD4F5E7421
SHA1:	62E0CB0F51E0E3F97BE251CB917968DFF69ED344
SHA-256:	A922628916A7DDBE2BAA33F421C82250527EA3C28E429749353A1C75C0C18860
SHA-512:	5651247FA236DCF020A3C8456E4A9A74A85C5B9B3CCE94A3CF8F85FD4D66465C9F97DF7A1822E6CA4553C02BE149F3021D58DCC0C8CB6DCF37F915BD0A158187
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat0pQ6xUW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.974985332353238
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G/aQvt2ze5XSv:SbFuFyLwH47Pg20ggW8Od12z0Xc
MD5:	638FD4D562360E2AE0FE6842F6853400
SHA1:	CBDEA5AA977FAB4C2DA4C6947CFECFD4B641A644
SHA-256:	565DDE081A5672324151D2EFF5E529ACF29FA96FFCAB42C24FE8A246E929364A
SHA-512:	07CD1D41240B27E815AF85BBF6195001A672FEFA70DBF3B89AD5A128E850BA740DEEE3EA8A77A5ABFBC5ECD86F3EAFD40B5512348C1161265C90EE858DD51F86
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c2.ACTIVE_UID=127.SESSIONS=c2.UIDS=127.

/run/systemd/seats/.#seat0s9QwIV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.957035419463244
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+ugKQ2KwshcXSv:SbFuFyLwH47Pg20ggWunQ2rNXc
MD5:	66D114877B3B4DB3BDD8A3AD4F5E7421
SHA1:	62E0CB0F51E0E3F97BE251CB917968DFF69ED344
SHA-256:	A922628916A7DDBE2BAA33F421C82250527EA3C28E429749353A1C75C0C18860
SHA-512:	5651247FA236DCF020A3C8456E4A9A74A85C5B9B3CCE94A3CF8F85FD4D66465C9F97DF7A1822E6CA4553C02BE149F3021D58DCC0C8CB6DCF37F915BD0A158187
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.SESSIONS=c1.UIDS=127.

/run/systemd/seats/.#seat0vdNTcM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0xUZXgV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	141
Entropy (8bit):	4.960504169374753
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+8G88mNvt2KwshcXSv:SbFuFyLwH47Pg20ggW8Gc12rNXc
MD5:	0EDD8049A9E5176912C3C2CBE234DFDB
SHA1:	616927BAAF2CF712B1D1F7F3A8F0507CAA5EAC6C
SHA-256:	434739B0976400CCB6A6302EF461A199F0A5D77E2AF9920D50DE2D799F07E9D6
SHA-512:	171A582F760BF8F9E23DB8ED7EDCE5D88B3B6532E1A46ECB3200291F480682EC5ABAA3B4464E639410A9098CD9AA464EDF6D92CEA0D625C40AACF65FED79E3D4
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.ACTIVE=c1.ACTIVE_UID=127.SESSIONS=c1.UIDS=127.

/run/systemd/sessions/.#c139fAgW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	288
Entropy (8bit):	5.4015505833600175
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPddL32UKBhcIixfx2xNIByy6GBElzgD1WOY92:qgFqPuFdDJIi9x2xayWSgD1Ju2
MD5:	52887BFB8C294D2E10C38DC1FD79D394
SHA1:	EB046050B8FD1A78FD78D62E5073B290ED6FB68B
SHA-256:	559EF377083EA8A463B87DF4A071FEA076B60D012B908CD84D69096D6B88E36D
SHA-512:	DE28090BE5C7C5DF3274FB365B717B26267F17AC38A749308FDEF2851FAEF0461DF283A2805F093F05266FFBC75E03A205D8CEBEE4CF3D069F9302581CC660F3
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=closing.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5873.REALTIME=1736209335812049.MONOTONIC=152869761.

/run/systemd/sessions/.#c19LAbQX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.442497165116146
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GBElzgD1WOY92:qgFqPuFN6IG0n99x2xayWSgD1Ju2
MD5:	CB37C92F735B1357C5492BD65A6E08C8
SHA1:	2C0463BAA5F68D02423BBE300130A2FF9C9A2B76
SHA-256:	70BFC5587DAC2386AADBA97987B226D1A8F440B7CF44C50D09A4954008C8F30A
SHA-512:	FF387EA31F9DA4A4FCB1E4FB074D833CDC1B6C563E240806B3B91D1034E7BBBC7EA1020BAAB743847C3D6A230A41007114A16B6A8F535DEE0FDDC0861DB3F285
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5873.REALTIME=1736209335812049.MONOTONIC=152869761.

/run/systemd/sessions/.#c1BvkjbW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	333
Entropy (8bit):	5.495529853382681
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdVuRmUKBhcIS3xffD8Bxfx2xNIByy6GBElzgD1WOY92:qgFqPuFVuRZI4BA9x2xayWSgD1Ju2
MD5:	31323161F36093CBA955488257ED88F9
SHA1:	715ED1F8F685C40F816FFF736E13E66E45EE9B46
SHA-256:	6F8DFF1D8DE178B62EEE0AED1836CB832FE252C77F1D051005A9D6CCC053156C
SHA-512:	29A4547132023BDB45602B3CAC41D229452DD6EE4466D0A88143F9F727DCD030C621CEAD85107809DF7F8E1A04E17FE336176A1089C58512706A7A267C995E8E
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=opening.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.SCOPE_JOB=/org/freedesktop/systemd1/job/8310.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5873.REALTIME=1736209335812049.MONOTONIC=152869761.

/run/systemd/sessions/.#c1JpPOcY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	337
Entropy (8bit):	5.453556370196959
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GBElzgD1WOY9ax+n:qgFqPuFN6IG0n99x2xayWSgD1Juao
MD5:	7063B9176A41BAF7A7DB0790E70AD07B
SHA1:	8B71D667FC2A439ECE0478DD5FFEE1A31DC36759
SHA-256:	EAD55C2F971A5209A116FA24D63B4556163723782B965BE0C1AE9B9B565C5302
SHA-512:	71A32018E96D1C57028A04D6EB4251A27C90F5C8DDEF93E375B0484296C85EE862A28ED4200625B726FA1E9D40EF31D391527408D3DAF662BC90DED954C20A13
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5873.REALTIME=1736209335812049.MONOTONIC=152869761.CONTROLLER=:1.9.

/run/systemd/sessions/.#c1KqbivV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.442497165116146
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GBElzgD1WOY92:qgFqPuFN6IG0n99x2xayWSgD1Ju2
MD5:	CB37C92F735B1357C5492BD65A6E08C8
SHA1:	2C0463BAA5F68D02423BBE300130A2FF9C9A2B76
SHA-256:	70BFC5587DAC2386AADBA97987B226D1A8F440B7CF44C50D09A4954008C8F30A
SHA-512:	FF387EA31F9DA4A4FCB1E4FB074D833CDC1B6C563E240806B3B91D1034E7BBBC7EA1020BAAB743847C3D6A230A41007114A16B6A8F535DEE0FDDC0861DB3F285
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5873.REALTIME=1736209335812049.MONOTONIC=152869761.

/run/systemd/sessions/.#c1y0SVkV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.442497165116146
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNdUKBhcIGjwn9xfx2xNIByy6GBElzgD1WOY92:qgFqPuFN6IG0n99x2xayWSgD1Ju2
MD5:	CB37C92F735B1357C5492BD65A6E08C8
SHA1:	2C0463BAA5F68D02423BBE300130A2FF9C9A2B76
SHA-256:	70BFC5587DAC2386AADBA97987B226D1A8F440B7CF44C50D09A4954008C8F30A
SHA-512:	FF387EA31F9DA4A4FCB1E4FB074D833CDC1B6C563E240806B3B91D1034E7BBBC7EA1020BAAB743847C3D6A230A41007114A16B6A8F535DEE0FDDC0861DB3F285
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=wayland.CLASS=greeter.SCOPE=session-c1.scope.FIFO=/run/systemd/sessions/c1.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5873.REALTIME=1736209335812049.MONOTONIC=152869761.

/run/systemd/sessions/.#c201QilX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	361
Entropy (8bit):	5.455614501541772
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrMTns:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQMs
MD5:	E0BC9018D4A630DC34B94A5477EBF123
SHA1:	F0F30DD0BA301709ACF7BEFE470D680B6A8298D5
SHA-256:	A57FDF2F3FD1D3F40EA79B1B5A3E38978A2EBA2203356D5CA2BAD45B672B9190
SHA-512:	3331F8E47FE474121F27A3C5AB2910E4EA7A0D08A03C6D1162F542979CEC64B8D5EFC3E56F37D0E35A03B81F3D7FF1E73C91017D3A03041E4542CC9F19515D27
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.CONTROLLER=:1.13.DEVICES=13:64 13:65 13:67 .

/run/systemd/sessions/.#c23lSWUW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.436204051466196
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrM2:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQH
MD5:	739ECDB12646A97BC31D28E0E310BD1F
SHA1:	DBA1DE318F69FAC1C88B1A9BAE5E549AF091937C
SHA-256:	D12C6873C3313A0E11BCC122E24BD0B965B98E97AA15A8B9DEC1A94EA8B22173
SHA-512:	ECD5C254FB55120910D77E047EACF61881E95966BE537DE5450FA0B3DCD4589FD7E9C70F0755DFCCEC41E9380D44D4DC797251B57C435FC8872CFB2042C4A2A7
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.CONTROLLER=:1.13.

/run/systemd/sessions/.#c26QIMKY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	367
Entropy (8bit):	5.457751184977822
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrMTnWn:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQMW
MD5:	D69D06182E556AEAAB25875DD618EDEF
SHA1:	E642BE29A92ED51CB62716A9966BF4F42DE90AB7
SHA-256:	B5F46AD1E0F330F9A1BB202C3C8D2725947C805C8D584F7EF82E25825E0471FF
SHA-512:	CCEFAE628FDD47401345F4991E113CCBB4AD44F9E16911D57E4B3DB1C3189CEF220BEC1E49D31881C37A73CD45FA8C5E97270AB35163F0ADB9E9CC4B9D8CB538
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.CONTROLLER=:1.13.DEVICES=13:64 13:65 13:67 13:66 .

/run/systemd/sessions/.#c2EiV34V

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	355
Entropy (8bit):	5.448826791127057
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrMTT3:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQML
MD5:	201F3AD5F60A98889377C882B716A7C8
SHA1:	12BDF8B540A11468552301BA12F86DA10FAC9271
SHA-256:	01F236F28A47B1D47D300A1AD912788339D8A7F742A7586852EAEBD6116442B4
SHA-512:	31A4927882F848A5B9BD0B4B9688EE2382402B25517AF1EAEB006F0C02634625B8C3967EEDDA84C6A46805697E2798D32DEA0B35D6E36DCD0236D9EFE45B8B39
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.CONTROLLER=:1.13.DEVICES=13:65 13:64 .

/run/systemd/sessions/.#c2JuV8oX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.429257082031168
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrMQ:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQP
MD5:	6F125AC8EA4F5B9115FFE0F4A359B3E4
SHA1:	EF52AF998892A821684C3A3CB24F6697A4F847E2
SHA-256:	E9467D723D5E47A64EFF2C2E4F5413351E922C260D08608D6C7B1868C21496AA
SHA-512:	81622065B7FD70068EC157A5F2E6885D55624D92F9B314977CB08D09AFCB077F0EB3C973FFB533B6C0887583FD809622793EF18597C50B530ACAC2FD53D4B4E0
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.

/run/systemd/sessions/.#c2ULSLUX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	349
Entropy (8bit):	5.440076412095267
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrMTi:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQMi
MD5:	05D9207EA8A82F3972E06A409652E189
SHA1:	79BECB709885FB4A4948E61B5741E95E161D1DC3
SHA-256:	42628034098EA514715491D1285185EE4163B22EFCD92E6C97A0D61DE6B6982A
SHA-512:	7ACF245347E1553475C61BB11393F72F54DA1CFB9BC7F3584845D2F733C97A78126FAD2BD6ACDD7B035237FAB30E1DD6286EDCF71D3BF5C32701E0C625289830
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.CONTROLLER=:1.13.DEVICES=13:64 .

/run/systemd/sessions/.#c2bTPfzY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	317
Entropy (8bit):	5.429257082031168
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdNH/hc/KHjwnsDxfx2xNIByy6GBRxBgDHF7R1qrMQ:qgFqPuFNuCH0nI9x2xayWzBgDHF7jQP
MD5:	6F125AC8EA4F5B9115FFE0F4A359B3E4
SHA1:	EF52AF998892A821684C3A3CB24F6697A4F847E2
SHA-256:	E9467D723D5E47A64EFF2C2E4F5413351E922C260D08608D6C7B1868C21496AA
SHA-512:	81622065B7FD70068EC157A5F2E6885D55624D92F9B314977CB08D09AFCB077F0EB3C973FFB533B6C0887583FD809622793EF18597C50B530ACAC2FD53D4B4E0
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=active.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.FIFO=/run/systemd/sessions/c2.ref.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.

/run/systemd/sessions/.#c2hePDvZ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	329
Entropy (8bit):	5.484926516139867
Encrypted:	false
SSDEEP:	6:SbFuFyLPCOcPdVuRQ/hc/Kf3xffoEBxfx2xNIByy6GBRxBgDHF7R1qrMQ:qgFqPuFVuRpCvBlB9x2xayWzBgDHF7j+
MD5:	14756FDDF44ABBB31803DC9092C3D792
SHA1:	2F5EDA1AF12D9EB6644397CED1512555ED8CB4D6
SHA-256:	EC6FC3D05D472C934A263A153A10E0021EB1DC80F300061737E68E101C5BF749
SHA-512:	901C6F8493042543B75AF718A2062AE367761C79A79DA5BCE8AF154329107AA3EA6E5ABF28A962F0AA544A491E0E44D2ED6E9014F20A133D845AF24151F8E8DC
Malicious:	false
Preview:	# This is private data. Do not parse..UID=127.USER=gdm.ACTIVE=1.IS_DISPLAY=1.STATE=opening.REMOTE=0.TYPE=x11.CLASS=greeter.SCOPE=session-c2.scope.SCOPE_JOB=/org/freedesktop/systemd1/job/8373.SEAT=seat0.TTY=tty1.TTY_VALIDITY=from-pam.SERVICE=gdm-launch-environment.VTNR=1.LEADER=5913.REALTIME=1736209342374843.MONOTONIC=159432555.

/run/systemd/users/.#1271jenvY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.180218102084624
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSfgD11ZmPLQ2thQc2x9sS02/g2owB:qgFq30z1cL/ixegD11iPthQHxbPYA
MD5:	33C4A44F28FFC02C887838D5EE6D141F
SHA1:	F49B1B1DF64871CE3C447A95374A5DDEF3CE888A
SHA-256:	0BE4AD190A1E6911405A95F4E8DD24FB57EBEF5B84D288BB78D92C4112CBDF86
SHA-512:	4FE6A0A3D68F4AB8C452A122E03B33EE4EB878A468825682BB1C80131000F6CCDB6DF9B4FDB7127FC32C71D1E897CEE2A3D124FDDAABF447FCEF8B59F36E0558
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=c1.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#1273fSTZV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	245
Entropy (8bit):	5.180165563734814
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgdL87iesnAiyaSfgD11ZmPLQ2thQc2x9sS02nmD2owC:qgFq30dAL/ixegD11iPthQHxbPnmDd
MD5:	7DDEE6C8AEC08B69182FF6AD4EDB4D11
SHA1:	AEA8B7185055E52DA0781EA10B5882393201B38E
SHA-256:	27D24B2FE8276943881A386DC64F804CDA71A5505B77993A58FCEC12FA0B5CC0
SHA-512:	EF911042D9CF5D481582B45307B09FA3E507562EF0DC8ED215DFDF04499589EB1349253DA5202A4C860A7827480F34D740FBDE7D28F427704EA60A0BF9BBAEA0
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=closing.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=.ACTIVE_SEATS=seat0.ONLINE_SEATS=.

/run/systemd/users/.#1278QUDmZ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	281
Entropy (8bit):	5.313075741375546
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0IxffJgD11ZmPLQ2thQc2pb02/g2p9rwB:qgFq30VuR8L/ibBxgD11iPthQHtPYq9M
MD5:	FB66752362EC9D2E247A54568A23DB9E
SHA1:	0B7F8D678D0FD33DF88B36756D3DBE48E0B3EF6C
SHA-256:	8F1CCF858E025B4AC70E7BDA347DC6F232A650F442C1087C12BFE5CD7FC5B770
SHA-512:	AFEFBC5298438E241A1B0AA6169C91940E0BE7FBB45268E290A2305A0E0E7BB7E1609DDF2BC3CB9B7A68F3A31B85DFE7A5C4F225373E23A1A7BBC66C3493E597
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/8248.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127Hmi4dY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	4.928997328913428
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMs5BuSgVuMI2sKiYiesnAv/XS12K2hwEY8mTQ2pJi22sQ2KkmD2pi:SbFuFyL3BVgVuR257iesnAi12thQc2p4
MD5:	065A3AD1A34A9903F536410ECA748105
SHA1:	21CD684DF60D569FA96EEEB66A0819EAC1B2B1A4
SHA-256:	E80554BF0FF4E32C61D4FA3054F8EFB27A26F1C37C91AE4EA94445C400693941
SHA-512:	DB3C42E893640BAEE9F0001BDE6E93ED40CC33198AC2B47328F577D3C71E2C2E986AAAFEF5BD8ADBC639B5C24ADF715D87034AE24B697331FF6FEC5962630064
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=c1.ACTIVE_SEATS=.ONLINE_SEATS=seat0.

/run/systemd/users/.#127KuZk2Y

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.164281847104544
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgNz7iesnAiyaSfgD11ZmPLQ2thQc2x9sS02/g2owB:qgFq30NzL/ixegD11iPthQHxbPYA
MD5:	42F7F7E5F9095100CF46F3AC36808E75
SHA1:	8A7A614FFF55012F8190B6F8090A2AEB144DC7C9
SHA-256:	450194FEDACC0404CF6C56DA82CF3F2F77B662DA2C4B07061185C915EDB3DC23
SHA-512:	2C66EBDAB644AA04BDF2520209DD4F2B28B57977AE95E5182D298866733B0283DB4285D36B97BF818CCAA411D1676B44C29DB04057F7911A7EB91D82F1BE898A
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=active.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=c1.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127NQTDFY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	240
Entropy (8bit):	5.162916373419578
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiRJgD11ZmPLQ2z5c2zw02zb2owB:qgFq30z1cL/iRJgD11iPz5HzwPzbA
MD5:	EB1EBD16DA7C9C771ED37AF6DFABDA05
SHA1:	983596662589089D71CE5A0BA7FE2A9FC198E056
SHA-256:	0A625219B05FE99B0761B4A5EC8ACD01DA13A3C8AF90086EF30F199BC62588AF
SHA-512:	B9CC8D4F4C1B7D26C2F3F383AE1F2564A87DA65E8000E5B5BDB619081D3E65C1CD678A0435EC786AB679D9F46663B3831B44593174A24FE1013CEB00AD94684C
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c2.SEATS=seat0.ACTIVE_SESSIONS=c2.ONLINE_SESSIONS=c2.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127WVF47W

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	288
Entropy (8bit):	5.318665709814358
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0IxffJgD11ZmPLQ2thQc2x9sS02/g2owB:qgFq30VuR8L/ibBxgD11iPthQHxbPYA
MD5:	BB6A1A2076D0DE06B547583DB018364C
SHA1:	ECA2753D1AB8C23E623CBE863D32193D4E199D7D
SHA-256:	4ADB72ECDD478591294D740B7BBB1C3A44ED7ADFD1AF888579F079CCDFD6FD9E
SHA-512:	82C8B9189653002C3410F20277BDE4E718E12412868BC4F27478A1EFB7AAEE89609D37364747A9034B671521243A4EC528AAD50F255848E91D361CB071E6A955
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/8248.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=c1.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127bxioRV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.16400726935129
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgdL87iesnAiyaSfgD11ZmPLQ2thQc2pb02nmD2p9rwC:qgFq30dAL/ixegD11iPthQHtPnmDq9x
MD5:	A03EBE5ED816D9C24133773F4FF0293C
SHA1:	8FB3E268015751B2F13E5F651C8A6A6865FB358B
SHA-256:	2414E331818895F2370668D7DA9D96A21397B2C238E3DD9550C39A70CFA7F174
SHA-512:	E573AB98F38DFD95836F8A6D64EF0D338A310B2546C7183082F28213D375121C7E905F380CEBB5F7553E9576B057AACF370CB905B5301EB35AF0BDF580A9F3FD
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=closing.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=.ACTIVE_SEATS=.ONLINE_SEATS=.

/run/systemd/users/.#127ehmktZ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.18461413016335
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgL4q1c7iesnAiyaSaTgD11ZmPLQ2z5c2zw02zb2owB:qgFq30z1cL/ixxTgD11iPz5HzwPzbA
MD5:	B64C97274B7CA585DF797C66F4AF4FC1
SHA1:	A97DDAC5A284AFFDFAD765A7982871C4C4F12A6F
SHA-256:	3451BB70987B69AC50E2D9BCECADAF21768576AEB7CB84FE2205F68AA3D9CA5D
SHA-512:	187E38129AEC439B477A90AA87FE49403C32DD3C8D9197E66E6527B41CDBF57247002A56D01F96D0B68386CCC6F94BBA05824329EC1DA513844CC55F7B5944DF
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=online.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c2.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c2.SEATS=seat0.ACTIVE_SESSIONS=c2.ONLINE_SESSIONS=c2.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127gOySmV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.16867787518327
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgNz7iesnAiyaSaTgD11ZmPLQ2z5c2zw02zb2owB:qgFq30NzL/ixxTgD11iPz5HzwPzbA
MD5:	D8392D25FDB3568345D7B31C2EE26646
SHA1:	740DC004AD01B68296ECA931DEFA5FD5D15EC2AF
SHA-256:	5364476C0462AB9C92E388156E2175EE60B3909E9CBDF41578A9C43A6BFBE55E
SHA-512:	73EC9C4AFEF77AA4F6A62729AAC0329D22B4BE519E62430395B92374B3C62A604855CF134EAE267EC0252F589445CD14845B7ACEBEDBF55486061B9A933599AA
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=active.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c2.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c2.SEATS=seat0.ACTIVE_SESSIONS=c2.ONLINE_SESSIONS=c2.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127jfGTLW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.337984693697136
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgVuR257iesnAir/0IxffpYfgD11ZmPLQ2thQc2x9sS02/g2owB:qgFq30VuR8L/ibBBIgD11iPthQHxbPYA
MD5:	DD8878D33E587CF97B9D38B2B20A81F7
SHA1:	C1DCF569BB71E2C8A5E25A12DDF0745F830CFA44
SHA-256:	447AD72EE2C2FBCD541409304964E2E854687D5405132C845316CFB2BF178A31
SHA-512:	5050E4CCD212EE65C49369B1B45AECFCD165668BBF47BC3B108381EE6651A3118F9CA7C27D5714AACB5790EB06E8781DDC29CCC68F1A329C16E515108B264B80
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=opening.STOPPING=no.RUNTIME=/run/user/127.SERVICE_JOB=/org/freedesktop/systemd1/job/8248.DISPLAY=c1.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=c1.ONLINE_SESSIONS=c1.ACTIVE_SEATS=seat0.ONLINE_SEATS=seat0.

/run/systemd/users/.#127vpgCKY

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.16400726935129
Encrypted:	false
SSDEEP:	6:SbFuFyL3BVgdL87iesnAiyaSfgD11ZmPLQ2thQc2pb02nmD2p9rwC:qgFq30dAL/ixegD11iPthQHtPnmDq9x
MD5:	A03EBE5ED816D9C24133773F4FF0293C
SHA1:	8FB3E268015751B2F13E5F651C8A6A6865FB358B
SHA-256:	2414E331818895F2370668D7DA9D96A21397B2C238E3DD9550C39A70CFA7F174
SHA-512:	E573AB98F38DFD95836F8A6D64EF0D338A310B2546C7183082F28213D375121C7E905F380CEBB5F7553E9576B057AACF370CB905B5301EB35AF0BDF580A9F3FD
Malicious:	false
Preview:	# This is private data. Do not parse..NAME=gdm.STATE=closing.STOPPING=no.RUNTIME=/run/user/127.DISPLAY=c1.REALTIME=1736209335798881.MONOTONIC=152856593.SESSIONS=c1.SEATS=seat0.ACTIVE_SESSIONS=.ONLINE_SESSIONS=.ACTIVE_SEATS=.ONLINE_SEATS=.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:Pt:1
MD5:	BC274D851E210DF8D6424CA8398F3CD0
SHA1:	E4DF7937AB76FDC6F07EEDA64388236E7B6BF2F5
SHA-256:	9F741D77FF3439E2D44AD99CB49C44697F9DA763012E29D5AE742D35AF77BE6C
SHA-512:	AFDAED20E819BC5949E9E5AC2C2543394A97DF32E90C3E4D701ECBD583DF2E6540244B652C3E30862FC1491EAECED822C7EE14740DC5551069813B7FC4040F1C
Malicious:	false
Preview:	6758.

/run/user/127/ICEauthority

Download File

Process:	/usr/libexec/gnome-session-binary
File Type:	TTComp archive data, binary, 1K dictionary
Category:	dropped
Size (bytes):	1304
Entropy (8bit):	5.968695551843384
Encrypted:	false
SSDEEP:	12:OxPtwSveY+tLYjXxPSOOveY+Sxo1HxPDQXwveY+D44xPUBKiveY+U3BQZ0veY+Uy:p6D12XIr86BPav1k+1HZ
MD5:	FC8E5EF285BBCD2F12EEB604294CE11E
SHA1:	C5513CC0F6ED07A6C6D8AD8BC21D9C285B18922D
SHA-256:	E3F8802DE809A5FBAA47ACB74D6560EFEEE9903C6FB0818E4740D9EF8A1731E6
SHA-512:	9163D50DB2FA6487F0AFE5AC074DD94F1B65E7C886FA688991753075D6648124C312162535480945E1F293E55927CC3056B7881595656CAEE293571B231074C1
Malicious:	false
Preview:	..XSMP...!unix/galassia:/tmp/.ICE-unix/5936..MIT-MAGIC-COOKIE-1..?.eo..W......#...XSMP...#local/galassia:@/tmp/.ICE-unix/5936..MIT-MAGIC-COOKIE-1....x..E\..S.<v.7..ICE...!unix/galassia:/tmp/.ICE-unix/5885..MIT-MAGIC-COOKIE-1....;.....39R.p5...ICE...#local/galassia:@/tmp/.ICE-unix/5885..MIT-MAGIC-COOKIE-1..9x........8PT...XSMP...!unix/galassia:/tmp/.ICE-unix/1383..MIT-MAGIC-COOKIE-1.....w.0......F!W...XSMP...#local/galassia:@/tmp/.ICE-unix/1383..MIT-MAGIC-COOKIE-1......,mN..b7.....ICE...!unix/galassia:/tmp/.ICE-unix/1313..MIT-MAGIC-COOKIE-1.....]v1..".?.}.....ICE...#local/galassia:@/tmp/.ICE-unix/1313..MIT-MAGIC-COOKIE-1...o4...6]..c..f....XSMP...#local/galassia:@/tmp/.ICE-unix/1313..MIT-MAGIC-COOKIE-1..N.#r......S.....XSMP...!unix/galassia:/tmp/.ICE-unix/1313..MIT-MAGIC-COOKIE-1.....q.p.."LS.DM(..ICE...#local/galassia:@/tmp/.ICE-unix/1383..MIT-MAGIC-COOKIE-1...]...,0..2...`..ICE...!unix/galassia:/tmp/.ICE-unix/1383..MIT-MAGIC-COOKIE-1...y.&.O...j../I....XSMP...#local/galass

/run/user/127/dconf/user

Download File

Process:	/usr/libexec/gsd-power
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Preview:	.

/run/user/127/gdm/Xauthority

Download File

Process:	/usr/lib/gdm3/gdm-x-session
File Type:	X11 Xauthority data
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.983294787198872
Encrypted:	false
SSDEEP:	3:rg/WFllasO93zfplHWFllasO93zf/:rg/WFl2tlHWFl2j
MD5:	5CC322745115FCCFC309620F0651B60F
SHA1:	CB8710420BA603B0DEED149FAA9B9DE273DC28F5
SHA-256:	9CCBA965B14F21D76B5E0CCA9BF3B153441C2DD0DA6CF460D83DB24659896596
SHA-512:	715994B26384D1BBEC3975E9047A87CCA8F49A368935CFDC236466CA8840967D9AC8882F7E46FFDE35E99415FA1A25314FDC4A3E31954EB5699111D69293E168
Malicious:	false
Preview:	....galassia....MIT-MAGIC-COOKIE-1.....@..."...VVd......galassia....MIT-MAGIC-COOKIE-1.....@..."...VVd..

/run/user/127/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:Xvn:/
MD5:	1871A77A2672D9FF957A78A093E14F2F
SHA1:	217F3EA7A30BCCB6F0C44B7A8EED080DF42B165C
SHA-256:	6508AD69449189974D9A78274D384CB944E3E7C4117975FAD59853E271E3B803
SHA-512:	FAA31B51C98E23EBC17C5E4BC96E68374F267053FD8CF82A70FCB497D5EB078640006959AAE8B12177502539E4C8C5FB0FDFAED809CEFC6E0CB92E1D3BBC4550
Malicious:	false
Preview:	6204.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351417
Encrypted:	false
SSDEEP:	3:/0sXlXEWtl//bE:t+yl
MD5:	7FB6C2D94AE0A8999A7DDD6CDB3AEC80
SHA1:	403CD5FA6724C2B2984F7FDF3ECC6741BFFF1DC3
SHA-256:	749B12288285CF6A794F8B68E98955AA7DBB82B823E0C96B8D38C78C7B7E9621
SHA-512:	11B11BA54AF333480630DED660ED1F51B75F99DE0DADC8B3A456423646D7909E54A5D7A35002C7D35827E97A192C72E0DFFE54FD48A20FCA6FAD1DB53F467B6A
Malicious:	false
Preview:	....>...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................>....s\|g.......................................

/tmp/qemu-open.vAKtKw (deleted)

Download File

Process:	/tmp/vevhea4.elf
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.032303242743953
Encrypted:	false
SSDEEP:	3:TgSS40NloHJN:TgSS9laJN
MD5:	7A73A1C08A9215B3FEAC3A801B154725
SHA1:	212129ACAA88BE3FB29A64F3EB407E50831B611C
SHA-256:	9492249EF6C16F00311597CBE8403A8280C0267287F86F4931F2FAD8CC6BBBFE
SHA-512:	2F5959600D11D7E62CDC47E99A8EB15F1B7F935E969C46D82243A73281B472705E2C78DC564AA49052F76A322CB3048214174DE38BF0ECB3AC33789198E5C4F4
Malicious:	false
Preview:	/tmp/vevhea4.elf.nwlrbbmqbh

/tmp/server-0.xkm

Download File

Process:	/usr/bin/xkbcomp
File Type:	Compiled XKB Keymap: lsb, version 15
Category:	dropped
Size (bytes):	12060
Entropy (8bit):	4.8492493153178975
Encrypted:	false
SSDEEP:	192:tDyb2zOmnECQmwTVFfLaSLus4UVcqLkjoqdD//HJeCQ1+JdDx0s2T:tDyAxvYhFf+S6tUzmp7/1MJ
MD5:	B4E3EB0B8B6B0FC1F46740C573E18D86
SHA1:	7D35426357695EBA77850757E8939A62DCEFF2D1
SHA-256:	7951135CC89A6E89493E3A9997C3D9054439459F8BFCE3DDEC76B943DA79FA91
SHA-512:	8196A23E2B5E525A5581562A2D7F2EE4FF5B694FEF3E218206D52EA9BFE80600BB0C6AA8968CA58E93E1AAD478FA05E157D08DB6D4D1224DDEA6754E377BE001
Malicious:	false
Preview:	.mkx..............D.......................h.......<.....P.@%.......&......D.......NumLock.....Alt.....LevelThree..LAlt....RAlt....RControl....LControl....ScrollLock..LevelFive...AltGr...Meta....Super...Hyper...........evdev+aliases(qwerty)...!.....ESC.AE01AE02AE03AE04AE05AE06AE07AE08AE09AE10AE11AE12BKSPTAB.AD01AD02AD03AD04AD05AD06AD07AD08AD09AD10AD11AD12RTRNLCTLAC01AC02AC03AC04AC05AC06AC07AC08AC09AC10AC11TLDELFSHBKSLAB01AB02AB03AB04AB05AB06AB07AB08AB09AB10RTSHKPMULALTSPCECAPSFK01FK02FK03FK04FK05FK06FK07FK08FK09FK10NMLKSCLKKP7.KP8.KP9.KPSUKP4.KP5.KP6.KPADKP1.KP2.KP3.KP0.KPDLLVL3....LSGTFK11FK12AB11KATAHIRAHENKHKTGMUHEJPCMKPENRCTLKPDVPRSCRALTLNFDHOMEUP..PGUPLEFTRGHTEND.DOWNPGDNINS.DELEI120MUTEVOL-VOL+POWRKPEQI126PAUSI128I129HNGLHJCVAE13LWINRWINCOMPSTOPAGAIPROPUNDOFRNTCOPYOPENPASTFINDCUT.HELPI147I148I149I150I151I152I153I154I155I156I157I158I159I160I161I162I163I164I165I166I167I168I169I170I171I172I173I174I175I176I177I178I179I180I181I182I183I184I185I186I187I188I189I190FK13FK14FK15FK16FK17FK18

/var/lib/AccountsService/users/gdm.13CXZ2

Download File

Process:	/usr/lib/accountsservice/accounts-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.66214589518167
Encrypted:	false
SSDEEP:	3:urzMQvNT+PzKLrAan4R8AKn:gzMQIzKLrAa4M
MD5:	542BA3FB41206AE43928AF1C5E61FEBC
SHA1:	F56F574DAF50D609526B36B5B54FDD59EA4D6A26
SHA-256:	730D9509D4EAA7266829A8F5A8CFEBA6BBDDD5873FC2BD580AD464F4A237E11A
SHA-512:	D774B8F191A5C65228D1B3CA1181701CFCD07A3D91C5571B0DDF32AD3E241C2D7BDFC0697AB97DC10441EF9CDC8AEE5B19BC34E13E5C8B0B91AD06EEF42F5AEA
Malicious:	false
Preview:	[User].XSession=.Icon=/var/lib/gdm3/.face.SystemAccount=true.

/var/lib/AccountsService/users/gdm.J11IZ2

Download File

Process:	/usr/lib/accountsservice/accounts-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.66214589518167
Encrypted:	false
SSDEEP:	3:urzMQvNT+PzKLrAan4R8AKn:gzMQIzKLrAa4M
MD5:	542BA3FB41206AE43928AF1C5E61FEBC
SHA1:	F56F574DAF50D609526B36B5B54FDD59EA4D6A26
SHA-256:	730D9509D4EAA7266829A8F5A8CFEBA6BBDDD5873FC2BD580AD464F4A237E11A
SHA-512:	D774B8F191A5C65228D1B3CA1181701CFCD07A3D91C5571B0DDF32AD3E241C2D7BDFC0697AB97DC10441EF9CDC8AEE5B19BC34E13E5C8B0B91AD06EEF42F5AEA
Malicious:	false
Preview:	[User].XSession=.Icon=/var/lib/gdm3/.face.SystemAccount=true.

/var/lib/gdm3/.config/ibus/bus/ee49dfd4fa47433baee88884e2d7de7c-unix-0

Download File

Process:	/usr/bin/ibus-daemon
File Type:	ASCII text
Category:	dropped
Size (bytes):	381
Entropy (8bit):	5.1365542530835535
Encrypted:	false
SSDEEP:	6:SbF4b2sONeZVkSoQ65EfqFFAU+qmnQT23msRvkTFacecf8h/zKLGWWBW/az/bkyN:q5sU3LWfLUDmQymqSFbfomSnW/wkyfl
MD5:	1037148A3A9276D19F43379D6DD81A86
SHA1:	49E8CA88C4273A4386B47E6CD2B49127462CF865
SHA-256:	DC3088C1FF3F8E7873840A9A8501B7B89BAF678D442DB3B6888E4F76BEF60755
SHA-512:	6742E581669DE74773DC1D49388D21A5350B5BC38B31240E5ED9C72EF89B80237F0EA2914A4B3CC342F14B2DCEE32C3E3A47D3A3956B5F9833F18BF43C37E555
Malicious:	false
Preview:	# This file is created by ibus-daemon, please do not modify it..# This file allows processes on the machine to find the.# ibus session bus with the below address..# If the IBUS_ADDRESS environment variable is set, it will.# be used rather than this file..IBUS_ADDRESS=unix:abstract=/var/lib/gdm3/.cache/ibus/dbus-aY6fC3n5,guid=8a1d5c864f7e48f4147fade2677c73d8.IBUS_DAEMON_PID=6093.

/var/lib/gdm3/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

Download File

Process:	/usr/bin/pulseaudio
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Preview:	.

/var/lib/gdm3/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:v:v
MD5:	68B329DA9893E34099C7D8AD5CB9C940
SHA1:	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC
SHA-256:	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
SHA-512:	BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09
Malicious:	false
Preview:	.

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/Xorg.0.log

Download File

Process:	/usr/lib/xorg/Xorg
File Type:	JSON data
Category:	dropped
Size (bytes):	41347
Entropy (8bit):	5.281539201724077
Encrypted:	false
SSDEEP:	384:94emiwsM7PArM+dFdCdrd6dGd/dldAdbd4d6dfdgdZd3d7dQdHdkdEdoQdfTdHEW:uemiwtNbsZ9O9IzojfSaW
MD5:	4A28E871B101C94E1A33018CA22D3F9F
SHA1:	CA170CDFAEACD2EE25233D98D8F463CBC8523D03
SHA-256:	E1CB5CEBFFA91C7E23EF62946D811326504D6738F15684242DF259823888974A
SHA-512:	0EF7D38C2711D552BF0E71CD5B2A6FB56B3FC893A4322BF9D9F251AE4105D9AE0F9D5DEAE277D3C7D52170F33724FB72E6FADC196ECE6D50613C1A369B355587
Malicious:	false
Preview:	[ 160.118] (--) Log file renamed from "/var/log/Xorg.pid-5920.log" to "/var/log/Xorg.0.log".[ 160.145] .X.Org X Server 1.20.11.X Protocol Version 11, Revision 0.[ 160.170] Build Operating System: linux Ubuntu.[ 160.180] Current Operating System: Linux galassia 5.4.0-72-generic #80-Ubuntu SMP Mon Apr 12 17:35:00 UTC 2021 x86_64.[ 160.188] Kernel command line: Patched by Joe: BOOT_IMAGE=/vmlinuz-5.4.0-72-generic root=/dev/mapper/ubuntu--vg-ubuntu--lv ro maybe-ubiquity.[ 160.207] Build Date: 06 July 2021 10:17:51AM.[ 160.214] xorg-server 2:1.20.11-1ubuntu1~20.04.2 (For technical support please see http://www.ubuntu.com/support) .[ 160.221] Current version of pixman: 0.38.4.[ 160.227] .Before reporting problems, check http://wiki.x.org..to make sure that you have the latest version..[ 160.236] Markers: (--) probed, (**) from config file, (==) default setting,..(++) from command line, (!!) notice, (II) informational,..(WW) warning, (EE) error, (NI) not implemented, (??)

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	2210
Entropy (8bit):	4.9853094488828535
Encrypted:	false
SSDEEP:	24:pYZ4IkYZedAZokuNAvCA2+V6RxRqP+FdGg/H/92dcXju1Nu8rboQcErCQ3rCQU:pZgvDfVol/H/jz8rboxErC2rCn
MD5:	AE4438CA31709CDE151D43E9190DE2A1
SHA1:	839035B1AC9E8CE61FDF53E4E8C635418386CE32
SHA-256:	70D5A335676A942EA7D1038B60525A18A149441B343586F9BB7B4FDE1FF148EB
SHA-512:	93D7D955EBB13654C2632E4FBA47812B1C89795232B59CE236CBA9537FEEB5D75B8BFAC527F91BCEA70E0ED0C6BA2D273A6E13E981C70C83704C0BB317AC3C33
Malicious:	false
Preview:	Jan 6 18:22:02 galassia systemd-logind[5776]: Failed to add user by file name 127, ignoring: Invalid argument.Jan 6 18:22:02 galassia systemd-logind[5776]: Failed to add user by file name 1000, ignoring: Invalid argument.Jan 6 18:22:03 galassia systemd-logind[5776]: User enumeration failed: Invalid argument.Jan 6 18:22:03 galassia systemd-logind[5776]: User of session c2 not known..Jan 6 18:22:03 galassia systemd-logind[5776]: User of session 2 not known..Jan 6 18:22:03 galassia systemd-logind[5776]: Session enumeration failed: No such file or directory.Jan 6 18:22:03 galassia systemd-logind[5776]: Watching system buttons on /dev/input/event0 (Power Button).Jan 6 18:22:03 galassia systemd-logind[5776]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Jan 6 18:22:03 galassia systemd-logind[5776]: New seat seat0..Jan 6 18:22:15 galassia gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0).Jan 6 18:

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4595260194504922
Encrypted:	false
SSDEEP:	3:F31HldatDlXvatDP:F3NaXfal
MD5:	0EA3FF7D9944F9B0915E15029D3645E1
SHA1:	C824AAC5CB330EB7907D93A415F5D63A7974BA09
SHA-256:	EEDFF34BE9034A4A15444FE15009E6F133F06BEB09274E9A14BAE8467F4FCB0B
SHA-512:	CC1B5E617A975E90696F7CCD5B71976A668F19262C290E8ACCDFFA2E87EF400187EBBBF7BF662B6094DE2DC4BA9EBCE62EED8BCECDE848DACAE07EEF0E88E852
Malicious:	false
Preview:	LPKSHHRH....................[.Fs.E..-......................................[.Fs.E..-..........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838254
Encrypted:	false
SSDEEP:	3:F31Hl2tDozSwtGtDozSAlt:F3m5ozbtG5ozxl
MD5:	4AA4C431145C2BACF572E101ED70BD8A
SHA1:	473D08870273262CC17D222E3DA9C1C3C6FFCFF5
SHA-256:	9475E4130A5FB25328A5AB04A3C8BC1C250111D76DDA7FB194FFB4F0B2964F84
SHA-512:	A5DCD55C987E0E12A6D19FD3C64CD615534EAE0D2CB1C81A9CEB380E7295BF5749DFC4A4391D1576AD26528512312B835B92B60C449B4DA4FCD352258090C984
Malicious:	false
Preview:	LPKSHHRH..................~.uD..#.....T..................................~.uD..#.....T........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	42506
Entropy (8bit):	4.7052688949338215
Encrypted:	false
SSDEEP:	384:XAo9VvsPQfRqI7FGMttVJiQdm7VusYJ2XnUv3quZ9C61:Qo9VkPQfBhGMb3q6C61
MD5:	8FA3B63305445AB0045F5647E7A611C8
SHA1:	FF02BF4ABD4381739EFC350B9C84F15ABF883E79
SHA-256:	21A502C092240CCE7871FBA0FFE60A0E360614C5E5E8CFD6BB43D78C79036577
SHA-512:	99B47C9FD7E53AF28778C159B4440813CCBC299B5370014FC26A19D1D579ABE08BA1FF8BEF70F0C32726F61EDFC3E0C635060D30E9FF9E98739D7EFB2F71A1AB
Malicious:	false
Preview:	Jan 6 18:21:59 galassia kernel: [ 135.447600] New task spawned: old: (tgid 5769, tid 5769), new (tgid: 5770, tid: 5770).Jan 6 18:21:59 galassia kernel: [ 135.666932] blocking signal 9: 5576 -> 661.Jan 6 18:21:59 galassia kernel: [ 135.682744] blocking signal 9: 5576 -> 725.Jan 6 18:21:59 galassia kernel: [ 135.696121] blocking signal 9: 5576 -> 767.Jan 6 18:21:59 galassia kernel: [ 135.709344] blocking signal 9: 5576 -> 769.Jan 6 18:21:59 galassia kernel: [ 135.722356] blocking signal 9: 5576 -> 780.Jan 6 18:21:59 galassia kernel: [ 135.737097] blocking signal 9: 5576 -> 940.Jan 6 18:21:59 galassia kernel: [ 135.737518] New task spawned: old: (tgid 5695, tid 5695), new (tgid: 5772, tid: 5772).Jan 6 18:21:59 galassia kernel: [ 135.751049] blocking signal 9: 5576 -> 1299.Jan 6 18:21:59 galassia kernel: [ 135.764805] blocking signal 9: 5576 -> 1300.Jan 6 18:21:59 galassia kernel: [ 135.777156] New task spawned: old: (tgid 5772, tid 5772), new (tgid: 5773, tid: 5773).

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	156709
Entropy (8bit):	5.194912191045679
Encrypted:	false
SSDEEP:	1536:foWTFQNWPAF+kdlwrmN6w899cp1PTwFU6K:MWPcPTkU6K
MD5:	6B1F59B8AF60E89BE8391EFF8A432B32
SHA1:	3750605B3E1E4B08197714AEE56EBAFCA17ACD6C
SHA-256:	5A662200E578D6E20577EB8857C8A5A377AC4B9B4C523CF0D3DB2472FE679BA5
SHA-512:	778085C3D19CB7B4F1743230E7733EAF4D75068E7CB030D9A76B868B7A754744CF67769D94E0984C700FFD728420C1C6FE67247E1499DD98241779F208920649
Malicious:	false
Preview:	Jan 6 18:21:59 galassia kernel: [ 135.447600] New task spawned: old: (tgid 5769, tid 5769), new (tgid: 5770, tid: 5770).Jan 6 18:21:59 galassia kernel: [ 135.649304] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1..Jan 6 18:21:59 galassia kernel: [ 135.649682] systemd[1]: Stopping Flush Journal to Persistent Storage....Jan 6 18:21:59 galassia kernel: [ 135.666932] blocking signal 9: 5576 -> 661.Jan 6 18:21:59 galassia kernel: [ 135.682744] blocking signal 9: 5576 -> 725.Jan 6 18:21:59 galassia kernel: [ 135.696121] blocking signal 9: 5576 -> 767.Jan 6 18:21:59 galassia kernel: [ 135.709344] blocking signal 9: 5576 -> 769.Jan 6 18:21:59 galassia kernel: [ 135.722356] blocking signal 9: 5576 -> 780.Jan 6 18:21:59 galassia kernel: [ 135.737097] blocking signal 9: 5576 -> 940.Jan 6 18:21:59 galassia kernel: [ 135.737518] New task spawned: old: (tgid 5695, tid 5695), new (tgid: 5772, tid: 5772).Jan 6 18:21:59 galassia kernel: [ 135.

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351417
Encrypted:	false
SSDEEP:	3:/0sXlXEWtl//bE:t+yl
MD5:	7FB6C2D94AE0A8999A7DDD6CDB3AEC80
SHA1:	403CD5FA6724C2B2984F7FDF3ECC6741BFFF1DC3
SHA-256:	749B12288285CF6A794F8B68E98955AA7DBB82B823E0C96B8D38C78C7B7E9621
SHA-512:	11B11BA54AF333480630DED660ED1F51B75F99DE0DADC8B3A456423646D7909E54A5D7A35002C7D35827E97A192C72E0DFFE54FD48A20FCA6FAD1DB53F467B6A
Malicious:	true
Preview:	....>...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................>....s\|g.......................................

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.488907130419499
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	vevhea4.elf
File size:	146'176 bytes
MD5:	4ebb21d496755fdd6c6129a9f7668717
SHA1:	0855f881bf16721afe0064d9ebcfaf8a748b44a7
SHA256:	98f95f1d6357598c8f50997a2c4a38ebf8a35adf864c33924f95745c02b4a5f0
SHA512:	521b7240851a739815ed5302c1acf325b8d4371b8f1f8634dbe0f4626f93e811af60a8e992588d1ece6a190839f4ca8a9d164233ce7da1475961a6e137e9ddb5
SSDEEP:	1536:QP3GZOZ4nsSjvXcURb2Pcxs4V00pkT8VYlAGROukWCnvyo3ql+lwywf2uXGMkxGt:QPVKnBXpRbpG4pqgVYSi4q9J3
TLSH:	40E31945F8418F27C6C612BBFB5E428C772A1768D3EE72039D256F20379A95B0E3B142
File Content Preview:	.ELF...a..........(.........4...p9......4. ...(.....................................................0I..............Q.td..................................-...L."....n..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	145776
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x1baf4	0x0	0x6	AX	16
.fini	PROGBITS	0x23ba4	0x1bba4	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x23bb8	0x1bbb8	0x2ac8	0x0	0x2	A	4
.ctors	PROGBITS	0x2f000	0x1f000	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x2f00c	0x1f00c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x2f020	0x1f020	0x4910	0x0	0x3	WA	32
.bss	NOBITS	0x33930	0x23930	0x4580	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x23930	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x1e680	0x1e680	6.0292	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x1f000	0x2f000	0x2f000	0x4930	0x8eb0	0.4223	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 01:21:52.063230038 CET	34684	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.068078995 CET	33966	34684	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:52.068120956 CET	34684	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.069385052 CET	34684	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.074189901 CET	33966	34684	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:52.074229956 CET	34684	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.079006910 CET	33966	34684	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:52.423583031 CET	57258	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:52.429335117 CET	7733	57258	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:52.429400921 CET	57258	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:52.431101084 CET	57258	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:52.436933994 CET	7733	57258	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:52.692616940 CET	33966	34684	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:52.692687035 CET	34684	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.692936897 CET	34684	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.741790056 CET	57260	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:52.746783972 CET	7733	57260	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:52.746828079 CET	57260	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:52.748209000 CET	57260	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:52.755080938 CET	7733	57260	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:52.790550947 CET	34690	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.795614958 CET	33966	34690	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:52.795665979 CET	34690	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.797270060 CET	34690	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.802119970 CET	33966	34690	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:52.802177906 CET	34690	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:52.807142973 CET	33966	34690	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:53.077816010 CET	57264	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.082781076 CET	7733	57264	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.082839966 CET	57264	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.084033012 CET	57264	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.086194038 CET	57266	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.088771105 CET	7733	57264	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.091839075 CET	7733	57266	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.091886997 CET	57266	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.092864990 CET	57266	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.096038103 CET	57268	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.097834110 CET	7733	57266	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.101602077 CET	7733	57268	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.101667881 CET	57268	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.102792978 CET	57268	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.104912996 CET	57270	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.107526064 CET	7733	57268	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.109745026 CET	7733	57270	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.109792948 CET	57270	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.110945940 CET	57270	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.113768101 CET	57272	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.116555929 CET	7733	57270	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.118827105 CET	7733	57272	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.118916988 CET	57272	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.120100975 CET	57272	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.125423908 CET	7733	57272	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.187231064 CET	57274	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.192008018 CET	7733	57274	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.193068981 CET	57274	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.210647106 CET	57274	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.216906071 CET	7733	57274	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.322480917 CET	57276	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.327414036 CET	7733	57276	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.327474117 CET	57276	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.354818106 CET	57276	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.360395908 CET	7733	57276	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.365223885 CET	57278	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.370822906 CET	7733	57278	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.370878935 CET	57278	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.375732899 CET	57278	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.379436970 CET	57280	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.381385088 CET	7733	57278	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.385507107 CET	7733	57280	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.387139082 CET	57280	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.389306068 CET	57280	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.392736912 CET	57282	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.394061089 CET	7733	57280	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.398209095 CET	7733	57282	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.398261070 CET	57282	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.400301933 CET	57282	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.405101061 CET	7733	57282	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.405356884 CET	57284	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.410187006 CET	7733	57284	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.410249949 CET	57284	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.412421942 CET	57284	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.417247057 CET	7733	57284	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.417267084 CET	57286	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.422043085 CET	7733	57286	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.422106981 CET	57286	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.424338102 CET	57286	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.428184032 CET	57288	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.429148912 CET	7733	57286	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.432972908 CET	7733	57288	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.433031082 CET	57288	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.434937954 CET	33966	34690	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:53.435046911 CET	34690	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:53.435046911 CET	34690	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:53.435261011 CET	57288	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.440047979 CET	7733	57288	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.482194901 CET	57292	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.487014055 CET	7733	57292	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.487057924 CET	57292	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.495239019 CET	57292	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.500047922 CET	7733	57292	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.505773067 CET	57294	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.510548115 CET	7733	57294	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.510597944 CET	57294	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.516053915 CET	57294	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.520855904 CET	7733	57294	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.526436090 CET	57296	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.531244993 CET	7733	57296	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.531290054 CET	57296	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.536699057 CET	57296	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.541426897 CET	7733	57296	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.553972960 CET	57298	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.558733940 CET	7733	57298	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.558785915 CET	57298	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.563879013 CET	57298	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.570056915 CET	7733	57298	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.573853970 CET	57300	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.579504013 CET	7733	57300	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.579546928 CET	57300	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.581777096 CET	34730	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:53.586467028 CET	57300	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.586572886 CET	33966	34730	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:53.586635113 CET	34730	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:53.591322899 CET	7733	57300	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.592001915 CET	34730	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:53.596805096 CET	33966	34730	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:53.599951029 CET	34730	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:53.604715109 CET	33966	34730	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:53.607337952 CET	57304	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.612103939 CET	7733	57304	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.612154007 CET	57304	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.618951082 CET	57304	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.623764992 CET	7733	57304	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.627887011 CET	57306	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.632654905 CET	7733	57306	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.635042906 CET	57306	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.639383078 CET	57306	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.645289898 CET	7733	57306	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.646337032 CET	57308	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.651140928 CET	7733	57308	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.651192904 CET	57308	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.654387951 CET	57308	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.659655094 CET	57310	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.660362959 CET	7733	57308	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.665029049 CET	7733	57310	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:53.665092945 CET	57310	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.667017937 CET	57310	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:53.671848059 CET	7733	57310	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:54.229862928 CET	33966	34730	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:54.229912996 CET	34730	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.229967117 CET	34730	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.318320990 CET	34740	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.323213100 CET	33966	34740	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:54.323276997 CET	34740	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.325664997 CET	34740	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.330485106 CET	33966	34740	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:54.330528975 CET	34740	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.335374117 CET	33966	34740	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:54.951158047 CET	33966	34740	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:54.951337099 CET	34740	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:54.951337099 CET	34740	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.057154894 CET	34742	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.061944008 CET	33966	34742	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.061999083 CET	34742	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.065311909 CET	34742	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.070085049 CET	33966	34742	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.070126057 CET	34742	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.074934006 CET	33966	34742	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.619317055 CET	57316	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.625534058 CET	7733	57316	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.625597954 CET	57316	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.629055023 CET	57316	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.635272026 CET	7733	57316	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.685746908 CET	57318	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.691916943 CET	7733	57318	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.691977024 CET	57318	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.698199987 CET	57318	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.704304934 CET	7733	57318	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.706537008 CET	33966	34742	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.706636906 CET	34742	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.706636906 CET	34742	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.731508970 CET	57320	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.736305952 CET	7733	57320	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.736362934 CET	57320	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.740220070 CET	57320	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.745014906 CET	7733	57320	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.754024982 CET	57322	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.758837938 CET	7733	57322	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.758879900 CET	57322	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.762783051 CET	57322	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.767591953 CET	7733	57322	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.783860922 CET	57324	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.788733959 CET	7733	57324	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.790040016 CET	57324	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.792965889 CET	57324	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.797750950 CET	7733	57324	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.805799961 CET	57326	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.806694031 CET	34756	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.810636997 CET	7733	57326	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.810751915 CET	57326	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.811525106 CET	33966	34756	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.811584949 CET	34756	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.812079906 CET	57326	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.813484907 CET	34756	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.815031052 CET	57330	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.816852093 CET	7733	57326	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.818247080 CET	33966	34756	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.818290949 CET	34756	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:55.819803953 CET	7733	57330	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.819859982 CET	57330	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.821844101 CET	57330	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.823079109 CET	33966	34756	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:55.823937893 CET	57332	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.826700926 CET	7733	57330	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.828778982 CET	7733	57332	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.828843117 CET	57332	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.831659079 CET	57332	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.836080074 CET	57334	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.836472034 CET	7733	57332	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.840866089 CET	7733	57334	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.840928078 CET	57334	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.842148066 CET	57334	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.844239950 CET	57336	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.846915960 CET	7733	57334	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.849107981 CET	7733	57336	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.849185944 CET	57336	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.850415945 CET	57336	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.852319002 CET	57338	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.855232000 CET	7733	57336	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.857124090 CET	7733	57338	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.857180119 CET	57338	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.858331919 CET	57338	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.860457897 CET	57340	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.863068104 CET	7733	57338	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.865246058 CET	7733	57340	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.865323067 CET	57340	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.866914988 CET	57340	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.869946957 CET	57342	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.871722937 CET	7733	57340	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.874763012 CET	7733	57342	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.874815941 CET	57342	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.876322985 CET	57342	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.878493071 CET	57344	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.881056070 CET	7733	57342	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.883270025 CET	7733	57344	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.883328915 CET	57344	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.884512901 CET	57344	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.886287928 CET	57346	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.889758110 CET	7733	57344	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.891526937 CET	7733	57346	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.891572952 CET	57346	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.892765999 CET	57346	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.894623041 CET	57348	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.898005962 CET	7733	57346	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.900279999 CET	7733	57348	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.900358915 CET	57348	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.901534081 CET	57348	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.903311014 CET	57350	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.906347036 CET	7733	57348	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.908099890 CET	7733	57350	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.908160925 CET	57350	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.909395933 CET	57350	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.911376953 CET	57352	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.914127111 CET	7733	57350	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.916179895 CET	7733	57352	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.916237116 CET	57352	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.917433023 CET	57352	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.919368029 CET	57354	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.922240973 CET	7733	57352	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.924182892 CET	7733	57354	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.924237013 CET	57354	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.925518036 CET	57354	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.927566051 CET	57356	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.930284977 CET	7733	57354	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.932399035 CET	7733	57356	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.932456017 CET	57356	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.933758020 CET	57356	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.935794115 CET	57358	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.938471079 CET	7733	57356	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.940660954 CET	7733	57358	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.940737009 CET	57358	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.941958904 CET	57358	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.943845034 CET	57360	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.946690083 CET	7733	57358	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.948637009 CET	7733	57360	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.948682070 CET	57360	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.949801922 CET	57360	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.951731920 CET	57362	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.954519033 CET	7733	57360	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.956516981 CET	7733	57362	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.956564903 CET	57362	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.957704067 CET	57362	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.959566116 CET	57364	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.962465048 CET	7733	57362	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.964390039 CET	7733	57364	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.964451075 CET	57364	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.965818882 CET	57364	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.967458010 CET	57366	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.970633030 CET	7733	57364	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.975016117 CET	7733	57366	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.975071907 CET	57366	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.976344109 CET	57366	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.978408098 CET	57368	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.981113911 CET	7733	57366	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.983181000 CET	7733	57368	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.983227015 CET	57368	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.984828949 CET	57368	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.986589909 CET	57370	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.990005970 CET	7733	57368	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.992324114 CET	7733	57370	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:55.992367983 CET	57370	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.993604898 CET	57370	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.995610952 CET	57372	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:55.999089003 CET	7733	57370	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.001559019 CET	7733	57372	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.001631021 CET	57372	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.002928972 CET	57372	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.005728006 CET	57374	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.008610964 CET	7733	57372	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.011374950 CET	7733	57374	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.011430025 CET	57374	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.012600899 CET	57374	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.014497995 CET	57376	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.017405987 CET	7733	57374	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.019265890 CET	7733	57376	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.019339085 CET	57376	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.021070004 CET	57376	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.022996902 CET	57378	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.025820971 CET	7733	57376	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.027806997 CET	7733	57378	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.027853012 CET	57378	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.028980970 CET	57378	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.030788898 CET	57380	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.033698082 CET	7733	57378	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.035512924 CET	7733	57380	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.035567045 CET	57380	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.036700010 CET	57380	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.041501999 CET	7733	57380	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.056554079 CET	57382	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.061307907 CET	7733	57382	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.061369896 CET	57382	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.062797070 CET	57382	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.065726042 CET	57384	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.067522049 CET	7733	57382	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.070553064 CET	7733	57384	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.070612907 CET	57384	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.071891069 CET	57384	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.076667070 CET	7733	57384	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.079446077 CET	57386	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.084234953 CET	7733	57386	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.084285021 CET	57386	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.085556984 CET	57386	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.090306997 CET	7733	57386	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.098505974 CET	57388	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.103336096 CET	7733	57388	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.103394032 CET	57388	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.104481936 CET	57388	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.106422901 CET	57390	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.109268904 CET	7733	57388	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.111301899 CET	7733	57390	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.111358881 CET	57390	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.112725973 CET	57390	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.114690065 CET	57392	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.117542982 CET	7733	57390	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.119441986 CET	7733	57392	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.119484901 CET	57392	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.120670080 CET	57392	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.122406006 CET	57394	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.125488043 CET	7733	57392	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.127188921 CET	7733	57394	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.127258062 CET	57394	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.129076004 CET	57394	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.130983114 CET	57396	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.133886099 CET	7733	57394	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.135739088 CET	7733	57396	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.135819912 CET	57396	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.136935949 CET	57396	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.138890028 CET	57398	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.141746044 CET	7733	57396	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.143701077 CET	7733	57398	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.143750906 CET	57398	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.144871950 CET	57398	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.146595955 CET	57400	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.353203058 CET	7733	57398	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.353214979 CET	7733	57400	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.353298903 CET	57400	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.354526997 CET	57400	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.357048035 CET	57402	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.359282017 CET	7733	57400	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.361879110 CET	7733	57402	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.361938953 CET	57402	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.363328934 CET	57402	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.366681099 CET	57404	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.368036985 CET	7733	57402	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.371499062 CET	7733	57404	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.371547937 CET	57404	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.372543097 CET	57404	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.374315023 CET	57406	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.377368927 CET	7733	57404	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.379084110 CET	7733	57406	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.379132032 CET	57406	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.381083012 CET	57406	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.383168936 CET	57408	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.385847092 CET	7733	57406	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.387996912 CET	7733	57408	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.388053894 CET	57408	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.389143944 CET	57408	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.390994072 CET	57410	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.393853903 CET	7733	57408	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.395737886 CET	7733	57410	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.395793915 CET	57410	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.397073984 CET	57410	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.399167061 CET	57412	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.401828051 CET	7733	57410	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.403958082 CET	7733	57412	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.404006958 CET	57412	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.405230045 CET	57412	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.407005072 CET	57414	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.410069942 CET	7733	57412	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.411796093 CET	7733	57414	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.411840916 CET	57414	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.412977934 CET	57414	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.414983034 CET	57416	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.417844057 CET	7733	57414	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.419730902 CET	7733	57416	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.419786930 CET	57416	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.420933962 CET	57416	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.422810078 CET	57418	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.425734997 CET	7733	57416	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.427618027 CET	7733	57418	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.427666903 CET	57418	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.429065943 CET	57418	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.430829048 CET	57420	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.433814049 CET	7733	57418	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.435621023 CET	7733	57420	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.435677052 CET	57420	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.436938047 CET	57420	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.439057112 CET	57422	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.441740990 CET	7733	57420	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.443850040 CET	7733	57422	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.443914890 CET	57422	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.445097923 CET	57422	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.447081089 CET	57424	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.449904919 CET	7733	57422	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.451908112 CET	7733	57424	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.451998949 CET	57424	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.453193903 CET	57424	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.455075979 CET	57426	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.455638885 CET	33966	34756	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:56.455719948 CET	34756	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:56.455719948 CET	34756	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:56.457926989 CET	7733	57424	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.459949970 CET	7733	57426	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.460000038 CET	57426	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.461301088 CET	57426	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.463113070 CET	57428	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.465998888 CET	7733	57426	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.467941046 CET	7733	57428	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.468003035 CET	57428	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.469187021 CET	57428	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.471678019 CET	57430	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.474039078 CET	7733	57428	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.476515055 CET	7733	57430	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.476556063 CET	57430	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.477667093 CET	57430	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.480302095 CET	57432	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.482439041 CET	7733	57430	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.485119104 CET	7733	57432	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.485194921 CET	57432	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.486984015 CET	57432	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.490398884 CET	57434	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.491756916 CET	7733	57432	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.495151043 CET	7733	57434	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.495223999 CET	57434	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.496370077 CET	57434	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.498316050 CET	57436	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.501380920 CET	7733	57434	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.503524065 CET	7733	57436	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.503587961 CET	57436	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.505410910 CET	57436	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.507390976 CET	57438	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.510234118 CET	7733	57436	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.512227058 CET	7733	57438	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.512283087 CET	57438	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.513555050 CET	57438	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.515691042 CET	57440	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.518310070 CET	7733	57438	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.520484924 CET	7733	57440	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.520545959 CET	57440	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.521713972 CET	57440	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.523719072 CET	57442	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.526539087 CET	7733	57440	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.528556108 CET	7733	57442	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.528629065 CET	57442	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.529947996 CET	57442	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.531795979 CET	57444	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.532694101 CET	34874	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:56.534812927 CET	7733	57442	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.536604881 CET	7733	57444	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.536665916 CET	57444	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.537456036 CET	33966	34874	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:56.537493944 CET	34874	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:56.538156986 CET	57444	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.539407015 CET	34874	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:56.542953014 CET	7733	57444	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.544207096 CET	33966	34874	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:56.544244051 CET	34874	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:56.545653105 CET	57448	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.549010992 CET	33966	34874	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:56.550452948 CET	7733	57448	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.550508022 CET	57448	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.552654028 CET	57448	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.557445049 CET	7733	57448	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.567156076 CET	57450	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.572010040 CET	7733	57450	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.572069883 CET	57450	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.573106050 CET	57450	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.577945948 CET	7733	57450	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.666959047 CET	57452	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.672569036 CET	7733	57452	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.672646046 CET	57452	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.674015045 CET	57452	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.679682016 CET	7733	57452	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.680891991 CET	57454	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.686419010 CET	7733	57454	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.688028097 CET	57454	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.695885897 CET	57454	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.700659990 CET	7733	57454	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.718357086 CET	57456	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.723236084 CET	7733	57456	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:56.723282099 CET	57456	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.724715948 CET	57456	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:56.729532003 CET	7733	57456	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:57.182252884 CET	33966	34874	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:57.182307005 CET	34874	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.182343006 CET	34874	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.290869951 CET	34886	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.295706034 CET	33966	34886	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:57.295792103 CET	34886	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.300160885 CET	34886	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.305002928 CET	33966	34886	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:57.305049896 CET	34886	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.309854984 CET	33966	34886	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:57.938780069 CET	33966	34886	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:57.938869953 CET	34886	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:57.938869953 CET	34886	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.034907103 CET	34888	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.039717913 CET	33966	34888	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.039784908 CET	34888	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.042300940 CET	34888	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.047111988 CET	33966	34888	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.047161102 CET	34888	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.051929951 CET	33966	34888	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.691396952 CET	33966	34888	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.691459894 CET	34888	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.691488028 CET	34888	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.780641079 CET	57462	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.785442114 CET	7733	57462	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.785456896 CET	34892	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.785492897 CET	57462	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.788258076 CET	57462	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.790286064 CET	33966	34892	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.790347099 CET	34892	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.793557882 CET	7733	57462	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.800396919 CET	34892	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.800528049 CET	57466	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.805552959 CET	33966	34892	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.805567980 CET	7733	57466	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.805591106 CET	34892	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:58.805651903 CET	57466	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.808614016 CET	57466	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.810416937 CET	33966	34892	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:58.813452005 CET	7733	57466	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.814822912 CET	57468	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.819641113 CET	7733	57468	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.819680929 CET	57468	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.823848009 CET	57468	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.828619003 CET	7733	57468	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.830163956 CET	57470	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.835005999 CET	7733	57470	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.835051060 CET	57470	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.837852955 CET	57470	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.842634916 CET	7733	57470	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.843276978 CET	57472	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.848001957 CET	7733	57472	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.848071098 CET	57472	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.851048946 CET	57472	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.855820894 CET	7733	57472	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.856431961 CET	57474	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.861258984 CET	7733	57474	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.861319065 CET	57474	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.863970041 CET	57474	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.868741989 CET	7733	57474	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.869879961 CET	57476	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.874658108 CET	7733	57476	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.874694109 CET	57476	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.878562927 CET	57476	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.883335114 CET	7733	57476	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.884037971 CET	57478	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.888768911 CET	7733	57478	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.888854980 CET	57478	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.892657042 CET	57478	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.897382021 CET	7733	57478	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.898179054 CET	57480	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.902932882 CET	7733	57480	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.902980089 CET	57480	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.906253099 CET	57480	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.911067963 CET	7733	57480	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.914484978 CET	57482	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.919260025 CET	7733	57482	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.919305086 CET	57482	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.922943115 CET	57482	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.927690029 CET	7733	57482	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.929359913 CET	57484	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.934178114 CET	7733	57484	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.934232950 CET	57484	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.937788963 CET	57484	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.942621946 CET	7733	57484	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.944379091 CET	57486	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.949197054 CET	7733	57486	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.949242115 CET	57486	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.953797102 CET	57486	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.958563089 CET	7733	57486	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.960705042 CET	57488	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.965513945 CET	7733	57488	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.965553045 CET	57488	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.969022989 CET	57488	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.973828077 CET	7733	57488	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.975697041 CET	57490	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.980510950 CET	7733	57490	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.980546951 CET	57490	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.983926058 CET	57490	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.988743067 CET	7733	57490	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.990247965 CET	57492	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.995083094 CET	7733	57492	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:58.995131969 CET	57492	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:58.998054028 CET	57492	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.002796888 CET	7733	57492	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.034235001 CET	57494	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.039129972 CET	7733	57494	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.039176941 CET	57494	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.042867899 CET	57494	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.047651052 CET	7733	57494	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.053917885 CET	57496	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.058732033 CET	7733	57496	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.058788061 CET	57496	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.062486887 CET	57496	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.067272902 CET	7733	57496	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.070336103 CET	57498	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.075153112 CET	7733	57498	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.075191975 CET	57498	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.079617977 CET	57498	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.084399939 CET	7733	57498	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.087019920 CET	57500	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.091918945 CET	7733	57500	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.091969013 CET	57500	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.095566988 CET	57500	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:21:59.100600004 CET	7733	57500	89.190.156.145	192.168.2.14
Jan 7, 2025 01:21:59.417661905 CET	33966	34892	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:59.417732954 CET	34892	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:59.417798996 CET	34892	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:59.522244930 CET	34930	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:59.527146101 CET	33966	34930	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:59.527194023 CET	34930	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:59.530929089 CET	34930	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:59.535761118 CET	33966	34930	178.215.238.112	192.168.2.14
Jan 7, 2025 01:21:59.535800934 CET	34930	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:21:59.540641069 CET	33966	34930	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.151194096 CET	33966	34930	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.151257038 CET	34930	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.151319981 CET	34930	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.237822056 CET	34932	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.242652893 CET	33966	34932	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.242714882 CET	34932	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.244878054 CET	34932	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.249629021 CET	33966	34932	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.249687910 CET	34932	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.254532099 CET	33966	34932	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.863492012 CET	33966	34932	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.863584042 CET	34932	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.863584042 CET	34932	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.957118988 CET	34934	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.961965084 CET	33966	34934	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.962008953 CET	34934	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.963576078 CET	34934	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.968385935 CET	33966	34934	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:00.968425989 CET	34934	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:00.973242998 CET	33966	34934	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:01.594729900 CET	33966	34934	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:01.594799042 CET	34934	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:01.594835997 CET	34934	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:01.679589033 CET	34936	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:01.687151909 CET	33966	34936	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:01.687225103 CET	34936	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:01.689125061 CET	34936	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:01.693967104 CET	33966	34936	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:01.694021940 CET	34936	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:01.708811998 CET	33966	34936	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:02.339348078 CET	33966	34936	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:02.339416981 CET	34936	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:02.339483023 CET	34936	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:02.425544977 CET	34938	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:02.430325985 CET	33966	34938	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:02.430447102 CET	34938	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:02.432244062 CET	34938	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:02.437000990 CET	33966	34938	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:02.437031984 CET	34938	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:02.441862106 CET	33966	34938	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.068758011 CET	33966	34938	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.068938017 CET	34938	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.068938971 CET	34938	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.145699978 CET	34940	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.150554895 CET	33966	34940	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.150614023 CET	34940	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.151798964 CET	34940	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.156569958 CET	33966	34940	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.156616926 CET	34940	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.161422968 CET	33966	34940	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.801527023 CET	33966	34940	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.801696062 CET	34940	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.801867962 CET	34940	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.874272108 CET	34942	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.879192114 CET	33966	34942	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.879247904 CET	34942	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.879894972 CET	34942	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.884618044 CET	33966	34942	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:03.884696007 CET	34942	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:03.889527082 CET	33966	34942	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:04.508918047 CET	33966	34942	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:04.509098053 CET	34942	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:04.509171009 CET	34942	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:04.580154896 CET	34944	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:04.585063934 CET	33966	34944	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:04.585117102 CET	34944	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:04.585628986 CET	34944	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:04.590466976 CET	33966	34944	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:04.590521097 CET	34944	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:22:04.595372915 CET	33966	34944	178.215.238.112	192.168.2.14
Jan 7, 2025 01:22:13.796286106 CET	7733	57258	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:13.799444914 CET	57258	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.159959078 CET	7733	57260	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.163427114 CET	57260	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.439465046 CET	7733	57266	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.443425894 CET	57266	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.458555937 CET	7733	57264	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.463413954 CET	57264	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.468487024 CET	7733	57268	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.475411892 CET	57268	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.519376040 CET	7733	57272	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.521064997 CET	7733	57270	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.523416042 CET	57272	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.527407885 CET	57270	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.566167116 CET	7733	57274	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.567449093 CET	57274	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.704832077 CET	7733	57276	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.707415104 CET	57276	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.734977007 CET	7733	57278	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.735400915 CET	57278	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.765556097 CET	7733	57282	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.767292023 CET	7733	57280	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.767307997 CET	7733	57284	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.767405987 CET	57282	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.767405987 CET	57280	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.767415047 CET	57284	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.781251907 CET	7733	57288	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.783401012 CET	57288	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.812441111 CET	7733	57286	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.815403938 CET	57286	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.864923954 CET	7733	57292	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.867403984 CET	57292	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.878999949 CET	7733	57294	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.879399061 CET	57294	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.909836054 CET	7733	57296	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.911396027 CET	57296	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.938021898 CET	7733	57298	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.939394951 CET	57298	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.953623056 CET	7733	57304	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.955398083 CET	57304	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.987338066 CET	7733	57300	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:14.991399050 CET	57300	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:14.999356031 CET	7733	57308	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:15.003401041 CET	57308	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:15.014899969 CET	7733	57310	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:15.015422106 CET	57310	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:15.021348000 CET	7733	57306	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:15.023392916 CET	57306	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:16.988110065 CET	7733	57316	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:16.991336107 CET	57316	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.046739101 CET	7733	57318	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.047317982 CET	57318	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.109455109 CET	7733	57320	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.111319065 CET	57320	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.129087925 CET	7733	57322	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.131306887 CET	57322	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.171823978 CET	7733	57332	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.171946049 CET	7733	57326	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.175302029 CET	57332	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.175307035 CET	57326	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.189946890 CET	7733	57330	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.191330910 CET	57330	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.193078041 CET	7733	57324	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.195331097 CET	57324	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.218627930 CET	7733	57340	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.219310045 CET	57340	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.234292984 CET	7733	57336	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.234308004 CET	7733	57338	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.234348059 CET	7733	57344	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.235308886 CET	57344	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.235308886 CET	57338	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.235310078 CET	57336	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.237360001 CET	7733	57334	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.243308067 CET	57334	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.254599094 CET	7733	57342	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.259301901 CET	57342	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.265579939 CET	7733	57354	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.265624046 CET	7733	57348	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.267297983 CET	57348	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.267304897 CET	57354	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.271106958 CET	7733	57346	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.275300980 CET	57346	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.281140089 CET	7733	57352	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.282867908 CET	7733	57350	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.287303925 CET	57350	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.287321091 CET	57352	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.312364101 CET	7733	57360	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.313971043 CET	7733	57356	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.315315962 CET	57360	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.315310955 CET	57356	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.317923069 CET	7733	57358	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.319303036 CET	57358	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.329689026 CET	7733	57364	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.331302881 CET	57364	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.359230042 CET	7733	57362	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.359292030 CET	7733	57376	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.359991074 CET	7733	57368	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.363153934 CET	7733	57370	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.363162994 CET	7733	57366	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.363298893 CET	57362	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.363298893 CET	57376	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.363301992 CET	57366	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.363301992 CET	57368	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.363301992 CET	57370	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.376642942 CET	7733	57372	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.379333019 CET	57372	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.390634060 CET	7733	57374	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.392348051 CET	7733	57380	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.395334005 CET	57374	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.399298906 CET	57380	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.410929918 CET	7733	57378	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.411293030 CET	57378	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.437256098 CET	7733	57386	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.439297915 CET	57386	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.442179918 CET	7733	57382	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.447304010 CET	57382	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.469811916 CET	7733	57384	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.471301079 CET	57384	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.486027956 CET	7733	57394	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.487308979 CET	57394	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.489085913 CET	7733	57388	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.491317987 CET	57388	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.519357920 CET	7733	57396	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.519440889 CET	7733	57392	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.520307064 CET	7733	57390	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.523288965 CET	57390	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.523293972 CET	57392	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.523307085 CET	57396	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.718786955 CET	7733	57400	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.719294071 CET	57400	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.735121012 CET	7733	57406	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.735296011 CET	57406	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.736112118 CET	7733	57398	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.736311913 CET	7733	57402	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.739296913 CET	57402	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.739321947 CET	57398	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.764954090 CET	7733	57410	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.769689083 CET	7733	57412	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.770199060 CET	7733	57404	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.771126032 CET	7733	57408	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.771303892 CET	57410	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.775288105 CET	57404	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.775293112 CET	57408	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.775293112 CET	57412	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.780976057 CET	7733	57418	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.783324003 CET	57418	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.784192085 CET	7733	57414	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.787290096 CET	57414	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.797667980 CET	7733	57422	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.799292088 CET	57422	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.800486088 CET	7733	57416	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.803302050 CET	57416	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.812272072 CET	7733	57424	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.812355042 CET	7733	57428	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.815285921 CET	57428	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.815310001 CET	57424	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.816145897 CET	7733	57420	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.819284916 CET	57420	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.832120895 CET	7733	57426	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.835299015 CET	57426	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.859664917 CET	7733	57432	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.863281965 CET	57432	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.878643036 CET	7733	57436	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.879384041 CET	57436	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.880502939 CET	7733	57434	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.883280039 CET	57434	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.890388012 CET	7733	57442	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.891284943 CET	57442	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.892152071 CET	7733	57430	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.892251968 CET	7733	57438	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.895282984 CET	57438	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.895282030 CET	57430	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.927706957 CET	7733	57444	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.927738905 CET	7733	57440	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.931288004 CET	57440	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.931296110 CET	57444	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.939397097 CET	7733	57448	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.941274881 CET	7733	57450	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:17.943310976 CET	57450	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:17.943315983 CET	57448	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:18.032123089 CET	7733	57452	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:18.035283089 CET	57452	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:18.061856985 CET	7733	57454	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:18.063292980 CET	57454	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:18.109277964 CET	7733	57456	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:18.111274958 CET	57456	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.160094023 CET	7733	57462	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.163199902 CET	57462	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.187557936 CET	7733	57466	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.187592983 CET	7733	57468	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.191194057 CET	57468	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.191222906 CET	57466	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.234463930 CET	7733	57476	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.235193968 CET	57476	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.236063957 CET	7733	57474	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.238091946 CET	7733	57470	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.238115072 CET	7733	57472	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.239195108 CET	57470	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.239201069 CET	57474	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.239201069 CET	57472	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.266489029 CET	7733	57480	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.267215967 CET	57480	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.281212091 CET	7733	57482	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.287199974 CET	57482	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.302531004 CET	7733	57478	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.303214073 CET	57478	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.316725969 CET	7733	57486	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.319190979 CET	57486	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.331789970 CET	7733	57484	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.335187912 CET	57484	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.349216938 CET	7733	57488	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.351185083 CET	57488	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.359378099 CET	7733	57492	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.367199898 CET	57492	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.394473076 CET	7733	57490	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.395190001 CET	57490	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.421292067 CET	7733	57494	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.423182011 CET	57494	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.441584110 CET	7733	57496	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.443197012 CET	57496	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.469564915 CET	7733	57500	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.470467091 CET	7733	57498	89.190.156.145	192.168.2.14
Jan 7, 2025 01:22:20.471172094 CET	57498	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:22:20.471223116 CET	57500	7733	192.168.2.14	89.190.156.145
Jan 7, 2025 01:23:00.863567114 CET	33966	34944	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:00.863820076 CET	34944	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:00.870501041 CET	33966	34944	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:02.210546970 CET	34946	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:02.215459108 CET	33966	34946	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:02.215512991 CET	34946	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:02.244005919 CET	34946	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:02.249022007 CET	33966	34946	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:02.249068022 CET	34946	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:02.253850937 CET	33966	34946	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:02.848702908 CET	33966	34946	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:02.848762989 CET	34946	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:02.848845959 CET	34946	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:03.155390024 CET	34948	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:03.160368919 CET	33966	34948	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:03.160429955 CET	34948	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:03.185455084 CET	34948	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:03.190448999 CET	33966	34948	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:03.190499067 CET	34948	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:03.195286989 CET	33966	34948	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:03.783593893 CET	33966	34948	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:03.783684015 CET	34948	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:03.783746004 CET	34948	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:04.065143108 CET	34950	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:04.070089102 CET	33966	34950	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:04.070139885 CET	34950	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:04.090883970 CET	34950	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:04.095738888 CET	33966	34950	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:04.095786095 CET	34950	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:04.100667000 CET	33966	34950	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:04.722208977 CET	33966	34950	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:04.722280025 CET	34950	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:04.722321033 CET	34950	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:05.237190008 CET	34952	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:05.242197037 CET	33966	34952	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:05.242244959 CET	34952	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:05.270097017 CET	34952	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:05.274939060 CET	33966	34952	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:05.275002956 CET	34952	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:05.279896021 CET	33966	34952	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:05.866007090 CET	33966	34952	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:05.866117001 CET	34952	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:05.866117001 CET	34952	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:06.136168003 CET	34954	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:06.141055107 CET	33966	34954	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:06.141115904 CET	34954	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:06.165585041 CET	34954	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:06.170393944 CET	33966	34954	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:06.170452118 CET	34954	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:06.175283909 CET	33966	34954	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:06.765855074 CET	33966	34954	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:06.765958071 CET	34954	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:06.766046047 CET	34954	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:07.121506929 CET	34956	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:07.126436949 CET	33966	34956	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:07.126487017 CET	34956	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:07.147638083 CET	34956	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:07.152467012 CET	33966	34956	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:07.152510881 CET	34956	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:07.157346964 CET	33966	34956	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:07.795073032 CET	33966	34956	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:07.795193911 CET	34956	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:07.795193911 CET	34956	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.033252954 CET	34958	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.040436029 CET	33966	34958	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:08.040501118 CET	34958	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.054586887 CET	34958	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.061532974 CET	33966	34958	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:08.061574936 CET	34958	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.068212986 CET	33966	34958	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:08.686564922 CET	33966	34958	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:08.686640978 CET	34958	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.686714888 CET	34958	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.894475937 CET	34960	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.899343014 CET	33966	34960	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:08.899408102 CET	34960	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.914153099 CET	34960	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.918881893 CET	33966	34960	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:08.918920040 CET	34960	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:08.923679113 CET	33966	34960	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:09.538499117 CET	33966	34960	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:09.538635969 CET	34960	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:09.538636923 CET	34960	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:09.798306942 CET	34962	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:09.803262949 CET	33966	34962	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:09.803320885 CET	34962	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:09.819343090 CET	34962	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:09.824331999 CET	33966	34962	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:09.824384928 CET	34962	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:09.829236031 CET	33966	34962	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:10.437434912 CET	33966	34962	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:10.437494993 CET	34962	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:10.437546968 CET	34962	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:10.792006969 CET	34964	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:10.796726942 CET	33966	34964	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:10.796775103 CET	34964	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:10.813231945 CET	34964	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:10.818933010 CET	33966	34964	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:10.818977118 CET	34964	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:10.824997902 CET	33966	34964	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:11.440208912 CET	33966	34964	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:11.440263033 CET	34964	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:11.440319061 CET	34964	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:11.678698063 CET	34966	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:11.683458090 CET	33966	34966	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:11.683501959 CET	34966	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:11.709758043 CET	34966	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:11.714576960 CET	33966	34966	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:11.714620113 CET	34966	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:11.719362974 CET	33966	34966	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:12.341419935 CET	33966	34966	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:12.341476917 CET	34966	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:12.341538906 CET	34966	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:12.541805983 CET	34968	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:12.547122955 CET	33966	34968	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:12.547190905 CET	34968	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:12.566162109 CET	34968	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:12.570933104 CET	33966	34968	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:12.571002007 CET	34968	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:12.575701952 CET	33966	34968	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:13.249393940 CET	33966	34968	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:13.249514103 CET	34968	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:13.249514103 CET	34968	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:13.506659985 CET	34970	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:13.511538982 CET	33966	34970	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:13.511595011 CET	34970	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:13.530651093 CET	34970	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:13.535449028 CET	33966	34970	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:13.535500050 CET	34970	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:13.540327072 CET	33966	34970	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:14.266099930 CET	33966	34970	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:14.266284943 CET	34970	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:14.266284943 CET	34970	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:14.427439928 CET	34972	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:14.432288885 CET	33966	34972	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:14.432349920 CET	34972	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:14.440531969 CET	34972	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:14.445342064 CET	33966	34972	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:14.445410967 CET	34972	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:14.450200081 CET	33966	34972	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:15.148643970 CET	33966	34972	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:15.148775101 CET	34972	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:15.148775101 CET	34972	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:15.377675056 CET	34974	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:15.382575035 CET	33966	34974	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:15.384097099 CET	34974	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:15.396979094 CET	34974	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:15.401741982 CET	33966	34974	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:15.401787996 CET	34974	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:15.406598091 CET	33966	34974	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:16.025013924 CET	33966	34974	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:16.025079012 CET	34974	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.025124073 CET	34974	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.245779991 CET	34976	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.250633001 CET	33966	34976	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:16.250679970 CET	34976	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.263880968 CET	34976	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.268707037 CET	33966	34976	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:16.268752098 CET	34976	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.273598909 CET	33966	34976	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:16.875993967 CET	33966	34976	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:16.876065969 CET	34976	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:16.876117945 CET	34976	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.042663097 CET	34978	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.047503948 CET	33966	34978	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:17.047545910 CET	34978	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.058090925 CET	34978	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.062916040 CET	33966	34978	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:17.062958002 CET	34978	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.067845106 CET	33966	34978	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:17.671828032 CET	33966	34978	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:17.671896935 CET	34978	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.671956062 CET	34978	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.821804047 CET	34980	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.826585054 CET	33966	34980	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:17.826634884 CET	34980	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.834450960 CET	34980	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.839256048 CET	33966	34980	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:17.839299917 CET	34980	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:17.844093084 CET	33966	34980	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:18.477617979 CET	33966	34980	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:18.477677107 CET	34980	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:18.477747917 CET	34980	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:18.654345036 CET	34982	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:18.659250021 CET	33966	34982	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:18.659353018 CET	34982	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:18.668539047 CET	34982	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:18.673405886 CET	33966	34982	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:18.673449993 CET	34982	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:18.678193092 CET	33966	34982	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:19.312804937 CET	33966	34982	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:19.312925100 CET	34982	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:19.312925100 CET	34982	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:19.489962101 CET	34984	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:19.497378111 CET	33966	34984	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:19.497478962 CET	34984	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:19.507164955 CET	34984	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:19.516161919 CET	33966	34984	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:19.516211987 CET	34984	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:19.523374081 CET	33966	34984	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:20.132107019 CET	33966	34984	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:20.132165909 CET	34984	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:20.132241964 CET	34984	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:20.318631887 CET	34986	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:20.323472977 CET	33966	34986	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:20.323518038 CET	34986	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:20.337183952 CET	34986	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:20.342009068 CET	33966	34986	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:20.342060089 CET	34986	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:20.346832991 CET	33966	34986	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:21.027264118 CET	33966	34986	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:21.027359962 CET	34986	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.027359962 CET	34986	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.193118095 CET	34988	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.197956085 CET	33966	34988	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:21.198004961 CET	34988	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.204987049 CET	34988	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.209835052 CET	33966	34988	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:21.209878922 CET	34988	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.214725018 CET	33966	34988	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:21.857049942 CET	33966	34988	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:21.857104063 CET	34988	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:21.857153893 CET	34988	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.005521059 CET	34990	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.010376930 CET	33966	34990	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:22.010432005 CET	34990	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.028330088 CET	34990	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.034775972 CET	33966	34990	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:22.034816027 CET	34990	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.039654016 CET	33966	34990	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:22.648174047 CET	33966	34990	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:22.648232937 CET	34990	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.648300886 CET	34990	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.862919092 CET	34992	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.867716074 CET	33966	34992	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:22.867825031 CET	34992	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.875632048 CET	34992	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.880420923 CET	33966	34992	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:22.880466938 CET	34992	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:22.885279894 CET	33966	34992	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:23.503535032 CET	33966	34992	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:23.503632069 CET	34992	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:23.503645897 CET	34992	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:23.671197891 CET	34994	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:23.676040888 CET	33966	34994	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:23.676094055 CET	34994	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:23.685549974 CET	34994	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:23.690392971 CET	33966	34994	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:23.690455914 CET	34994	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:23.695262909 CET	33966	34994	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:24.327251911 CET	33966	34994	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:24.327328920 CET	34994	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:24.327394009 CET	34994	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:24.455739021 CET	35000	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:24.460680962 CET	33966	35000	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:24.460761070 CET	35000	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:24.466775894 CET	35000	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:24.471713066 CET	33966	35000	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:24.471795082 CET	35000	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:24.476569891 CET	33966	35000	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:25.103904009 CET	33966	35000	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:25.104078054 CET	35000	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.104078054 CET	35000	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.225110054 CET	35002	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.230000973 CET	33966	35002	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:25.230103016 CET	35002	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.234911919 CET	35002	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.239692926 CET	33966	35002	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:25.239737988 CET	35002	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.244499922 CET	33966	35002	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:25.872726917 CET	33966	35002	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:25.872828960 CET	35002	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:25.872906923 CET	35002	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.004740000 CET	35004	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.009681940 CET	33966	35004	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:26.009737968 CET	35004	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.017138004 CET	35004	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.021950006 CET	33966	35004	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:26.022000074 CET	35004	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.026844978 CET	33966	35004	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:26.646733046 CET	33966	35004	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:26.646806955 CET	35004	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.646852970 CET	35004	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.752568960 CET	35006	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.757420063 CET	33966	35006	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:26.757471085 CET	35006	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.761003971 CET	35006	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.765731096 CET	33966	35006	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:26.765779018 CET	35006	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:26.770515919 CET	33966	35006	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:27.378485918 CET	33966	35006	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:27.378546953 CET	35006	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:27.378592014 CET	35006	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:27.482861042 CET	35008	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:27.487628937 CET	33966	35008	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:27.487689018 CET	35008	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:27.491206884 CET	35008	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:27.495980024 CET	33966	35008	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:27.496037006 CET	35008	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:27.500874043 CET	33966	35008	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.127269983 CET	33966	35008	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.127439022 CET	35008	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.127439022 CET	35008	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.233839035 CET	35010	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.238677979 CET	33966	35010	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.238723993 CET	35010	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.243282080 CET	35010	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.248059034 CET	33966	35010	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.248104095 CET	35010	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.252898932 CET	33966	35010	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.862050056 CET	33966	35010	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.862107992 CET	35010	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.862159014 CET	35010	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.959568977 CET	35012	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.964320898 CET	33966	35012	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.964370966 CET	35012	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.969204903 CET	35012	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.974025965 CET	33966	35012	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:28.974061012 CET	35012	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:28.978914022 CET	33966	35012	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:29.606029034 CET	33966	35012	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:29.606090069 CET	35012	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:29.606137037 CET	35012	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:29.704170942 CET	35014	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:29.708930016 CET	33966	35014	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:29.708995104 CET	35014	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:29.713525057 CET	35014	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:29.718348026 CET	33966	35014	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:29.718390942 CET	35014	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:29.723239899 CET	33966	35014	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:30.348002911 CET	33966	35014	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:30.348098040 CET	35014	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:30.348155022 CET	35014	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:30.440434933 CET	35016	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:30.445235014 CET	33966	35016	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:30.445298910 CET	35016	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:30.447153091 CET	35016	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:30.451894999 CET	33966	35016	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:30.451957941 CET	35016	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:30.456815958 CET	33966	35016	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:31.088103056 CET	33966	35016	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:31.088174105 CET	35016	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:31.088278055 CET	35016	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:31.172739029 CET	35018	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:31.177609921 CET	33966	35018	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:31.177673101 CET	35018	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:31.179728985 CET	35018	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:31.384424925 CET	35018	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:31.462687016 CET	33966	35018	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:31.462702990 CET	33966	35018	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.110754967 CET	33966	35018	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.110929966 CET	35018	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.110929966 CET	35018	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.189997911 CET	35020	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.195135117 CET	33966	35020	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.195230961 CET	35020	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.207063913 CET	35020	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.211905003 CET	33966	35020	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.211992025 CET	35020	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.216778994 CET	33966	35020	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.846524954 CET	33966	35020	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.846781015 CET	35020	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.846781015 CET	35020	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.919697046 CET	35022	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.924518108 CET	33966	35022	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.924606085 CET	35022	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.925463915 CET	35022	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.930238008 CET	33966	35022	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:32.930315971 CET	35022	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:32.935089111 CET	33966	35022	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:33.557470083 CET	33966	35022	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:33.557595015 CET	35022	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:33.557631016 CET	35022	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:33.633620024 CET	35024	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:33.638468027 CET	33966	35024	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:33.638521910 CET	35024	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:33.639687061 CET	35024	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:33.644465923 CET	33966	35024	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:33.644512892 CET	35024	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:33.649302959 CET	33966	35024	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:34.275573969 CET	33966	35024	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:34.275657892 CET	35024	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.275712013 CET	35024	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.345937967 CET	35026	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.350785017 CET	33966	35026	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:34.350832939 CET	35026	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.352054119 CET	35026	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.356848001 CET	33966	35026	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:34.356909037 CET	35026	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.361625910 CET	33966	35026	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:34.974325895 CET	33966	35026	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:34.974473953 CET	35026	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:34.974473953 CET	35026	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.044725895 CET	35028	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.049640894 CET	33966	35028	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:35.049705029 CET	35028	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.050293922 CET	35028	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.055047035 CET	33966	35028	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:35.055089951 CET	35028	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.059900999 CET	33966	35028	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:35.677901983 CET	33966	35028	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:35.678076982 CET	35028	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.678076982 CET	35028	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.753333092 CET	35030	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.758837938 CET	33966	35030	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:35.758903980 CET	35030	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.759557009 CET	35030	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.764991999 CET	33966	35030	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:35.765033960 CET	35030	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:35.770561934 CET	33966	35030	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:36.411070108 CET	33966	35030	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:36.411166906 CET	35030	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:36.411226034 CET	35030	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:36.480621099 CET	35032	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:36.485471010 CET	33966	35032	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:36.485517979 CET	35032	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:36.486149073 CET	35032	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:36.490974903 CET	33966	35032	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:36.491039038 CET	35032	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:36.495893955 CET	33966	35032	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.128005981 CET	33966	35032	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.128127098 CET	35032	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.128215075 CET	35032	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.200730085 CET	35034	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.205580950 CET	33966	35034	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.205655098 CET	35034	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.206322908 CET	35034	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.211078882 CET	33966	35034	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.211141109 CET	35034	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.215945005 CET	33966	35034	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.857064009 CET	33966	35034	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.857120037 CET	35034	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.857163906 CET	35034	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.931968927 CET	35036	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.936793089 CET	33966	35036	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.936858892 CET	35036	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.937639952 CET	35036	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.942461014 CET	33966	35036	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:37.942532063 CET	35036	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:37.947380066 CET	33966	35036	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:38.597604990 CET	33966	35036	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:38.597662926 CET	35036	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:38.597729921 CET	35036	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:38.677242994 CET	35038	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:38.682099104 CET	33966	35038	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:38.682224035 CET	35038	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:38.682713032 CET	35038	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:38.687482119 CET	33966	35038	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:38.687539101 CET	35038	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:38.692354918 CET	33966	35038	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:39.324567080 CET	33966	35038	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:39.324856043 CET	35038	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:39.324856043 CET	35038	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:39.396450043 CET	35040	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:39.401272058 CET	33966	35040	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:39.401319981 CET	35040	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:39.402072906 CET	35040	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:39.406832933 CET	33966	35040	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:39.406876087 CET	35040	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:39.411673069 CET	33966	35040	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.025707960 CET	33966	35040	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.025844097 CET	35040	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.025896072 CET	35040	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.094918013 CET	35042	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.099749088 CET	33966	35042	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.099801064 CET	35042	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.100321054 CET	35042	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.105092049 CET	33966	35042	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.105129957 CET	35042	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.109894991 CET	33966	35042	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.740632057 CET	33966	35042	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.740897894 CET	35042	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.740997076 CET	35042	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.810996056 CET	35044	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.815860033 CET	33966	35044	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.815908909 CET	35044	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.816456079 CET	35044	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.821275949 CET	33966	35044	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:40.821321011 CET	35044	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:40.826142073 CET	33966	35044	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:41.443489075 CET	33966	35044	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:41.443572044 CET	35044	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:41.443614960 CET	35044	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:41.513381958 CET	35046	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:41.518177986 CET	33966	35046	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:41.518222094 CET	35046	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:41.518755913 CET	35046	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:41.523570061 CET	33966	35046	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:41.523612022 CET	35046	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:41.528418064 CET	33966	35046	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.150588036 CET	33966	35046	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.150813103 CET	35046	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.150813103 CET	35046	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.219727993 CET	35048	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.224590063 CET	33966	35048	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.224641085 CET	35048	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.225198984 CET	35048	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.230058908 CET	33966	35048	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.230103970 CET	35048	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.234885931 CET	33966	35048	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.863090992 CET	33966	35048	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.863204002 CET	35048	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.863254070 CET	35048	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.933100939 CET	35050	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.937911034 CET	33966	35050	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.937957048 CET	35050	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.938538074 CET	35050	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.943293095 CET	33966	35050	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:42.943340063 CET	35050	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:42.948074102 CET	33966	35050	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:43.575050116 CET	33966	35050	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:43.575211048 CET	35050	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:43.575242043 CET	35050	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:43.645849943 CET	35052	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:43.650717020 CET	33966	35052	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:43.650764942 CET	35052	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:43.651406050 CET	35052	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:43.656203032 CET	33966	35052	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:43.656286001 CET	35052	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:43.661118031 CET	33966	35052	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:44.312571049 CET	33966	35052	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:44.312761068 CET	35052	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:44.312761068 CET	35052	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:44.383385897 CET	35054	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:44.388139009 CET	33966	35054	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:44.388185024 CET	35054	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:44.388776064 CET	35054	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:44.393549919 CET	33966	35054	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:44.393623114 CET	35054	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:44.398422003 CET	33966	35054	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.036828041 CET	33966	35054	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.036909103 CET	35054	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.037014961 CET	35054	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.106491089 CET	35056	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.111283064 CET	33966	35056	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.111330032 CET	35056	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.111855030 CET	35056	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.116956949 CET	33966	35056	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.117002010 CET	35056	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.121839046 CET	33966	35056	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.732095957 CET	33966	35056	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.732157946 CET	35056	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.732214928 CET	35056	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.800898075 CET	35058	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.805701971 CET	33966	35058	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.805767059 CET	35058	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.806324959 CET	35058	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.811100960 CET	33966	35058	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:45.811142921 CET	35058	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:45.815953016 CET	33966	35058	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:46.457151890 CET	33966	35058	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:46.457345009 CET	35058	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:46.457345009 CET	35058	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:46.531708956 CET	35060	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:46.536576033 CET	33966	35060	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:46.536685944 CET	35060	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:46.537184000 CET	35060	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:46.542001009 CET	33966	35060	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:46.542040110 CET	35060	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:46.546863079 CET	33966	35060	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.163871050 CET	33966	35060	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.163979053 CET	35060	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.164041042 CET	35060	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.234946966 CET	35062	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.239818096 CET	33966	35062	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.239866972 CET	35062	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.240447998 CET	35062	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.245229959 CET	33966	35062	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.245296001 CET	35062	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.250128031 CET	33966	35062	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.892091036 CET	33966	35062	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.892199993 CET	35062	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.892199993 CET	35062	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.961436987 CET	35064	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.966223955 CET	33966	35064	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.966286898 CET	35064	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.966820002 CET	35064	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.971640110 CET	33966	35064	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:47.971688986 CET	35064	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:47.976450920 CET	33966	35064	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:48.598859072 CET	33966	35064	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:48.598907948 CET	35064	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:48.598970890 CET	35064	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:48.669327974 CET	35066	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:48.674187899 CET	33966	35066	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:48.674228907 CET	35066	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:48.674752951 CET	35066	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:48.679543018 CET	33966	35066	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:48.679588079 CET	35066	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:48.684420109 CET	33966	35066	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:49.306757927 CET	33966	35066	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:49.306901932 CET	35066	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:49.306901932 CET	35066	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:49.376159906 CET	35068	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:49.381000042 CET	33966	35068	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:49.381043911 CET	35068	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:49.381650925 CET	35068	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:49.386437893 CET	33966	35068	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:49.386483908 CET	35068	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:49.391309023 CET	33966	35068	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:50.017644882 CET	33966	35068	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:50.017765045 CET	35068	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.017817974 CET	35068	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.087507963 CET	35070	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.092356920 CET	33966	35070	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:50.092397928 CET	35070	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.092920065 CET	35070	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.097713947 CET	33966	35070	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:50.097753048 CET	35070	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.102605104 CET	33966	35070	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:50.716958046 CET	33966	35070	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:50.717010021 CET	35070	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:50.717053890 CET	35070	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.198440075 CET	35072	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.204463959 CET	33966	35072	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:51.204516888 CET	35072	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.205209017 CET	35072	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.211311102 CET	33966	35072	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:51.211393118 CET	35072	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.216242075 CET	33966	35072	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:51.848073006 CET	33966	35072	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:51.848197937 CET	35072	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.848258018 CET	35072	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.918601990 CET	35074	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.924890041 CET	33966	35074	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:51.924937010 CET	35074	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.925497055 CET	35074	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.930282116 CET	33966	35074	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:51.930327892 CET	35074	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:51.935090065 CET	33966	35074	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:52.550481081 CET	33966	35074	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:52.550556898 CET	35074	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:52.550714016 CET	35074	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:52.626811028 CET	35076	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:52.787914038 CET	33966	35076	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:52.788090944 CET	35076	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:52.788744926 CET	35076	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:52.793566942 CET	33966	35076	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:52.793636084 CET	35076	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:52.798501968 CET	33966	35076	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:53.415807962 CET	33966	35076	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:53.415976048 CET	35076	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:53.415976048 CET	35076	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:53.486681938 CET	35078	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:53.491893053 CET	33966	35078	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:53.491955996 CET	35078	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:53.492486954 CET	35078	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:53.497997046 CET	33966	35078	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:53.498084068 CET	35078	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:53.503741980 CET	33966	35078	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:54.116638899 CET	33966	35078	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:54.116812944 CET	35078	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:54.116812944 CET	35078	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:54.186368942 CET	35080	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:54.191167116 CET	33966	35080	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:54.191236019 CET	35080	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:54.191833019 CET	35080	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:54.196541071 CET	33966	35080	178.215.238.112	192.168.2.14
Jan 7, 2025 01:23:54.196588993 CET	35080	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:23:54.201399088 CET	33966	35080	178.215.238.112	192.168.2.14
Jan 7, 2025 01:24:14.211652040 CET	35080	33966	192.168.2.14	178.215.238.112
Jan 7, 2025 01:24:14.216561079 CET	33966	35080	178.215.238.112	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 01:21:51.998676062 CET	36974	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.005713940 CET	53	36974	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.006931067 CET	54298	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.013278961 CET	53	54298	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.023432970 CET	38602	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.029707909 CET	53	38602	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.039035082 CET	49553	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.045305014 CET	53	49553	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.047358990 CET	55807	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.053636074 CET	53	55807	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.055615902 CET	34380	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.061976910 CET	53	34380	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.695672989 CET	43389	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.704494953 CET	53	43389	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.706852913 CET	60225	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.715593100 CET	53	60225	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.718295097 CET	44601	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.724788904 CET	53	44601	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.727148056 CET	52930	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.733702898 CET	53	52930	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.737123966 CET	60811	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.743650913 CET	53	60811	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.744976044 CET	60259	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.751549959 CET	53	60259	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.752867937 CET	34143	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.761763096 CET	53	34143	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.763415098 CET	37745	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.771735907 CET	53	37745	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.773225069 CET	35727	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.781415939 CET	53	35727	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:52.782980919 CET	56595	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:52.789659977 CET	53	56595	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.437625885 CET	54261	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.444022894 CET	53	54261	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.482706070 CET	56369	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.488991976 CET	53	56369	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.495680094 CET	40535	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.502355099 CET	53	40535	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.506921053 CET	39115	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.513394117 CET	53	39115	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.518327951 CET	53155	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.524478912 CET	53	53155	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.528464079 CET	53547	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.534396887 CET	53	53547	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.539210081 CET	56342	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.545356035 CET	53	56342	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.551369905 CET	52004	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.557651043 CET	53	52004	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.561784983 CET	36332	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.568526983 CET	53	36332	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:53.572921038 CET	51739	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:53.579356909 CET	53	51739	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.232063055 CET	49130	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.238341093 CET	53	49130	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.241025925 CET	43191	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.247394085 CET	53	43191	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.250171900 CET	52721	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.256434917 CET	53	52721	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.259021997 CET	57276	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.265119076 CET	53	57276	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.267640114 CET	43683	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.273936033 CET	53	43683	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.276201010 CET	38066	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.282735109 CET	53	38066	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.285285950 CET	48142	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.291404963 CET	53	48142	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.293786049 CET	56912	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.300044060 CET	53	56912	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.302202940 CET	34739	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.308650970 CET	53	34739	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.311043978 CET	58105	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.317287922 CET	53	58105	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.971498966 CET	48158	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.977751017 CET	53	48158	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.980139971 CET	36646	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.986612082 CET	53	36646	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.989154100 CET	49788	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:54.995428085 CET	53	49788	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:54.997672081 CET	37396	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.004420996 CET	53	37396	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.006985903 CET	57567	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.013212919 CET	53	57567	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.015124083 CET	43264	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.021285057 CET	53	43264	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.023921013 CET	47300	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.030208111 CET	53	47300	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.032587051 CET	40847	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.038741112 CET	53	40847	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.041279078 CET	50247	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.047509909 CET	53	50247	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.049793959 CET	60255	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.055916071 CET	53	60255	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.710493088 CET	57130	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.716641903 CET	53	57130	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.719589949 CET	55828	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.725914955 CET	53	55828	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.730685949 CET	59030	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.736978054 CET	53	59030	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.740369081 CET	54546	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.746567011 CET	53	54546	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.751322031 CET	48834	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.757833004 CET	53	48834	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.761019945 CET	55003	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.767658949 CET	53	55003	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.770301104 CET	51908	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.776489019 CET	53	51908	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.778897047 CET	34411	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.785078049 CET	53	34411	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.790385962 CET	34892	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.797118902 CET	53	34892	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:55.799479961 CET	51689	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:55.805900097 CET	53	51689	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.456593990 CET	42737	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.462848902 CET	53	42737	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.463898897 CET	54826	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.470417976 CET	53	54826	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.471808910 CET	32785	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.477978945 CET	53	32785	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.479656935 CET	35290	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.485905886 CET	53	35290	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.487656116 CET	34815	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.494083881 CET	53	34815	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.494910955 CET	39498	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.501117945 CET	53	39498	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.502394915 CET	41663	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.508732080 CET	53	41663	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.510059118 CET	38203	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.516410112 CET	53	38203	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.518021107 CET	57845	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.524240017 CET	53	57845	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:56.525731087 CET	38716	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:56.532131910 CET	53	38716	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.186719894 CET	49662	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.192938089 CET	53	49662	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.197128057 CET	53951	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.203495979 CET	53	53951	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.208281040 CET	46487	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.214721918 CET	53	46487	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.218743086 CET	48179	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.225095987 CET	53	48179	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.229789019 CET	51601	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.236170053 CET	53	51601	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.240101099 CET	39220	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.246208906 CET	53	39220	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.250902891 CET	49760	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.257153988 CET	53	49760	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.261219025 CET	58762	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.267573118 CET	53	58762	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.271996021 CET	44967	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.278366089 CET	53	44967	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.282596111 CET	56680	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.289016962 CET	53	56680	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.941500902 CET	49558	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.950614929 CET	53	49558	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.953838110 CET	53429	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.960479975 CET	53	53429	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.962838888 CET	38763	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.969223976 CET	53	38763	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.972280025 CET	51558	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.978621006 CET	53	51558	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.981097937 CET	50520	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.987483978 CET	53	50520	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.990156889 CET	60968	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:57.996529102 CET	53	60968	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:57.999694109 CET	48946	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.006632090 CET	53	48946	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.009295940 CET	50602	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.015786886 CET	53	50602	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.018635988 CET	56703	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.024888039 CET	53	56703	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.027605057 CET	33715	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.034116983 CET	53	33715	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.695031881 CET	34127	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.701329947 CET	53	34127	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.704514980 CET	37041	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.710846901 CET	53	37041	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.713409901 CET	33937	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.719980955 CET	53	33937	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.724926949 CET	46088	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.731215954 CET	53	46088	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.733809948 CET	56842	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.740430117 CET	53	56842	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.743662119 CET	43043	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.750039101 CET	53	43043	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.753170013 CET	40892	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.759496927 CET	53	40892	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.761455059 CET	47178	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.767683029 CET	53	47178	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.770062923 CET	53599	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.776465893 CET	53	53599	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:58.778549910 CET	41368	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:58.784781933 CET	53	41368	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.421468019 CET	49900	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.427854061 CET	53	49900	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.431561947 CET	45601	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.438726902 CET	53	45601	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.442148924 CET	41952	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.449372053 CET	53	41952	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.452439070 CET	34931	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.458679914 CET	53	34931	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.463385105 CET	52905	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.469583988 CET	53	52905	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.473299980 CET	41120	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.479912996 CET	53	41120	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.483735085 CET	40116	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.490067005 CET	53	40116	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.493603945 CET	57774	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.499840975 CET	53	57774	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.503573895 CET	54358	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.509815931 CET	53	54358	8.8.8.8	192.168.2.14
Jan 7, 2025 01:21:59.513957024 CET	39853	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:21:59.520348072 CET	53	39853	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.153743029 CET	33735	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.160186052 CET	53	33735	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.162271023 CET	39306	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.168695927 CET	53	39306	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.171415091 CET	36083	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.177612066 CET	53	36083	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.179744005 CET	54756	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.186053038 CET	53	54756	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.188224077 CET	44034	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.194600105 CET	53	44034	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.196827888 CET	58606	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.202992916 CET	53	58606	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.205233097 CET	51054	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.211671114 CET	53	51054	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.214131117 CET	57263	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.220520973 CET	53	57263	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.222393990 CET	54906	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.229001045 CET	53	54906	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.230669975 CET	32931	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.236934900 CET	53	32931	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.866908073 CET	53875	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.873146057 CET	53	53875	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.878427982 CET	53228	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.884603024 CET	53	53228	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.888242006 CET	58368	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.894716024 CET	53	58368	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.897653103 CET	42467	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.904110909 CET	53	42467	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.907407045 CET	33137	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.913647890 CET	53	33137	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.917249918 CET	47517	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.923675060 CET	53	47517	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.925818920 CET	48078	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.931972980 CET	53	48078	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.934374094 CET	52078	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.940633059 CET	53	52078	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.942513943 CET	45665	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.948715925 CET	53	45665	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:00.950218916 CET	37855	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:00.956396103 CET	53	37855	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.596770048 CET	48988	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.603070021 CET	53	48988	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.604984999 CET	37101	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.611448050 CET	53	37101	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.613471985 CET	51820	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.619847059 CET	53	51820	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.621975899 CET	36818	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.628242016 CET	53	36818	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.630187988 CET	56798	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.636399984 CET	53	56798	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.638592005 CET	60388	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.644860983 CET	53	60388	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.647186995 CET	60282	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.653409004 CET	53	60282	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.655561924 CET	57588	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.661731958 CET	53	57588	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.663913965 CET	47194	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.670281887 CET	53	47194	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:01.672352076 CET	48491	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:01.678808928 CET	53	48491	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.341550112 CET	42365	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.347799063 CET	53	42365	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.350033045 CET	33878	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.356396914 CET	53	33878	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.358599901 CET	43644	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.365021944 CET	53	43644	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.366938114 CET	46702	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.373307943 CET	53	46702	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.375720978 CET	55515	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.382042885 CET	53	55515	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.384265900 CET	42507	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.390657902 CET	53	42507	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.392638922 CET	54730	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.399127960 CET	53	54730	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.401281118 CET	47106	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.407506943 CET	53	47106	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.409365892 CET	56121	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.415683031 CET	53	56121	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:02.418226957 CET	39345	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:02.424380064 CET	53	39345	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.070075035 CET	47047	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.076426029 CET	53	47047	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.077528000 CET	56084	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.083713055 CET	53	56084	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.085263968 CET	57456	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.091510057 CET	53	57456	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.092813969 CET	34190	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.099034071 CET	53	34190	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.100174904 CET	48860	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.106726885 CET	53	48860	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.107913017 CET	43804	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.114670992 CET	53	43804	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.115735054 CET	40036	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.122560978 CET	53	40036	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.123593092 CET	58190	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.130692959 CET	53	58190	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.131829023 CET	56740	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.137876987 CET	53	56740	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.139019012 CET	49774	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.145178080 CET	53	49774	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.802670002 CET	42658	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.809007883 CET	53	42658	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.809845924 CET	41384	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.815815926 CET	53	41384	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.816662073 CET	51582	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.823590040 CET	53	51582	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.824333906 CET	44187	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.830915928 CET	53	44187	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.831703901 CET	42879	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.838073969 CET	53	42879	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.838838100 CET	40103	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.845196009 CET	53	40103	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.846092939 CET	51236	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.852487087 CET	53	51236	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.853254080 CET	44984	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.859448910 CET	53	44984	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.860258102 CET	39908	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.866453886 CET	53	39908	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:03.867290974 CET	58799	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:03.873908043 CET	53	58799	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.510216951 CET	60774	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.516545057 CET	53	60774	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.517304897 CET	52187	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.523646116 CET	53	52187	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.524281979 CET	48654	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.530369997 CET	53	48654	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.530950069 CET	33336	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.537785053 CET	53	33336	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.538388014 CET	57541	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.545217991 CET	53	57541	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.545826912 CET	41236	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.552016973 CET	53	41236	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.552649975 CET	38343	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.558854103 CET	53	38343	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.559441090 CET	44042	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.565800905 CET	53	44042	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.566437960 CET	45311	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.572812080 CET	53	45311	8.8.8.8	192.168.2.14
Jan 7, 2025 01:22:04.573399067 CET	50539	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:22:04.579809904 CET	53	50539	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:01.903767109 CET	38288	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:01.910260916 CET	53	38288	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:01.942583084 CET	52834	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:01.949055910 CET	53	52834	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:01.973532915 CET	37886	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:01.979757071 CET	53	37886	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:01.999763966 CET	59882	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.006261110 CET	53	59882	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.025223017 CET	43132	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.031775951 CET	53	43132	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.051642895 CET	47160	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.058088064 CET	53	47160	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.096935987 CET	39080	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.103425026 CET	53	39080	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.125736952 CET	58684	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.132055044 CET	53	58684	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.154145956 CET	45938	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.160725117 CET	53	45938	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.188139915 CET	57226	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.194597006 CET	53	57226	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.871167898 CET	54129	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.878304958 CET	53	54129	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.898909092 CET	34726	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.906507015 CET	53	34726	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.931998968 CET	49963	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.938247919 CET	53	49963	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.959913015 CET	36275	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.966285944 CET	53	36275	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:02.988930941 CET	41749	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:02.995426893 CET	53	41749	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.018743992 CET	34543	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.027488947 CET	53	34543	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.051631927 CET	53248	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.057982922 CET	53	53248	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.079957962 CET	58963	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.086518049 CET	53	58963	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.108633041 CET	49832	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.115187883 CET	53	49832	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.137726068 CET	60309	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.144159079 CET	53	60309	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.801203012 CET	49271	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.808257103 CET	53	49271	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.825896978 CET	60676	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.834902048 CET	53	60676	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.851083994 CET	49452	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.857878923 CET	53	49452	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.877655983 CET	45973	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.883994102 CET	53	45973	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.902795076 CET	46576	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.909193993 CET	53	46576	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.930840015 CET	55841	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.939399004 CET	53	55841	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.956769943 CET	35913	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.965230942 CET	53	35913	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:03.986737967 CET	45281	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:03.993185997 CET	53	45281	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:04.012687922 CET	45719	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:04.019057035 CET	53	45719	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:04.047369003 CET	43075	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:04.053735971 CET	53	43075	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:04.742317915 CET	47661	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:04.748595953 CET	53	47661	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:04.769984007 CET	44635	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:04.776309013 CET	53	44635	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:04.794647932 CET	38539	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:04.916629076 CET	53	38539	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:04.973645926 CET	48624	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:04.979931116 CET	53	48624	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.004344940 CET	55075	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.010668993 CET	53	55075	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.059465885 CET	59745	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.065900087 CET	53	59745	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.076512098 CET	55335	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.082859039 CET	53	55335	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.101917028 CET	55833	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.108159065 CET	53	55833	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.147660017 CET	33485	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.154042006 CET	53	33485	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.190551043 CET	37226	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.196827888 CET	53	37226	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.885936975 CET	50699	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.892268896 CET	53	50699	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.914891958 CET	58042	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.921205997 CET	53	58042	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.942572117 CET	54173	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.948822975 CET	53	54173	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.966445923 CET	60385	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.972790956 CET	53	60385	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:05.989453077 CET	43083	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:05.995546103 CET	53	43083	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.016405106 CET	38912	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.022706985 CET	53	38912	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.042175055 CET	52636	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.048307896 CET	53	52636	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.066692114 CET	36734	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.073312998 CET	53	36734	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.092135906 CET	46214	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.098400116 CET	53	46214	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.119230986 CET	42834	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.125586033 CET	53	42834	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.791099072 CET	57698	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.797254086 CET	53	57698	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.822913885 CET	49554	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.829731941 CET	53	49554	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.856170893 CET	42014	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.862489939 CET	53	42014	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.899585009 CET	56914	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.906708956 CET	53	56914	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.931237936 CET	36140	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.937622070 CET	53	36140	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:06.963985920 CET	40142	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:06.970153093 CET	53	40142	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.000298977 CET	50298	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.007549047 CET	53	50298	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.044595957 CET	44306	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.051069021 CET	53	44306	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.079150915 CET	53423	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.085951090 CET	53	53423	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.105803013 CET	42005	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.111994028 CET	53	42005	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.818033934 CET	51574	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.825299978 CET	53	51574	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.847466946 CET	57196	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.853802919 CET	53	57196	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.870503902 CET	45979	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.876981020 CET	53	45979	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.894247055 CET	34535	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.900599957 CET	53	34535	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.919657946 CET	35188	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.926609993 CET	53	35188	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.940679073 CET	56072	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.947664022 CET	53	56072	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.962413073 CET	46604	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.968933105 CET	53	46604	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.980259895 CET	56208	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:07.987210989 CET	53	56208	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:07.998759031 CET	38563	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.007015944 CET	53	38563	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.018815994 CET	53779	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.027647972 CET	53	53779	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.697135925 CET	40867	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.705403090 CET	53	40867	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.717039108 CET	58414	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.725811958 CET	53	58414	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.736346006 CET	46992	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.742408037 CET	53	46992	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.754736900 CET	49552	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.761100054 CET	53	49552	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.773444891 CET	44217	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.779908895 CET	53	44217	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.803570032 CET	50610	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.810156107 CET	53	50610	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.823462963 CET	43961	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.829525948 CET	53	43961	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.841746092 CET	54841	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.848006964 CET	53	54841	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.860955954 CET	42187	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.867358923 CET	53	42187	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:08.881457090 CET	49922	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:08.887584925 CET	53	49922	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.556996107 CET	39448	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.563241005 CET	53	39448	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.599847078 CET	54497	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.606175900 CET	53	54497	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.638691902 CET	44524	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.644948959 CET	53	44524	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.660051107 CET	53959	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.666584015 CET	53	53959	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.682467937 CET	53360	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.688822031 CET	53	53360	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.703602076 CET	57766	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.709847927 CET	53	57766	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.724634886 CET	36556	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.730909109 CET	53	36556	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.743983984 CET	34548	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.750266075 CET	53	34548	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.764816999 CET	55414	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.771013975 CET	53	55414	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:09.784893036 CET	34852	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:09.791240931 CET	53	34852	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.468730927 CET	57032	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.475259066 CET	53	57032	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.506217003 CET	55448	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.512732029 CET	53	55448	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.538754940 CET	55993	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.545407057 CET	53	55993	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.583755970 CET	49828	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.590296030 CET	53	49828	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.612806082 CET	58802	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.619107008 CET	53	58802	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.641069889 CET	34790	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.647440910 CET	53	34790	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.671847105 CET	59092	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.678158045 CET	53	59092	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.710012913 CET	42345	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.716222048 CET	53	42345	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.753688097 CET	49563	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.759823084 CET	53	49563	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:10.777132034 CET	51283	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:10.783412933 CET	53	51283	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.482753992 CET	58737	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.488996029 CET	53	58737	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.501414061 CET	59281	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.509876966 CET	53	59281	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.524548054 CET	57488	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.531289101 CET	53	57488	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.543556929 CET	53557	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.551121950 CET	53	53557	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.558995962 CET	36277	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.566737890 CET	53	36277	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.575637102 CET	39124	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.581882954 CET	53	39124	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.590724945 CET	32851	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.598409891 CET	53	32851	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.607574940 CET	60270	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.615106106 CET	53	60270	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.631619930 CET	34390	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.637754917 CET	53	34390	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:11.661664009 CET	54465	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:11.667685986 CET	53	54465	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.354856014 CET	50628	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.361114979 CET	53	50628	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.371225119 CET	43552	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.377445936 CET	53	43552	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.387355089 CET	50890	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.393631935 CET	53	50890	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.402003050 CET	50711	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.408179998 CET	53	50711	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.416568041 CET	59722	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.423064947 CET	53	59722	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.444881916 CET	33021	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.451107979 CET	53	33021	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.462846994 CET	51812	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.468849897 CET	53	51812	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.481072903 CET	53329	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.487442970 CET	53	53329	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.503186941 CET	47577	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.509412050 CET	53	47577	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:12.526890993 CET	38474	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:12.533216000 CET	53	38474	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.266891003 CET	35973	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.273463964 CET	53	35973	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.289638996 CET	49584	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.296828985 CET	53	49584	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.316988945 CET	34422	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.324543953 CET	53	34422	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.346175909 CET	46484	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.352480888 CET	53	46484	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.373780966 CET	46733	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.380146027 CET	53	46733	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.400986910 CET	48266	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.407236099 CET	53	48266	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.428194046 CET	51059	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.434515953 CET	53	51059	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.457536936 CET	37992	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.463618040 CET	53	37992	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.479443073 CET	44445	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.485621929 CET	53	44445	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:13.494476080 CET	60933	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:13.501076937 CET	53	60933	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.276880980 CET	33202	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.283267975 CET	53	33202	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.297089100 CET	36738	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.303453922 CET	53	36738	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.312128067 CET	47725	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.318506002 CET	53	47725	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.328572035 CET	47645	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.334629059 CET	53	47645	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.343038082 CET	53701	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.349289894 CET	53	53701	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.356234074 CET	51568	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.362550020 CET	53	51568	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.370533943 CET	36050	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.376831055 CET	53	36050	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.384875059 CET	35025	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.390968084 CET	53	35025	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.397821903 CET	47387	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.404088974 CET	53	47387	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:14.417228937 CET	50332	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:14.423620939 CET	53	50332	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.164757967 CET	36464	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.171870947 CET	53	36464	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.187570095 CET	45758	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.193991899 CET	53	45758	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.210211039 CET	47080	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.217086077 CET	53	47080	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.236562014 CET	50603	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.243041039 CET	53	50603	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.261950016 CET	47019	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.268630981 CET	53	47019	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.286792040 CET	45350	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.293135881 CET	53	45350	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.310183048 CET	60903	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.316436052 CET	53	60903	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.329679966 CET	55182	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.336018085 CET	53	55182	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.347296000 CET	48263	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.353364944 CET	53	48263	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:15.365271091 CET	37419	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:15.371814013 CET	53	37419	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.036164999 CET	60500	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.042886019 CET	53	60500	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.061032057 CET	59977	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.067440033 CET	53	59977	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.080162048 CET	36181	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.086294889 CET	53	36181	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.096570015 CET	36019	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.102911949 CET	53	36019	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.113755941 CET	36376	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.120090961 CET	53	36376	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.139456987 CET	43580	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.145714998 CET	53	43580	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.168889999 CET	49908	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.175338030 CET	53	49908	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.189022064 CET	35263	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.195163012 CET	53	35263	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.209778070 CET	40480	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.216037989 CET	53	40480	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.231564045 CET	50586	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.237896919 CET	53	50586	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.884093046 CET	34225	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.890428066 CET	53	34225	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.900144100 CET	53248	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.906446934 CET	53	53248	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.916049957 CET	39906	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.922384024 CET	53	39906	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.931224108 CET	34975	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.937768936 CET	53	34975	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.945313931 CET	50562	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.951633930 CET	53	50562	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.961671114 CET	34331	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.968161106 CET	53	34331	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.978737116 CET	48140	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:16.984977961 CET	53	48140	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:16.998740911 CET	60105	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.005141020 CET	53	60105	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.015806913 CET	34888	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.022109032 CET	53	34888	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.031882048 CET	50172	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.038067102 CET	53	50172	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.680596113 CET	54328	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.686733961 CET	53	54328	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.693963051 CET	58689	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.700346947 CET	53	58689	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.709187984 CET	55554	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.715677977 CET	53	55554	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.723928928 CET	43443	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.730470896 CET	53	43443	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.738642931 CET	48786	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.744913101 CET	53	48786	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.752885103 CET	49493	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.759356976 CET	53	49493	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.766588926 CET	47097	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.772974014 CET	53	47097	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.780320883 CET	37228	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.786652088 CET	53	37228	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.798209906 CET	58433	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.804666042 CET	53	58433	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:17.812298059 CET	50459	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:17.818574905 CET	53	50459	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.497798920 CET	48830	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.504272938 CET	53	48830	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.514535904 CET	42988	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.520870924 CET	53	42988	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.530486107 CET	37732	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.536827087 CET	53	37732	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.546360970 CET	43062	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.552670002 CET	53	43062	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.563138008 CET	41759	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.570300102 CET	53	41759	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.580849886 CET	37462	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.587124109 CET	53	37462	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.595014095 CET	51871	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.601376057 CET	53	51871	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.609828949 CET	45541	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.615979910 CET	53	45541	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.626025915 CET	37301	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.632514000 CET	53	37301	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:18.643178940 CET	53888	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:18.649632931 CET	53	53888	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.323093891 CET	33257	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.329380989 CET	53	33257	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.340028048 CET	50091	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.347661972 CET	53	50091	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.356403112 CET	54545	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.364294052 CET	53	54545	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.373136997 CET	59699	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.379532099 CET	53	59699	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.388534069 CET	60727	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.397145987 CET	53	60727	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.407803059 CET	59626	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.414158106 CET	53	59626	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.424483061 CET	40395	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.431080103 CET	53	40395	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.444093943 CET	57799	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.450382948 CET	53	57799	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.460468054 CET	49222	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.467691898 CET	53	49222	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:19.477221012 CET	40919	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:19.485858917 CET	53	40919	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.142117023 CET	51080	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.153224945 CET	53	51080	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.162743092 CET	60783	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.172507048 CET	53	60783	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.184463978 CET	60149	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.191428900 CET	53	60149	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.211663961 CET	47834	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.218013048 CET	53	47834	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.225709915 CET	55837	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.233818054 CET	53	55837	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.244524956 CET	37375	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.251705885 CET	53	37375	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.257395029 CET	42183	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.263648033 CET	53	42183	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.270375013 CET	52605	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.278017998 CET	53	52605	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.287235022 CET	34368	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.293812037 CET	53	34368	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:20.304778099 CET	42297	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:20.311470985 CET	53	42297	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.041377068 CET	43856	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.047714949 CET	53	43856	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.056540966 CET	39440	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.062896013 CET	53	39440	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.072527885 CET	59524	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.078907967 CET	53	59524	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.087621927 CET	45731	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.094224930 CET	53	45731	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.105355024 CET	49145	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.111418962 CET	53	49145	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.120963097 CET	55040	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.127355099 CET	53	55040	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.136575937 CET	34480	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.142765999 CET	53	34480	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.152570009 CET	48942	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.158951998 CET	53	48942	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.167996883 CET	33724	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.174345970 CET	53	33724	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.183053970 CET	35308	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.189368010 CET	53	35308	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.863621950 CET	42848	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.869978905 CET	53	42848	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.878093004 CET	34662	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.884835958 CET	53	34662	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.892097950 CET	56953	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.898310900 CET	53	56953	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.905255079 CET	59893	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.911566019 CET	53	59893	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.918584108 CET	50950	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.925668001 CET	53	50950	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.939476013 CET	51898	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.945925951 CET	53	51898	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.953432083 CET	33080	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.960094929 CET	53	33080	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.967556953 CET	44057	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.973794937 CET	53	44057	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.980993986 CET	56582	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:21.987188101 CET	53	56582	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:21.995482922 CET	43368	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.001713037 CET	53	43368	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.684890032 CET	40833	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.691493988 CET	53	40833	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.724011898 CET	56835	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.730976105 CET	53	56835	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.752304077 CET	57565	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.758627892 CET	53	57565	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.766526937 CET	54003	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.772691011 CET	53	54003	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.786767006 CET	33312	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.793282986 CET	53	33312	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.800401926 CET	48935	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.806618929 CET	53	48935	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.812663078 CET	56454	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.818923950 CET	53	56454	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.827318907 CET	59475	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.833515882 CET	53	59475	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.840215921 CET	53439	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.846544981 CET	53	53439	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:22.852988005 CET	49439	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:22.859358072 CET	53	49439	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.511344910 CET	57365	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.518289089 CET	53	57365	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.527439117 CET	42753	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.533847094 CET	53	42753	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.550666094 CET	55070	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.556885004 CET	53	55070	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.567339897 CET	54460	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.573508978 CET	53	54460	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.582596064 CET	57940	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.588855982 CET	53	57940	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.597424030 CET	42820	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.603506088 CET	53	42820	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.612895012 CET	59367	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.619080067 CET	53	59367	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.629113913 CET	35776	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.635221958 CET	53	35776	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.644319057 CET	52511	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.650492907 CET	53	52511	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:23.659429073 CET	56932	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:23.665791035 CET	53	56932	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.332957029 CET	56866	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.339430094 CET	53	56866	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.344378948 CET	52549	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.351558924 CET	53	52549	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.357080936 CET	48579	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.363945007 CET	53	48579	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.370861053 CET	38321	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.377691984 CET	53	38321	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.383848906 CET	33571	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.390655994 CET	53	33571	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.396187067 CET	46588	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.403280020 CET	53	46588	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.408313036 CET	48819	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.414958000 CET	53	48819	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.419939995 CET	43020	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.427349091 CET	53	43020	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.433337927 CET	55759	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.439743042 CET	53	55759	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:24.446033955 CET	55806	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:24.452349901 CET	53	55806	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.110394955 CET	53380	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.116797924 CET	53	53380	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.122385979 CET	54993	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.128936052 CET	53	54993	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.135138988 CET	40449	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.141921043 CET	53	40449	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.147283077 CET	41342	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.153834105 CET	53	41342	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.160330057 CET	53731	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.167527914 CET	53	53731	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.171541929 CET	35170	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.177855015 CET	53	35170	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.182239056 CET	48870	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.188816071 CET	53	48870	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.193504095 CET	41579	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.200131893 CET	53	41579	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.204150915 CET	34715	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.210726023 CET	53	34715	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.215967894 CET	47373	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.222536087 CET	53	47373	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.881989956 CET	40695	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.888834000 CET	53	40695	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.895951033 CET	38266	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.902360916 CET	53	38266	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.908562899 CET	38877	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.914684057 CET	53	38877	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.921586037 CET	46833	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.927800894 CET	53	46833	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.933995962 CET	45422	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.940296888 CET	53	45422	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.946480989 CET	51986	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.952708006 CET	53	51986	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.958421946 CET	56690	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.964698076 CET	53	56690	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.970199108 CET	51764	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.976484060 CET	53	51764	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.982635021 CET	51163	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:25.988887072 CET	53	51163	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:25.995450020 CET	44458	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.001532078 CET	53	44458	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.651102066 CET	46462	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.657171965 CET	53	46462	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.661238909 CET	46671	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.667434931 CET	53	46671	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.671087027 CET	58994	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.677278042 CET	53	58994	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.681144953 CET	38272	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.687396049 CET	53	38272	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.691802025 CET	45417	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.698028088 CET	53	45417	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.703445911 CET	51842	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.709872961 CET	53	51842	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.713944912 CET	38327	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.720465899 CET	53	38327	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.724468946 CET	33754	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.730679989 CET	53	33754	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.734354973 CET	45926	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.740669966 CET	53	45926	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:26.744586945 CET	34361	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:26.750696898 CET	53	34361	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.382000923 CET	38879	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.388243914 CET	53	38879	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.392400026 CET	58608	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.398618937 CET	53	58608	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.402754068 CET	34290	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.408957005 CET	53	34290	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.412801027 CET	59588	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.419167995 CET	53	59588	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.422605038 CET	52045	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.429209948 CET	53	52045	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.434210062 CET	54552	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.440525055 CET	53	54552	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.444606066 CET	40230	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.450885057 CET	53	40230	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.454965115 CET	45157	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.461108923 CET	53	45157	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.465059996 CET	37586	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.471146107 CET	53	37586	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:27.474869013 CET	35747	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:27.481169939 CET	53	35747	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.131534100 CET	54850	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.138282061 CET	53	54850	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.141834974 CET	48047	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.148032904 CET	53	48047	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.152070045 CET	44262	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.158314943 CET	53	44262	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.162600040 CET	33550	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.168869019 CET	53	33550	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.172694921 CET	38290	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.179152966 CET	53	38290	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.183563948 CET	37417	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.189979076 CET	53	37417	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.194067955 CET	53739	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.200289965 CET	53	53739	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.204864979 CET	37335	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.211266041 CET	53	37335	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.215331078 CET	48159	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.221693993 CET	53	48159	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.225819111 CET	41983	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.232116938 CET	53	41983	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.865701914 CET	43078	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.871923923 CET	53	43078	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.875260115 CET	47776	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.881563902 CET	53	47776	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.885242939 CET	33798	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.891335011 CET	53	33798	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.894337893 CET	37624	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.900616884 CET	53	37624	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.903768063 CET	54253	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.910095930 CET	53	54253	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.913537025 CET	38056	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.919871092 CET	53	38056	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.923048973 CET	34346	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.929214001 CET	53	34346	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.932075977 CET	43712	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.938535929 CET	53	43712	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.941468000 CET	49724	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.947577953 CET	53	49724	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:28.950673103 CET	51669	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:28.956906080 CET	53	51669	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.609375954 CET	60889	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.615669966 CET	53	60889	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.618956089 CET	52213	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.625205994 CET	53	52213	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.628321886 CET	48935	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.634608984 CET	53	48935	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.637617111 CET	38153	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.643837929 CET	53	38153	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.647176981 CET	44559	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.653508902 CET	53	44559	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.656774998 CET	53360	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.662897110 CET	53	53360	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.666081905 CET	45808	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.672370911 CET	53	45808	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.675487041 CET	54078	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.681759119 CET	53	54078	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.685621023 CET	44331	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.691929102 CET	53	44331	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:29.696095943 CET	58385	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:29.702305079 CET	53	58385	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.350014925 CET	37293	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.356034994 CET	53	37293	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.358200073 CET	36400	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.366508961 CET	53	36400	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.369776964 CET	48655	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.376100063 CET	53	48655	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.379019976 CET	41200	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.385484934 CET	53	41200	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.387444019 CET	33412	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.393853903 CET	53	33412	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.396583080 CET	43196	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.402825117 CET	53	43196	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.404896975 CET	55992	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.411206961 CET	53	55992	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.414377928 CET	44121	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.420619965 CET	53	44121	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.423604012 CET	53470	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.429775000 CET	53	53470	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:30.432611942 CET	53387	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:30.439009905 CET	53	53387	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.090207100 CET	34797	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.096714973 CET	53	34797	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.098771095 CET	54877	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.104943991 CET	53	54877	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.106812954 CET	49216	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.112994909 CET	53	49216	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.114964962 CET	35474	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.121220112 CET	53	35474	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.123492956 CET	58123	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.129803896 CET	53	58123	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.131870985 CET	56653	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.138597012 CET	53	56653	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.140419960 CET	47058	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.146807909 CET	53	47058	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.148741007 CET	58280	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.155003071 CET	53	58280	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.156917095 CET	39184	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.163434029 CET	53	39184	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:31.165394068 CET	51020	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:31.171703100 CET	53	51020	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.111891031 CET	38164	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.118171930 CET	53	38164	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.119369030 CET	46521	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.125667095 CET	53	46521	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.126832008 CET	40701	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.132868052 CET	53	40701	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.134078979 CET	44534	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.140268087 CET	53	44534	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.141311884 CET	52872	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.147552967 CET	53	52872	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.148699999 CET	40798	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.154941082 CET	53	40798	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.156275988 CET	36760	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.162432909 CET	53	36760	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.165188074 CET	39837	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.171165943 CET	53	39837	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.173612118 CET	35459	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.179944038 CET	53	35459	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.182471991 CET	58554	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.188949108 CET	53	58554	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.847616911 CET	56683	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.853878021 CET	53	56683	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.854667902 CET	50063	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.860939980 CET	53	50063	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.861696005 CET	47208	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.868010044 CET	53	47208	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.868741989 CET	37216	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.875108957 CET	53	37216	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.875910997 CET	54777	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.882417917 CET	53	54777	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.883301973 CET	47976	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.889496088 CET	53	47976	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.891684055 CET	51172	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.897931099 CET	53	51172	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.898957014 CET	50172	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.905157089 CET	53	50172	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.906090975 CET	35616	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.912273884 CET	53	35616	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:32.913125992 CET	37824	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:32.919342041 CET	53	37824	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.558636904 CET	33742	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.565023899 CET	53	33742	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.565829039 CET	51518	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.572074890 CET	53	51518	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.573178053 CET	60534	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.579504013 CET	53	60534	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.581969976 CET	60426	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.588290930 CET	53	60426	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.590234041 CET	53636	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.596613884 CET	53	53636	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.598037004 CET	34294	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.604269981 CET	53	34294	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.605479002 CET	52559	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.611820936 CET	53	52559	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.613008022 CET	46516	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.618962049 CET	53	46516	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.619999886 CET	54772	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.625984907 CET	53	54772	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:33.626754999 CET	32909	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:33.633224964 CET	53	32909	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.276349068 CET	41440	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.282883883 CET	53	41440	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.283493042 CET	51560	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.289669037 CET	53	51560	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.290267944 CET	48835	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.296688080 CET	53	48835	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.297267914 CET	46483	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.303567886 CET	53	46483	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.304130077 CET	42439	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.310452938 CET	53	42439	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.311034918 CET	54562	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.317231894 CET	53	54562	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.317811966 CET	38807	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.324183941 CET	53	38807	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.324778080 CET	32821	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.331247091 CET	53	32821	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.331886053 CET	58535	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.338285923 CET	53	58535	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.338907003 CET	34281	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.345246077 CET	53	34281	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.975112915 CET	39314	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.981292009 CET	53	39314	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.981904984 CET	38070	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.988142967 CET	53	38070	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.988765955 CET	38729	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:34.994971991 CET	53	38729	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:34.995587111 CET	51183	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.002105951 CET	53	51183	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.002769947 CET	38098	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.008980036 CET	53	38098	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.009608984 CET	42230	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.015917063 CET	53	42230	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.016545057 CET	47203	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.022800922 CET	53	47203	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.024046898 CET	40675	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.030380011 CET	53	40675	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.030977011 CET	53226	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.037142038 CET	53	53226	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.037805080 CET	52840	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.044145107 CET	53	52840	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.678719044 CET	55809	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.685545921 CET	53	55809	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.686167955 CET	38469	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.693224907 CET	53	38469	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.693864107 CET	59302	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.700978041 CET	53	59302	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.701908112 CET	54997	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.708790064 CET	53	54997	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.709383965 CET	53982	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.716330051 CET	53	53982	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.716933966 CET	60060	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.723117113 CET	53	60060	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.723782063 CET	54336	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.730165958 CET	53	54336	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.730777025 CET	41665	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.737895012 CET	53	41665	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.738503933 CET	55275	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.745424986 CET	53	55275	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:35.746049881 CET	55608	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:35.753034115 CET	53	55608	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.411977053 CET	47396	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.418185949 CET	53	47396	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.418823957 CET	40426	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.425209999 CET	53	40426	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.425844908 CET	41823	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.432152987 CET	53	41823	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.432821035 CET	48811	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.439167023 CET	53	48811	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.439831972 CET	34143	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.446103096 CET	53	34143	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.446846962 CET	42997	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.453027010 CET	53	42997	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.453675032 CET	43404	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.459857941 CET	53	43404	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.460495949 CET	52724	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.466696978 CET	53	52724	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.467344999 CET	40687	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.473644018 CET	53	40687	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:36.474246025 CET	45514	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:36.480267048 CET	53	45514	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.128966093 CET	44332	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.135451078 CET	53	44332	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.136130095 CET	43687	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.142617941 CET	53	43687	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.143297911 CET	58858	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.149652958 CET	53	58858	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.150356054 CET	56656	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.156573057 CET	53	56656	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.157262087 CET	40437	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.163731098 CET	53	40437	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.164506912 CET	48387	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.170723915 CET	53	48387	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.171597958 CET	53499	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.177774906 CET	53	53499	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.178529024 CET	47549	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.184874058 CET	53	47549	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.185698986 CET	46326	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.193346024 CET	53	46326	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.194066048 CET	54544	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.200321913 CET	53	54544	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.858015060 CET	41677	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.864278078 CET	53	41677	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.866461992 CET	48766	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.872931957 CET	53	48766	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.873739004 CET	43753	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.880095959 CET	53	43753	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.880923033 CET	33086	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.887322903 CET	53	33086	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.888171911 CET	46858	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.894476891 CET	53	46858	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.895307064 CET	46330	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.901896000 CET	53	46330	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.902765036 CET	39667	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.909111023 CET	53	39667	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.909959078 CET	43706	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.916095018 CET	53	43706	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.917001963 CET	54641	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.923562050 CET	53	54641	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:37.925290108 CET	37742	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:37.931535006 CET	53	37742	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.599055052 CET	54584	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.605308056 CET	53	54584	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.608575106 CET	55606	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.615012884 CET	53	55606	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.618930101 CET	39931	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.625092983 CET	53	39931	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.627408028 CET	56813	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.633846045 CET	53	56813	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.636254072 CET	33977	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.642539024 CET	53	33977	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.643171072 CET	58608	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.649348021 CET	53	58608	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.649986029 CET	53034	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.656055927 CET	53	53034	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.656810999 CET	33960	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.663115025 CET	53	33960	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.663794041 CET	53037	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.669945955 CET	53	53037	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:38.670564890 CET	51209	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:38.676928043 CET	53	51209	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.325659990 CET	47975	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.331949949 CET	53	47975	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.332801104 CET	54889	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.339035988 CET	53	54889	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.339929104 CET	38763	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.346261978 CET	53	38763	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.347126961 CET	39017	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.353585005 CET	53	39017	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.354336023 CET	42080	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.360765934 CET	53	42080	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.361542940 CET	43486	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.368016958 CET	53	43486	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.368802071 CET	50170	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.375123024 CET	53	50170	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.375880003 CET	54992	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.382083893 CET	53	54992	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.382793903 CET	39302	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.389095068 CET	53	39302	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:39.389724016 CET	33052	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:39.396099091 CET	53	33052	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.026736975 CET	40400	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.033077002 CET	53	40400	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.033665895 CET	53245	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.039716959 CET	53	53245	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.040304899 CET	47808	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.046622038 CET	53	47808	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.047210932 CET	42489	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.053330898 CET	53	42489	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.053834915 CET	33483	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.060158968 CET	53	33483	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.060708046 CET	55349	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.067086935 CET	53	55349	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.067655087 CET	46437	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.074013948 CET	53	46437	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.074534893 CET	50575	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.080673933 CET	53	50575	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.081216097 CET	40939	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.087553978 CET	53	40939	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.088084936 CET	36353	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.094647884 CET	53	36353	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.741821051 CET	37537	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.748195887 CET	53	37537	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.748949051 CET	33496	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.755389929 CET	53	33496	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.756007910 CET	59809	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.762361050 CET	53	59809	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.762953997 CET	56167	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.769264936 CET	53	56167	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.769836903 CET	47974	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.776281118 CET	53	47974	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.776848078 CET	60896	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.783287048 CET	53	60896	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.783889055 CET	51910	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.790419102 CET	53	51910	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.791004896 CET	52179	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.797000885 CET	53	52179	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.797593117 CET	46336	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.803910017 CET	53	46336	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:40.804469109 CET	32999	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:40.810722113 CET	53	32999	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.444367886 CET	50213	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.450647116 CET	53	50213	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.451230049 CET	54619	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.457494020 CET	53	54619	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.458079100 CET	57508	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.464577913 CET	53	57508	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.465158939 CET	38845	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.471395016 CET	53	38845	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.471956968 CET	40167	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.478494883 CET	53	40167	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.479214907 CET	59479	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.485502958 CET	53	59479	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.486068964 CET	57925	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.492691994 CET	53	57925	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.493271112 CET	55566	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.499654055 CET	53	55566	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.500231028 CET	56796	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.506311893 CET	53	56796	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:41.506859064 CET	36681	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:41.513103008 CET	53	36681	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.151489019 CET	53985	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.157952070 CET	53	53985	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.158571959 CET	38852	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.164928913 CET	53	38852	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.165501118 CET	53165	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.171875000 CET	53	53165	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.172462940 CET	58222	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.178729057 CET	53	58222	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.179292917 CET	33640	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.185311079 CET	53	33640	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.185883999 CET	58826	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.192303896 CET	53	58826	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.192882061 CET	46924	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.199026108 CET	53	46924	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.199619055 CET	33803	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.205780029 CET	53	33803	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.206338882 CET	56923	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.212558031 CET	53	56923	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.213190079 CET	50404	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.219429970 CET	53	50404	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.864065886 CET	56039	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.870326996 CET	53	56039	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.870943069 CET	57487	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.877343893 CET	53	57487	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.877953053 CET	53014	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.884203911 CET	53	53014	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.884787083 CET	43999	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.891043901 CET	53	43999	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.891635895 CET	51770	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.898260117 CET	53	51770	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.898859978 CET	56619	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.905241966 CET	53	56619	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.905822039 CET	55589	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.912270069 CET	53	55589	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.912904024 CET	41857	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.919179916 CET	53	41857	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.919775009 CET	40545	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.925932884 CET	53	40545	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:42.926522017 CET	40799	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:42.932817936 CET	53	40799	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.576122999 CET	43668	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.582405090 CET	53	43668	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.583054066 CET	40297	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.589500904 CET	53	40297	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.590157986 CET	58860	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.596345901 CET	53	58860	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.596923113 CET	40645	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.603521109 CET	53	40645	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.604160070 CET	44608	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.610584021 CET	53	44608	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.611176968 CET	46496	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.617460012 CET	53	46496	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.618089914 CET	57511	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.624659061 CET	53	57511	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.625252008 CET	57345	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.631463051 CET	53	57345	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.632095098 CET	44656	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.638384104 CET	53	44656	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:43.639180899 CET	42523	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:43.645416021 CET	53	42523	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.313566923 CET	48833	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.319982052 CET	53	48833	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.320559978 CET	36666	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.327121973 CET	53	36666	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.327745914 CET	39197	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.334772110 CET	53	39197	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.335299969 CET	47511	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.341882944 CET	53	47511	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.342540026 CET	53918	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.348824978 CET	53	53918	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.349386930 CET	59288	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.355693102 CET	53	59288	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.356251001 CET	57019	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.362744093 CET	53	57019	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.363298893 CET	58773	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.369493008 CET	53	58773	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.370027065 CET	34907	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.376049995 CET	53	34907	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:44.376594067 CET	34465	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:44.383093119 CET	53	34465	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.037698984 CET	34719	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.044028997 CET	53	34719	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.044682026 CET	54672	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.050945044 CET	53	54672	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.051518917 CET	42664	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.057871103 CET	53	42664	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.058476925 CET	55604	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.064771891 CET	53	55604	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.065340042 CET	55068	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.071587086 CET	53	55068	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.072173119 CET	38100	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.079052925 CET	53	38100	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.079605103 CET	45909	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.085865021 CET	53	45909	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.086431980 CET	51313	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.092699051 CET	53	51313	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.093283892 CET	50914	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.099495888 CET	53	50914	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.100066900 CET	57228	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.106208086 CET	53	57228	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.732825994 CET	51120	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.739128113 CET	53	51120	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.739718914 CET	39393	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.746052027 CET	53	39393	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.746694088 CET	41540	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.752733946 CET	53	41540	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.753292084 CET	49399	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.759588003 CET	53	49399	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.760164976 CET	42098	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.766403913 CET	53	42098	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.766985893 CET	44365	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.773222923 CET	53	44365	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.773802996 CET	56956	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.779881001 CET	53	56956	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.780440092 CET	42526	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.786710024 CET	53	42526	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.787331104 CET	57767	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.793570995 CET	53	57767	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:45.794147015 CET	34286	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:45.800592899 CET	53	34286	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.457995892 CET	40093	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.464145899 CET	53	40093	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.464771032 CET	37373	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.472382069 CET	53	37373	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.473042965 CET	43570	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.480602026 CET	53	43570	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.481168985 CET	45007	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.488797903 CET	53	45007	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.489363909 CET	34514	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.495661020 CET	53	34514	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.496300936 CET	52324	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.503510952 CET	53	52324	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.504116058 CET	33224	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.510580063 CET	53	33224	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.511112928 CET	54477	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.517363071 CET	53	54477	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.517904997 CET	50578	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.524508953 CET	53	50578	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:46.525068045 CET	52101	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:46.531428099 CET	53	52101	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.164825916 CET	48964	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.171020031 CET	53	48964	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.171677113 CET	45242	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.177982092 CET	53	45242	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.178622007 CET	45050	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.184750080 CET	53	45050	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.185398102 CET	58898	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.191519976 CET	53	58898	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.192101002 CET	38098	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.198436022 CET	53	38098	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.199057102 CET	35720	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.205997944 CET	53	35720	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.206598997 CET	47540	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.213692904 CET	53	47540	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.214257956 CET	44828	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.220880032 CET	53	44828	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.221451998 CET	37552	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.227926970 CET	53	37552	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.228498936 CET	41021	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.234663963 CET	53	41021	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.893050909 CET	48478	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.899323940 CET	53	48478	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.899921894 CET	36845	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.905992031 CET	53	36845	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.906569958 CET	51406	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.912971973 CET	53	51406	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.913659096 CET	44815	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.920099974 CET	53	44815	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.920710087 CET	59126	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.926856041 CET	53	59126	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.927442074 CET	34058	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.933851957 CET	53	34058	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.934513092 CET	56564	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.940589905 CET	53	56564	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.941179037 CET	40613	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.947371960 CET	53	40613	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.947978973 CET	34700	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.954365015 CET	53	34700	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:47.954929113 CET	54899	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:47.961139917 CET	53	54899	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.601464987 CET	39638	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.607789993 CET	53	39638	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.608366013 CET	42106	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.614845037 CET	53	42106	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.615417004 CET	55412	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.621613979 CET	53	55412	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.622176886 CET	51123	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.628382921 CET	53	51123	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.628922939 CET	59829	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.635231018 CET	53	59829	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.635803938 CET	46315	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.641999960 CET	53	46315	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.642606974 CET	33846	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.648633003 CET	53	33846	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.649224043 CET	60961	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.655628920 CET	53	60961	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.656164885 CET	40284	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.662461042 CET	53	40284	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:48.662971973 CET	59666	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:48.669054985 CET	53	59666	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.307581902 CET	56500	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.314064980 CET	53	56500	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.314688921 CET	48504	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.321019888 CET	53	48504	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.321587086 CET	56846	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.327869892 CET	53	56846	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.328454971 CET	40509	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.334676981 CET	53	40509	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.335263014 CET	55858	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.341547012 CET	53	55858	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.342312098 CET	56721	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.348587990 CET	53	56721	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.349168062 CET	41171	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.355365038 CET	53	41171	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.355967999 CET	48257	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.362365961 CET	53	48257	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.362917900 CET	57039	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.369170904 CET	53	57039	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:49.369755030 CET	45003	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:49.375866890 CET	53	45003	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.018760920 CET	41715	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.024931908 CET	53	41715	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.025542974 CET	58963	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.032075882 CET	53	58963	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.032717943 CET	47959	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.039006948 CET	53	47959	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.039602995 CET	52277	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.045945883 CET	53	52277	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.046578884 CET	35709	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.053055048 CET	53	35709	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.053626060 CET	54624	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.059994936 CET	53	54624	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.060509920 CET	60831	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.066797972 CET	53	60831	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.067354918 CET	46670	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.073669910 CET	53	46670	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.074203968 CET	37996	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.080404997 CET	53	37996	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.080960035 CET	44709	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.087220907 CET	53	44709	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.717660904 CET	48512	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:50.724322081 CET	53	48512	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:50.724875927 CET	32888	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.136149883 CET	53	32888	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.136878014 CET	47704	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.144268036 CET	53	47704	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.144982100 CET	47112	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.151251078 CET	53	47112	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.151849031 CET	48379	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.158093929 CET	53	48379	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.158673048 CET	59623	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.165318966 CET	53	59623	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.165890932 CET	40410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.173573971 CET	53	40410	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.174151897 CET	44184	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.181818962 CET	53	44184	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.182487011 CET	44531	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.189965010 CET	53	44531	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.190572023 CET	41496	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.198127031 CET	53	41496	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.849025011 CET	42033	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.855084896 CET	53	42033	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.855695009 CET	42014	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.861943007 CET	53	42014	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.862498045 CET	40643	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.868716002 CET	53	40643	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.869271994 CET	54005	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.875540018 CET	53	54005	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.876079082 CET	41364	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.882256985 CET	53	41364	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.882808924 CET	60707	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.889275074 CET	53	60707	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.890058041 CET	49014	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.896301031 CET	53	49014	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.896894932 CET	51823	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.903040886 CET	53	51823	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.903624058 CET	52343	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.910799980 CET	53	52343	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:51.911346912 CET	47777	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:51.918299913 CET	53	47777	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.551301003 CET	51153	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.558758974 CET	53	51153	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.559354067 CET	57430	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.567552090 CET	53	57430	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.568166018 CET	39886	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.574390888 CET	53	39886	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.574959040 CET	55747	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.581212044 CET	53	55747	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.581792116 CET	37290	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.588232040 CET	53	37290	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.588792086 CET	33143	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.595000982 CET	53	33143	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.595623016 CET	36143	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.603976965 CET	53	36143	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.604594946 CET	38777	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.612835884 CET	53	38777	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.613475084 CET	44497	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.619708061 CET	53	44497	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:52.620273113 CET	58390	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:52.626492977 CET	53	58390	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.416600943 CET	60364	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.422882080 CET	53	60364	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.423511982 CET	52061	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.429879904 CET	53	52061	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.430490971 CET	56335	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.436985016 CET	53	56335	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.437567949 CET	44554	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.443969965 CET	53	44554	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.444581985 CET	59556	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.451050043 CET	53	59556	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.451648951 CET	38360	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.458756924 CET	53	38360	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.459369898 CET	58209	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.465599060 CET	53	58209	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.466185093 CET	55112	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.472441912 CET	53	55112	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.473031044 CET	59331	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.479525089 CET	53	59331	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:53.480113983 CET	52838	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:53.486366034 CET	53	52838	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.118405104 CET	41518	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.124447107 CET	53	41518	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.125085115 CET	55954	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.131253004 CET	53	55954	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.131896019 CET	53660	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.138147116 CET	53	53660	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.138722897 CET	34344	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.144958973 CET	53	34344	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.145528078 CET	42566	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.151824951 CET	53	42566	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.152405977 CET	34721	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.158807993 CET	53	34721	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.159429073 CET	60806	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.165549994 CET	53	60806	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.166138887 CET	42910	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.172425985 CET	53	42910	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.173002958 CET	46958	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.179347038 CET	53	46958	8.8.8.8	192.168.2.14
Jan 7, 2025 01:23:54.179908991 CET	44081	53	192.168.2.14	8.8.8.8
Jan 7, 2025 01:23:54.186048985 CET	53	44081	8.8.8.8	192.168.2.14

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 7, 2025 01:22:01.712507963 CET	192.168.2.14	192.168.2.1	827a	(Port unreachable)	Destination Unreachable
Jan 7, 2025 01:23:21.726134062 CET	192.168.2.14	192.168.2.1	827a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 01:21:51.998676062 CET	192.168.2.14	8.8.8.8	0xf6a2	Standard query (0)	fingwi.cardiacpure.ru	A (IP address)	IN (0x0001)	false
Jan 7, 2025 01:21:52.006931067 CET	192.168.2.14	8.8.8.8	0x1d7f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.023432970 CET	192.168.2.14	8.8.8.8	0x1d7f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.039035082 CET	192.168.2.14	8.8.8.8	0x1d7f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.047358990 CET	192.168.2.14	8.8.8.8	0x1d7f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.055615902 CET	192.168.2.14	8.8.8.8	0x1d7f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.744976044 CET	192.168.2.14	8.8.8.8	0x4b21	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.752867937 CET	192.168.2.14	8.8.8.8	0x4b21	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.763415098 CET	192.168.2.14	8.8.8.8	0x4b21	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.773225069 CET	192.168.2.14	8.8.8.8	0x4b21	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:52.782980919 CET	192.168.2.14	8.8.8.8	0x4b21	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	416	false
Jan 7, 2025 01:21:53.528464079 CET	192.168.2.14	8.8.8.8	0x5a4f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	417	false
Jan 7, 2025 01:21:53.539210081 CET	192.168.2.14	8.8.8.8	0x5a4f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	417	false
Jan 7, 2025 01:21:53.551369905 CET	192.168.2.14	8.8.8.8	0x5a4f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	417	false
Jan 7, 2025 01:21:53.561784983 CET	192.168.2.14	8.8.8.8	0x5a4f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	417	false
Jan 7, 2025 01:21:53.572921038 CET	192.168.2.14	8.8.8.8	0x5a4f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	417	false
Jan 7, 2025 01:21:54.276201010 CET	192.168.2.14	8.8.8.8	0xa57c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	418	false
Jan 7, 2025 01:21:54.285285950 CET	192.168.2.14	8.8.8.8	0xa57c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	418	false
Jan 7, 2025 01:21:54.293786049 CET	192.168.2.14	8.8.8.8	0xa57c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	418	false
Jan 7, 2025 01:21:54.302202940 CET	192.168.2.14	8.8.8.8	0xa57c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	418	false
Jan 7, 2025 01:21:54.311043978 CET	192.168.2.14	8.8.8.8	0xa57c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	418	false
Jan 7, 2025 01:21:55.015124083 CET	192.168.2.14	8.8.8.8	0x5b4e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.023921013 CET	192.168.2.14	8.8.8.8	0x5b4e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.032587051 CET	192.168.2.14	8.8.8.8	0x5b4e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.041279078 CET	192.168.2.14	8.8.8.8	0x5b4e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.049793959 CET	192.168.2.14	8.8.8.8	0x5b4e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.761019945 CET	192.168.2.14	8.8.8.8	0xd6bf	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.770301104 CET	192.168.2.14	8.8.8.8	0xd6bf	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.778897047 CET	192.168.2.14	8.8.8.8	0xd6bf	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.790385962 CET	192.168.2.14	8.8.8.8	0xd6bf	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:55.799479961 CET	192.168.2.14	8.8.8.8	0xd6bf	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	419	false
Jan 7, 2025 01:21:56.494910955 CET	192.168.2.14	8.8.8.8	0xdbcb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	420	false
Jan 7, 2025 01:21:56.502394915 CET	192.168.2.14	8.8.8.8	0xdbcb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	420	false
Jan 7, 2025 01:21:56.510059118 CET	192.168.2.14	8.8.8.8	0xdbcb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	420	false
Jan 7, 2025 01:21:56.518021107 CET	192.168.2.14	8.8.8.8	0xdbcb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	420	false
Jan 7, 2025 01:21:56.525731087 CET	192.168.2.14	8.8.8.8	0xdbcb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	420	false
Jan 7, 2025 01:21:57.240101099 CET	192.168.2.14	8.8.8.8	0xa9b0	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	421	false
Jan 7, 2025 01:21:57.250902891 CET	192.168.2.14	8.8.8.8	0xa9b0	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	421	false
Jan 7, 2025 01:21:57.261219025 CET	192.168.2.14	8.8.8.8	0xa9b0	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	421	false
Jan 7, 2025 01:21:57.271996021 CET	192.168.2.14	8.8.8.8	0xa9b0	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	421	false
Jan 7, 2025 01:21:57.282596111 CET	192.168.2.14	8.8.8.8	0xa9b0	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	421	false
Jan 7, 2025 01:21:57.990156889 CET	192.168.2.14	8.8.8.8	0xedc7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	421	false
Jan 7, 2025 01:21:57.999694109 CET	192.168.2.14	8.8.8.8	0xedc7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.009295940 CET	192.168.2.14	8.8.8.8	0xedc7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.018635988 CET	192.168.2.14	8.8.8.8	0xedc7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.027605057 CET	192.168.2.14	8.8.8.8	0xedc7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.743662119 CET	192.168.2.14	8.8.8.8	0x178b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.753170013 CET	192.168.2.14	8.8.8.8	0x178b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.761455059 CET	192.168.2.14	8.8.8.8	0x178b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.770062923 CET	192.168.2.14	8.8.8.8	0x178b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:58.778549910 CET	192.168.2.14	8.8.8.8	0x178b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	422	false
Jan 7, 2025 01:21:59.473299980 CET	192.168.2.14	8.8.8.8	0xb2df	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	423	false
Jan 7, 2025 01:21:59.483735085 CET	192.168.2.14	8.8.8.8	0xb2df	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	423	false
Jan 7, 2025 01:21:59.493603945 CET	192.168.2.14	8.8.8.8	0xb2df	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	423	false
Jan 7, 2025 01:21:59.503573895 CET	192.168.2.14	8.8.8.8	0xb2df	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	423	false
Jan 7, 2025 01:21:59.513957024 CET	192.168.2.14	8.8.8.8	0xb2df	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	423	false
Jan 7, 2025 01:22:00.196827888 CET	192.168.2.14	8.8.8.8	0x3188	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.205233097 CET	192.168.2.14	8.8.8.8	0x3188	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.214131117 CET	192.168.2.14	8.8.8.8	0x3188	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.222393990 CET	192.168.2.14	8.8.8.8	0x3188	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.230669975 CET	192.168.2.14	8.8.8.8	0x3188	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.917249918 CET	192.168.2.14	8.8.8.8	0xdd7a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.925818920 CET	192.168.2.14	8.8.8.8	0xdd7a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.934374094 CET	192.168.2.14	8.8.8.8	0xdd7a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.942513943 CET	192.168.2.14	8.8.8.8	0xdd7a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:00.950218916 CET	192.168.2.14	8.8.8.8	0xdd7a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	424	false
Jan 7, 2025 01:22:01.638592005 CET	192.168.2.14	8.8.8.8	0xe6a6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	425	false
Jan 7, 2025 01:22:01.647186995 CET	192.168.2.14	8.8.8.8	0xe6a6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	425	false
Jan 7, 2025 01:22:01.655561924 CET	192.168.2.14	8.8.8.8	0xe6a6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	425	false
Jan 7, 2025 01:22:01.663913965 CET	192.168.2.14	8.8.8.8	0xe6a6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	425	false
Jan 7, 2025 01:22:01.672352076 CET	192.168.2.14	8.8.8.8	0xe6a6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	425	false
Jan 7, 2025 01:22:02.384265900 CET	192.168.2.14	8.8.8.8	0xdff1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	426	false
Jan 7, 2025 01:22:02.392638922 CET	192.168.2.14	8.8.8.8	0xdff1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	426	false
Jan 7, 2025 01:22:02.401281118 CET	192.168.2.14	8.8.8.8	0xdff1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	426	false
Jan 7, 2025 01:22:02.409365892 CET	192.168.2.14	8.8.8.8	0xdff1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	426	false
Jan 7, 2025 01:22:02.418226957 CET	192.168.2.14	8.8.8.8	0xdff1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	426	false
Jan 7, 2025 01:22:03.107913017 CET	192.168.2.14	8.8.8.8	0x9643	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.115735054 CET	192.168.2.14	8.8.8.8	0x9643	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.123593092 CET	192.168.2.14	8.8.8.8	0x9643	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.131829023 CET	192.168.2.14	8.8.8.8	0x9643	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.139019012 CET	192.168.2.14	8.8.8.8	0x9643	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.838838100 CET	192.168.2.14	8.8.8.8	0x818b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.846092939 CET	192.168.2.14	8.8.8.8	0x818b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.853254080 CET	192.168.2.14	8.8.8.8	0x818b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.860258102 CET	192.168.2.14	8.8.8.8	0x818b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:03.867290974 CET	192.168.2.14	8.8.8.8	0x818b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	427	false
Jan 7, 2025 01:22:04.545826912 CET	192.168.2.14	8.8.8.8	0xd7fd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	428	false
Jan 7, 2025 01:22:04.552649975 CET	192.168.2.14	8.8.8.8	0xd7fd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	428	false
Jan 7, 2025 01:22:04.559441090 CET	192.168.2.14	8.8.8.8	0xd7fd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	428	false
Jan 7, 2025 01:22:04.566437960 CET	192.168.2.14	8.8.8.8	0xd7fd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	428	false
Jan 7, 2025 01:22:04.573399067 CET	192.168.2.14	8.8.8.8	0xd7fd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	428	false
Jan 7, 2025 01:23:02.051642895 CET	192.168.2.14	8.8.8.8	0xda81	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	486	false
Jan 7, 2025 01:23:02.096935987 CET	192.168.2.14	8.8.8.8	0xda81	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	486	false
Jan 7, 2025 01:23:02.125736952 CET	192.168.2.14	8.8.8.8	0xda81	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	486	false
Jan 7, 2025 01:23:02.154145956 CET	192.168.2.14	8.8.8.8	0xda81	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	486	false
Jan 7, 2025 01:23:02.188139915 CET	192.168.2.14	8.8.8.8	0xda81	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	486	false
Jan 7, 2025 01:23:03.018743992 CET	192.168.2.14	8.8.8.8	0xc144	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.051631927 CET	192.168.2.14	8.8.8.8	0xc144	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.079957962 CET	192.168.2.14	8.8.8.8	0xc144	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.108633041 CET	192.168.2.14	8.8.8.8	0xc144	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.137726068 CET	192.168.2.14	8.8.8.8	0xc144	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.930840015 CET	192.168.2.14	8.8.8.8	0x5bc3	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.956769943 CET	192.168.2.14	8.8.8.8	0x5bc3	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:03.986737967 CET	192.168.2.14	8.8.8.8	0x5bc3	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	487	false
Jan 7, 2025 01:23:04.012687922 CET	192.168.2.14	8.8.8.8	0x5bc3	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	488	false
Jan 7, 2025 01:23:04.047369003 CET	192.168.2.14	8.8.8.8	0x5bc3	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	488	false
Jan 7, 2025 01:23:05.059465885 CET	192.168.2.14	8.8.8.8	0xb919	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	489	false
Jan 7, 2025 01:23:05.076512098 CET	192.168.2.14	8.8.8.8	0xb919	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	489	false
Jan 7, 2025 01:23:05.101917028 CET	192.168.2.14	8.8.8.8	0xb919	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	489	false
Jan 7, 2025 01:23:05.147660017 CET	192.168.2.14	8.8.8.8	0xb919	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	489	false
Jan 7, 2025 01:23:05.190551043 CET	192.168.2.14	8.8.8.8	0xb919	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	489	false
Jan 7, 2025 01:23:06.016405106 CET	192.168.2.14	8.8.8.8	0x9c9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	490	false
Jan 7, 2025 01:23:06.042175055 CET	192.168.2.14	8.8.8.8	0x9c9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	490	false
Jan 7, 2025 01:23:06.066692114 CET	192.168.2.14	8.8.8.8	0x9c9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	490	false
Jan 7, 2025 01:23:06.092135906 CET	192.168.2.14	8.8.8.8	0x9c9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	490	false
Jan 7, 2025 01:23:06.119230986 CET	192.168.2.14	8.8.8.8	0x9c9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	490	false
Jan 7, 2025 01:23:06.963985920 CET	192.168.2.14	8.8.8.8	0xb4a5	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	490	false
Jan 7, 2025 01:23:07.000298977 CET	192.168.2.14	8.8.8.8	0xb4a5	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.044595957 CET	192.168.2.14	8.8.8.8	0xb4a5	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.079150915 CET	192.168.2.14	8.8.8.8	0xb4a5	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.105803013 CET	192.168.2.14	8.8.8.8	0xb4a5	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.940679073 CET	192.168.2.14	8.8.8.8	0x913f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.962413073 CET	192.168.2.14	8.8.8.8	0x913f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.980259895 CET	192.168.2.14	8.8.8.8	0x913f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	491	false
Jan 7, 2025 01:23:07.998759031 CET	192.168.2.14	8.8.8.8	0x913f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:08.018815994 CET	192.168.2.14	8.8.8.8	0x913f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:08.803570032 CET	192.168.2.14	8.8.8.8	0xa145	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:08.823462963 CET	192.168.2.14	8.8.8.8	0xa145	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:08.841746092 CET	192.168.2.14	8.8.8.8	0xa145	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:08.860955954 CET	192.168.2.14	8.8.8.8	0xa145	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:08.881457090 CET	192.168.2.14	8.8.8.8	0xa145	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	492	false
Jan 7, 2025 01:23:09.703602076 CET	192.168.2.14	8.8.8.8	0xe364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	493	false
Jan 7, 2025 01:23:09.724634886 CET	192.168.2.14	8.8.8.8	0xe364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	493	false
Jan 7, 2025 01:23:09.743983984 CET	192.168.2.14	8.8.8.8	0xe364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	493	false
Jan 7, 2025 01:23:09.764816999 CET	192.168.2.14	8.8.8.8	0xe364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	493	false
Jan 7, 2025 01:23:09.784893036 CET	192.168.2.14	8.8.8.8	0xe364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	493	false
Jan 7, 2025 01:23:10.641069889 CET	192.168.2.14	8.8.8.8	0xc97	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	494	false
Jan 7, 2025 01:23:10.671847105 CET	192.168.2.14	8.8.8.8	0xc97	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	494	false
Jan 7, 2025 01:23:10.710012913 CET	192.168.2.14	8.8.8.8	0xc97	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	494	false
Jan 7, 2025 01:23:10.753688097 CET	192.168.2.14	8.8.8.8	0xc97	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	494	false
Jan 7, 2025 01:23:10.777132034 CET	192.168.2.14	8.8.8.8	0xc97	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	494	false
Jan 7, 2025 01:23:11.575637102 CET	192.168.2.14	8.8.8.8	0x610a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	495	false
Jan 7, 2025 01:23:11.590724945 CET	192.168.2.14	8.8.8.8	0x610a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	495	false
Jan 7, 2025 01:23:11.607574940 CET	192.168.2.14	8.8.8.8	0x610a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	495	false
Jan 7, 2025 01:23:11.631619930 CET	192.168.2.14	8.8.8.8	0x610a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	495	false
Jan 7, 2025 01:23:11.661664009 CET	192.168.2.14	8.8.8.8	0x610a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	495	false
Jan 7, 2025 01:23:12.444881916 CET	192.168.2.14	8.8.8.8	0x7d11	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	496	false
Jan 7, 2025 01:23:12.462846994 CET	192.168.2.14	8.8.8.8	0x7d11	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	496	false
Jan 7, 2025 01:23:12.481072903 CET	192.168.2.14	8.8.8.8	0x7d11	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	496	false
Jan 7, 2025 01:23:12.503186941 CET	192.168.2.14	8.8.8.8	0x7d11	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	496	false
Jan 7, 2025 01:23:12.526890993 CET	192.168.2.14	8.8.8.8	0x7d11	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	496	false
Jan 7, 2025 01:23:13.400986910 CET	192.168.2.14	8.8.8.8	0xe7c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	497	false
Jan 7, 2025 01:23:13.428194046 CET	192.168.2.14	8.8.8.8	0xe7c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	497	false
Jan 7, 2025 01:23:13.457536936 CET	192.168.2.14	8.8.8.8	0xe7c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	497	false
Jan 7, 2025 01:23:13.479443073 CET	192.168.2.14	8.8.8.8	0xe7c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	497	false
Jan 7, 2025 01:23:13.494476080 CET	192.168.2.14	8.8.8.8	0xe7c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	497	false
Jan 7, 2025 01:23:14.356234074 CET	192.168.2.14	8.8.8.8	0xba96	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	498	false
Jan 7, 2025 01:23:14.370533943 CET	192.168.2.14	8.8.8.8	0xba96	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	498	false
Jan 7, 2025 01:23:14.384875059 CET	192.168.2.14	8.8.8.8	0xba96	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	498	false
Jan 7, 2025 01:23:14.397821903 CET	192.168.2.14	8.8.8.8	0xba96	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	498	false
Jan 7, 2025 01:23:14.417228937 CET	192.168.2.14	8.8.8.8	0xba96	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	498	false
Jan 7, 2025 01:23:15.286792040 CET	192.168.2.14	8.8.8.8	0x9795	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	499	false
Jan 7, 2025 01:23:15.310183048 CET	192.168.2.14	8.8.8.8	0x9795	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	499	false
Jan 7, 2025 01:23:15.329679966 CET	192.168.2.14	8.8.8.8	0x9795	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	499	false
Jan 7, 2025 01:23:15.347296000 CET	192.168.2.14	8.8.8.8	0x9795	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	499	false
Jan 7, 2025 01:23:15.365271091 CET	192.168.2.14	8.8.8.8	0x9795	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	499	false
Jan 7, 2025 01:23:16.139456987 CET	192.168.2.14	8.8.8.8	0x760e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.168889999 CET	192.168.2.14	8.8.8.8	0x760e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.189022064 CET	192.168.2.14	8.8.8.8	0x760e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.209778070 CET	192.168.2.14	8.8.8.8	0x760e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.231564045 CET	192.168.2.14	8.8.8.8	0x760e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.961671114 CET	192.168.2.14	8.8.8.8	0x7ae4	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.978737116 CET	192.168.2.14	8.8.8.8	0x7ae4	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	500	false
Jan 7, 2025 01:23:16.998740911 CET	192.168.2.14	8.8.8.8	0x7ae4	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.015806913 CET	192.168.2.14	8.8.8.8	0x7ae4	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.031882048 CET	192.168.2.14	8.8.8.8	0x7ae4	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.752885103 CET	192.168.2.14	8.8.8.8	0x4770	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.766588926 CET	192.168.2.14	8.8.8.8	0x4770	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.780320883 CET	192.168.2.14	8.8.8.8	0x4770	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.798209906 CET	192.168.2.14	8.8.8.8	0x4770	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:17.812298059 CET	192.168.2.14	8.8.8.8	0x4770	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	501	false
Jan 7, 2025 01:23:18.580849886 CET	192.168.2.14	8.8.8.8	0x4a2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	502	false
Jan 7, 2025 01:23:18.595014095 CET	192.168.2.14	8.8.8.8	0x4a2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	502	false
Jan 7, 2025 01:23:18.609828949 CET	192.168.2.14	8.8.8.8	0x4a2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	502	false
Jan 7, 2025 01:23:18.626025915 CET	192.168.2.14	8.8.8.8	0x4a2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	502	false
Jan 7, 2025 01:23:18.643178940 CET	192.168.2.14	8.8.8.8	0x4a2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	502	false
Jan 7, 2025 01:23:19.407803059 CET	192.168.2.14	8.8.8.8	0xfc95	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	503	false
Jan 7, 2025 01:23:19.424483061 CET	192.168.2.14	8.8.8.8	0xfc95	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	503	false
Jan 7, 2025 01:23:19.444093943 CET	192.168.2.14	8.8.8.8	0xfc95	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	503	false
Jan 7, 2025 01:23:19.460468054 CET	192.168.2.14	8.8.8.8	0xfc95	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	503	false
Jan 7, 2025 01:23:19.477221012 CET	192.168.2.14	8.8.8.8	0xfc95	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	503	false
Jan 7, 2025 01:23:20.244524956 CET	192.168.2.14	8.8.8.8	0x166c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	504	false
Jan 7, 2025 01:23:20.257395029 CET	192.168.2.14	8.8.8.8	0x166c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	504	false
Jan 7, 2025 01:23:20.270375013 CET	192.168.2.14	8.8.8.8	0x166c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	504	false
Jan 7, 2025 01:23:20.287235022 CET	192.168.2.14	8.8.8.8	0x166c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	504	false
Jan 7, 2025 01:23:20.304778099 CET	192.168.2.14	8.8.8.8	0x166c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	504	false
Jan 7, 2025 01:23:21.120963097 CET	192.168.2.14	8.8.8.8	0x9c1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.136575937 CET	192.168.2.14	8.8.8.8	0x9c1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.152570009 CET	192.168.2.14	8.8.8.8	0x9c1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.167996883 CET	192.168.2.14	8.8.8.8	0x9c1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.183053970 CET	192.168.2.14	8.8.8.8	0x9c1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.939476013 CET	192.168.2.14	8.8.8.8	0xe93a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.953432083 CET	192.168.2.14	8.8.8.8	0xe93a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.967556953 CET	192.168.2.14	8.8.8.8	0xe93a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.980993986 CET	192.168.2.14	8.8.8.8	0xe93a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	505	false
Jan 7, 2025 01:23:21.995482922 CET	192.168.2.14	8.8.8.8	0xe93a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	506	false
Jan 7, 2025 01:23:22.800401926 CET	192.168.2.14	8.8.8.8	0xed3b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	506	false
Jan 7, 2025 01:23:22.812663078 CET	192.168.2.14	8.8.8.8	0xed3b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	506	false
Jan 7, 2025 01:23:22.827318907 CET	192.168.2.14	8.8.8.8	0xed3b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	506	false
Jan 7, 2025 01:23:22.840215921 CET	192.168.2.14	8.8.8.8	0xed3b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	506	false
Jan 7, 2025 01:23:22.852988005 CET	192.168.2.14	8.8.8.8	0xed3b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	506	false
Jan 7, 2025 01:23:23.597424030 CET	192.168.2.14	8.8.8.8	0x1bcc	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	507	false
Jan 7, 2025 01:23:23.612895012 CET	192.168.2.14	8.8.8.8	0x1bcc	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	507	false
Jan 7, 2025 01:23:23.629113913 CET	192.168.2.14	8.8.8.8	0x1bcc	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	507	false
Jan 7, 2025 01:23:23.644319057 CET	192.168.2.14	8.8.8.8	0x1bcc	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	507	false
Jan 7, 2025 01:23:23.659429073 CET	192.168.2.14	8.8.8.8	0x1bcc	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	507	false
Jan 7, 2025 01:23:24.396187067 CET	192.168.2.14	8.8.8.8	0x8c04	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	508	false
Jan 7, 2025 01:23:24.408313036 CET	192.168.2.14	8.8.8.8	0x8c04	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	508	false
Jan 7, 2025 01:23:24.419939995 CET	192.168.2.14	8.8.8.8	0x8c04	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	508	false
Jan 7, 2025 01:23:24.433337927 CET	192.168.2.14	8.8.8.8	0x8c04	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	508	false
Jan 7, 2025 01:23:24.446033955 CET	192.168.2.14	8.8.8.8	0x8c04	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	508	false
Jan 7, 2025 01:23:25.171541929 CET	192.168.2.14	8.8.8.8	0x472b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.182239056 CET	192.168.2.14	8.8.8.8	0x472b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.193504095 CET	192.168.2.14	8.8.8.8	0x472b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.204150915 CET	192.168.2.14	8.8.8.8	0x472b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.215967894 CET	192.168.2.14	8.8.8.8	0x472b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.946480989 CET	192.168.2.14	8.8.8.8	0xcfbb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.958421946 CET	192.168.2.14	8.8.8.8	0xcfbb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.970199108 CET	192.168.2.14	8.8.8.8	0xcfbb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.982635021 CET	192.168.2.14	8.8.8.8	0xcfbb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	509	false
Jan 7, 2025 01:23:25.995450020 CET	192.168.2.14	8.8.8.8	0xcfbb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	510	false
Jan 7, 2025 01:23:26.703445911 CET	192.168.2.14	8.8.8.8	0x2061	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	510	false
Jan 7, 2025 01:23:26.713944912 CET	192.168.2.14	8.8.8.8	0x2061	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	510	false
Jan 7, 2025 01:23:26.724468946 CET	192.168.2.14	8.8.8.8	0x2061	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	510	false
Jan 7, 2025 01:23:26.734354973 CET	192.168.2.14	8.8.8.8	0x2061	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	510	false
Jan 7, 2025 01:23:26.744586945 CET	192.168.2.14	8.8.8.8	0x2061	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	510	false
Jan 7, 2025 01:23:27.434210062 CET	192.168.2.14	8.8.8.8	0x9364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	511	false
Jan 7, 2025 01:23:27.444606066 CET	192.168.2.14	8.8.8.8	0x9364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	511	false
Jan 7, 2025 01:23:27.454965115 CET	192.168.2.14	8.8.8.8	0x9364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	511	false
Jan 7, 2025 01:23:27.465059996 CET	192.168.2.14	8.8.8.8	0x9364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	511	false
Jan 7, 2025 01:23:27.474869013 CET	192.168.2.14	8.8.8.8	0x9364	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	511	false
Jan 7, 2025 01:23:28.183563948 CET	192.168.2.14	8.8.8.8	0x90f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.194067955 CET	192.168.2.14	8.8.8.8	0x90f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.204864979 CET	192.168.2.14	8.8.8.8	0x90f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.215331078 CET	192.168.2.14	8.8.8.8	0x90f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.225819111 CET	192.168.2.14	8.8.8.8	0x90f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.913537025 CET	192.168.2.14	8.8.8.8	0x1e00	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.923048973 CET	192.168.2.14	8.8.8.8	0x1e00	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.932075977 CET	192.168.2.14	8.8.8.8	0x1e00	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.941468000 CET	192.168.2.14	8.8.8.8	0x1e00	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:28.950673103 CET	192.168.2.14	8.8.8.8	0x1e00	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	256	false
Jan 7, 2025 01:23:29.656774998 CET	192.168.2.14	8.8.8.8	0xab4d	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	257	false
Jan 7, 2025 01:23:29.666081905 CET	192.168.2.14	8.8.8.8	0xab4d	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	257	false
Jan 7, 2025 01:23:29.675487041 CET	192.168.2.14	8.8.8.8	0xab4d	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	257	false
Jan 7, 2025 01:23:29.685621023 CET	192.168.2.14	8.8.8.8	0xab4d	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	257	false
Jan 7, 2025 01:23:29.696095943 CET	192.168.2.14	8.8.8.8	0xab4d	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	257	false
Jan 7, 2025 01:23:30.396583080 CET	192.168.2.14	8.8.8.8	0xfebd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	258	false
Jan 7, 2025 01:23:30.404896975 CET	192.168.2.14	8.8.8.8	0xfebd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	258	false
Jan 7, 2025 01:23:30.414377928 CET	192.168.2.14	8.8.8.8	0xfebd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	258	false
Jan 7, 2025 01:23:30.423604012 CET	192.168.2.14	8.8.8.8	0xfebd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	258	false
Jan 7, 2025 01:23:30.432611942 CET	192.168.2.14	8.8.8.8	0xfebd	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	258	false
Jan 7, 2025 01:23:31.131870985 CET	192.168.2.14	8.8.8.8	0x21e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	259	false
Jan 7, 2025 01:23:31.140419960 CET	192.168.2.14	8.8.8.8	0x21e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	259	false
Jan 7, 2025 01:23:31.148741007 CET	192.168.2.14	8.8.8.8	0x21e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	259	false
Jan 7, 2025 01:23:31.156917095 CET	192.168.2.14	8.8.8.8	0x21e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	259	false
Jan 7, 2025 01:23:31.165394068 CET	192.168.2.14	8.8.8.8	0x21e	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	259	false
Jan 7, 2025 01:23:32.148699999 CET	192.168.2.14	8.8.8.8	0x3014	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.156275988 CET	192.168.2.14	8.8.8.8	0x3014	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.165188074 CET	192.168.2.14	8.8.8.8	0x3014	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.173612118 CET	192.168.2.14	8.8.8.8	0x3014	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.182471991 CET	192.168.2.14	8.8.8.8	0x3014	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.883301973 CET	192.168.2.14	8.8.8.8	0x5063	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.891684055 CET	192.168.2.14	8.8.8.8	0x5063	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.898957014 CET	192.168.2.14	8.8.8.8	0x5063	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.906090975 CET	192.168.2.14	8.8.8.8	0x5063	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:32.913125992 CET	192.168.2.14	8.8.8.8	0x5063	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	260	false
Jan 7, 2025 01:23:33.598037004 CET	192.168.2.14	8.8.8.8	0xf7c2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	261	false
Jan 7, 2025 01:23:33.605479002 CET	192.168.2.14	8.8.8.8	0xf7c2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	261	false
Jan 7, 2025 01:23:33.613008022 CET	192.168.2.14	8.8.8.8	0xf7c2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	261	false
Jan 7, 2025 01:23:33.619999886 CET	192.168.2.14	8.8.8.8	0xf7c2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	261	false
Jan 7, 2025 01:23:33.626754999 CET	192.168.2.14	8.8.8.8	0xf7c2	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	261	false
Jan 7, 2025 01:23:34.311034918 CET	192.168.2.14	8.8.8.8	0xe0f7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	262	false
Jan 7, 2025 01:23:34.317811966 CET	192.168.2.14	8.8.8.8	0xe0f7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	262	false
Jan 7, 2025 01:23:34.324778080 CET	192.168.2.14	8.8.8.8	0xe0f7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	262	false
Jan 7, 2025 01:23:34.331886053 CET	192.168.2.14	8.8.8.8	0xe0f7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	262	false
Jan 7, 2025 01:23:34.338907003 CET	192.168.2.14	8.8.8.8	0xe0f7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	262	false
Jan 7, 2025 01:23:35.009608984 CET	192.168.2.14	8.8.8.8	0x1b5a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.016545057 CET	192.168.2.14	8.8.8.8	0x1b5a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.024046898 CET	192.168.2.14	8.8.8.8	0x1b5a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.030977011 CET	192.168.2.14	8.8.8.8	0x1b5a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.037805080 CET	192.168.2.14	8.8.8.8	0x1b5a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.716933966 CET	192.168.2.14	8.8.8.8	0x6570	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.723782063 CET	192.168.2.14	8.8.8.8	0x6570	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.730777025 CET	192.168.2.14	8.8.8.8	0x6570	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.738503933 CET	192.168.2.14	8.8.8.8	0x6570	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:35.746049881 CET	192.168.2.14	8.8.8.8	0x6570	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	263	false
Jan 7, 2025 01:23:36.446846962 CET	192.168.2.14	8.8.8.8	0x9693	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	264	false
Jan 7, 2025 01:23:36.453675032 CET	192.168.2.14	8.8.8.8	0x9693	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	264	false
Jan 7, 2025 01:23:36.460495949 CET	192.168.2.14	8.8.8.8	0x9693	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	264	false
Jan 7, 2025 01:23:36.467344999 CET	192.168.2.14	8.8.8.8	0x9693	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	264	false
Jan 7, 2025 01:23:36.474246025 CET	192.168.2.14	8.8.8.8	0x9693	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	264	false
Jan 7, 2025 01:23:37.164506912 CET	192.168.2.14	8.8.8.8	0x6a60	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.171597958 CET	192.168.2.14	8.8.8.8	0x6a60	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.178529024 CET	192.168.2.14	8.8.8.8	0x6a60	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.185698986 CET	192.168.2.14	8.8.8.8	0x6a60	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.194066048 CET	192.168.2.14	8.8.8.8	0x6a60	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.895307064 CET	192.168.2.14	8.8.8.8	0x201a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.902765036 CET	192.168.2.14	8.8.8.8	0x201a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.909959078 CET	192.168.2.14	8.8.8.8	0x201a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.917001963 CET	192.168.2.14	8.8.8.8	0x201a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:37.925290108 CET	192.168.2.14	8.8.8.8	0x201a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	265	false
Jan 7, 2025 01:23:38.643171072 CET	192.168.2.14	8.8.8.8	0x3c5f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	266	false
Jan 7, 2025 01:23:38.649986029 CET	192.168.2.14	8.8.8.8	0x3c5f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	266	false
Jan 7, 2025 01:23:38.656810999 CET	192.168.2.14	8.8.8.8	0x3c5f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	266	false
Jan 7, 2025 01:23:38.663794041 CET	192.168.2.14	8.8.8.8	0x3c5f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	266	false
Jan 7, 2025 01:23:38.670564890 CET	192.168.2.14	8.8.8.8	0x3c5f	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	266	false
Jan 7, 2025 01:23:39.361542940 CET	192.168.2.14	8.8.8.8	0xaeff	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	267	false
Jan 7, 2025 01:23:39.368802071 CET	192.168.2.14	8.8.8.8	0xaeff	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	267	false
Jan 7, 2025 01:23:39.375880003 CET	192.168.2.14	8.8.8.8	0xaeff	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	267	false
Jan 7, 2025 01:23:39.382793903 CET	192.168.2.14	8.8.8.8	0xaeff	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	267	false
Jan 7, 2025 01:23:39.389724016 CET	192.168.2.14	8.8.8.8	0xaeff	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	267	false
Jan 7, 2025 01:23:40.060708046 CET	192.168.2.14	8.8.8.8	0x1ecb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.067655087 CET	192.168.2.14	8.8.8.8	0x1ecb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.074534893 CET	192.168.2.14	8.8.8.8	0x1ecb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.081216097 CET	192.168.2.14	8.8.8.8	0x1ecb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.088084936 CET	192.168.2.14	8.8.8.8	0x1ecb	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.776848078 CET	192.168.2.14	8.8.8.8	0xc0c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.783889055 CET	192.168.2.14	8.8.8.8	0xc0c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.791004896 CET	192.168.2.14	8.8.8.8	0xc0c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.797593117 CET	192.168.2.14	8.8.8.8	0xc0c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:40.804469109 CET	192.168.2.14	8.8.8.8	0xc0c7	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	268	false
Jan 7, 2025 01:23:41.479214907 CET	192.168.2.14	8.8.8.8	0xfcab	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	269	false
Jan 7, 2025 01:23:41.486068964 CET	192.168.2.14	8.8.8.8	0xfcab	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	269	false
Jan 7, 2025 01:23:41.493271112 CET	192.168.2.14	8.8.8.8	0xfcab	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	269	false
Jan 7, 2025 01:23:41.500231028 CET	192.168.2.14	8.8.8.8	0xfcab	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	269	false
Jan 7, 2025 01:23:41.506859064 CET	192.168.2.14	8.8.8.8	0xfcab	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	269	false
Jan 7, 2025 01:23:42.185883999 CET	192.168.2.14	8.8.8.8	0xcd1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.192882061 CET	192.168.2.14	8.8.8.8	0xcd1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.199619055 CET	192.168.2.14	8.8.8.8	0xcd1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.206338882 CET	192.168.2.14	8.8.8.8	0xcd1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.213190079 CET	192.168.2.14	8.8.8.8	0xcd1a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.898859978 CET	192.168.2.14	8.8.8.8	0x503a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.905822039 CET	192.168.2.14	8.8.8.8	0x503a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.912904024 CET	192.168.2.14	8.8.8.8	0x503a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.919775009 CET	192.168.2.14	8.8.8.8	0x503a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:42.926522017 CET	192.168.2.14	8.8.8.8	0x503a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	270	false
Jan 7, 2025 01:23:43.611176968 CET	192.168.2.14	8.8.8.8	0x2c9c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	271	false
Jan 7, 2025 01:23:43.618089914 CET	192.168.2.14	8.8.8.8	0x2c9c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	271	false
Jan 7, 2025 01:23:43.625252008 CET	192.168.2.14	8.8.8.8	0x2c9c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	271	false
Jan 7, 2025 01:23:43.632095098 CET	192.168.2.14	8.8.8.8	0x2c9c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	271	false
Jan 7, 2025 01:23:43.639180899 CET	192.168.2.14	8.8.8.8	0x2c9c	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	271	false
Jan 7, 2025 01:23:44.349386930 CET	192.168.2.14	8.8.8.8	0x48d1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	272	false
Jan 7, 2025 01:23:44.356251001 CET	192.168.2.14	8.8.8.8	0x48d1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	272	false
Jan 7, 2025 01:23:44.363298893 CET	192.168.2.14	8.8.8.8	0x48d1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	272	false
Jan 7, 2025 01:23:44.370027065 CET	192.168.2.14	8.8.8.8	0x48d1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	272	false
Jan 7, 2025 01:23:44.376594067 CET	192.168.2.14	8.8.8.8	0x48d1	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	272	false
Jan 7, 2025 01:23:45.072173119 CET	192.168.2.14	8.8.8.8	0x8e56	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.079605103 CET	192.168.2.14	8.8.8.8	0x8e56	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.086431980 CET	192.168.2.14	8.8.8.8	0x8e56	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.093283892 CET	192.168.2.14	8.8.8.8	0x8e56	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.100066900 CET	192.168.2.14	8.8.8.8	0x8e56	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.766985893 CET	192.168.2.14	8.8.8.8	0xdbfe	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.773802996 CET	192.168.2.14	8.8.8.8	0xdbfe	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.780440092 CET	192.168.2.14	8.8.8.8	0xdbfe	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.787331104 CET	192.168.2.14	8.8.8.8	0xdbfe	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:45.794147015 CET	192.168.2.14	8.8.8.8	0xdbfe	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	273	false
Jan 7, 2025 01:23:46.496300936 CET	192.168.2.14	8.8.8.8	0xc10a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	274	false
Jan 7, 2025 01:23:46.504116058 CET	192.168.2.14	8.8.8.8	0xc10a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	274	false
Jan 7, 2025 01:23:46.511112928 CET	192.168.2.14	8.8.8.8	0xc10a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	274	false
Jan 7, 2025 01:23:46.517904997 CET	192.168.2.14	8.8.8.8	0xc10a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	274	false
Jan 7, 2025 01:23:46.525068045 CET	192.168.2.14	8.8.8.8	0xc10a	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	274	false
Jan 7, 2025 01:23:47.199057102 CET	192.168.2.14	8.8.8.8	0x4bf6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.206598997 CET	192.168.2.14	8.8.8.8	0x4bf6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.214257956 CET	192.168.2.14	8.8.8.8	0x4bf6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.221451998 CET	192.168.2.14	8.8.8.8	0x4bf6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.228498936 CET	192.168.2.14	8.8.8.8	0x4bf6	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.927442074 CET	192.168.2.14	8.8.8.8	0x4108	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.934513092 CET	192.168.2.14	8.8.8.8	0x4108	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.941179037 CET	192.168.2.14	8.8.8.8	0x4108	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.947978973 CET	192.168.2.14	8.8.8.8	0x4108	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:47.954929113 CET	192.168.2.14	8.8.8.8	0x4108	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	275	false
Jan 7, 2025 01:23:48.635803938 CET	192.168.2.14	8.8.8.8	0x1a93	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	276	false
Jan 7, 2025 01:23:48.642606974 CET	192.168.2.14	8.8.8.8	0x1a93	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	276	false
Jan 7, 2025 01:23:48.649224043 CET	192.168.2.14	8.8.8.8	0x1a93	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	276	false
Jan 7, 2025 01:23:48.656164885 CET	192.168.2.14	8.8.8.8	0x1a93	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	276	false
Jan 7, 2025 01:23:48.662971973 CET	192.168.2.14	8.8.8.8	0x1a93	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	276	false
Jan 7, 2025 01:23:49.342312098 CET	192.168.2.14	8.8.8.8	0x83ad	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	277	false
Jan 7, 2025 01:23:49.349168062 CET	192.168.2.14	8.8.8.8	0x83ad	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	277	false
Jan 7, 2025 01:23:49.355967999 CET	192.168.2.14	8.8.8.8	0x83ad	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	277	false
Jan 7, 2025 01:23:49.362917900 CET	192.168.2.14	8.8.8.8	0x83ad	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	277	false
Jan 7, 2025 01:23:49.369755030 CET	192.168.2.14	8.8.8.8	0x83ad	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	277	false
Jan 7, 2025 01:23:50.053626060 CET	192.168.2.14	8.8.8.8	0xf09b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	278	false
Jan 7, 2025 01:23:50.060509920 CET	192.168.2.14	8.8.8.8	0xf09b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	278	false
Jan 7, 2025 01:23:50.067354918 CET	192.168.2.14	8.8.8.8	0xf09b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	278	false
Jan 7, 2025 01:23:50.074203968 CET	192.168.2.14	8.8.8.8	0xf09b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	278	false
Jan 7, 2025 01:23:50.080960035 CET	192.168.2.14	8.8.8.8	0xf09b	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	278	false
Jan 7, 2025 01:23:51.158673048 CET	192.168.2.14	8.8.8.8	0x3610	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.165890932 CET	192.168.2.14	8.8.8.8	0x3610	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.174151897 CET	192.168.2.14	8.8.8.8	0x3610	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.182487011 CET	192.168.2.14	8.8.8.8	0x3610	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.190572023 CET	192.168.2.14	8.8.8.8	0x3610	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.882808924 CET	192.168.2.14	8.8.8.8	0xb009	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.890058041 CET	192.168.2.14	8.8.8.8	0xb009	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.896894932 CET	192.168.2.14	8.8.8.8	0xb009	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.903624058 CET	192.168.2.14	8.8.8.8	0xb009	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:51.911346912 CET	192.168.2.14	8.8.8.8	0xb009	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	279	false
Jan 7, 2025 01:23:52.588792086 CET	192.168.2.14	8.8.8.8	0xe271	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	280	false
Jan 7, 2025 01:23:52.595623016 CET	192.168.2.14	8.8.8.8	0xe271	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	280	false
Jan 7, 2025 01:23:52.604594946 CET	192.168.2.14	8.8.8.8	0xe271	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	280	false
Jan 7, 2025 01:23:52.613475084 CET	192.168.2.14	8.8.8.8	0xe271	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	280	false
Jan 7, 2025 01:23:52.620273113 CET	192.168.2.14	8.8.8.8	0xe271	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	280	false
Jan 7, 2025 01:23:53.451648951 CET	192.168.2.14	8.8.8.8	0x52e9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	281	false
Jan 7, 2025 01:23:53.459369898 CET	192.168.2.14	8.8.8.8	0x52e9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	281	false
Jan 7, 2025 01:23:53.466185093 CET	192.168.2.14	8.8.8.8	0x52e9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	281	false
Jan 7, 2025 01:23:53.473031044 CET	192.168.2.14	8.8.8.8	0x52e9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	281	false
Jan 7, 2025 01:23:53.480113983 CET	192.168.2.14	8.8.8.8	0x52e9	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	281	false
Jan 7, 2025 01:23:54.152405977 CET	192.168.2.14	8.8.8.8	0x8d67	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	282	false
Jan 7, 2025 01:23:54.159429073 CET	192.168.2.14	8.8.8.8	0x8d67	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	282	false
Jan 7, 2025 01:23:54.166138887 CET	192.168.2.14	8.8.8.8	0x8d67	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	282	false
Jan 7, 2025 01:23:54.173002958 CET	192.168.2.14	8.8.8.8	0x8d67	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	282	false
Jan 7, 2025 01:23:54.179908991 CET	192.168.2.14	8.8.8.8	0x8d67	Standard query (0)	fingwi.cardiacpure.ru. [malformed]	256	282	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 01:21:52.005713940 CET	8.8.8.8	192.168.2.14	0xf6a2	No error (0)	fingwi.cardiacpure.ru		178.215.238.112	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: vevhea4.elf PID: 5572, Parent PID: 5490

General

Start time (UTC):	00:21:51
Start date (UTC):	07/01/2025
Path:	/tmp/vevhea4.elf
Arguments:	/tmp/vevhea4.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: vevhea4.elf PID: 5574, Parent PID: 5572

General

Start time (UTC):	00:21:51
Start date (UTC):	07/01/2025
Path:	/tmp/vevhea4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: vevhea4.elf PID: 5576, Parent PID: 5574

General

Start time (UTC):	00:21:51
Start date (UTC):	07/01/2025
Path:	/tmp/vevhea4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gnome-session-binary PID: 5578, Parent PID: 1383

General

Start time (UTC):	00:21:51
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: sh PID: 5578, Parent PID: 1383

General

Start time (UTC):	00:21:51
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gsd-rfkill PID: 5578, Parent PID: 1383

General

Start time (UTC):	00:21:51
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-rfkill
Arguments:	/usr/libexec/gsd-rfkill
File size:	51808 bytes
MD5 hash:	88a16a3c0aba1759358c06215ecfb5cc

Chronological Activities

Analysis Process: systemd PID: 5615, Parent PID: 1

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5615, Parent PID: 1

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: gvfsd-fuse PID: 5616, Parent PID: 3147

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Chronological Activities

Analysis Process: fusermount PID: 5616, Parent PID: 3147

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/bin/fusermount
Arguments:	fusermount -u -q -z -- /run/user/1000/gvfs
File size:	39144 bytes
MD5 hash:	576a1b135c82bdcbc97a91acea900566

Chronological Activities

Analysis Process: systemd PID: 5617, Parent PID: 2955

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: pulseaudio PID: 5617, Parent PID: 2955

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Chronological Activities

Analysis Process: systemd PID: 5618, Parent PID: 1

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5618, Parent PID: 1

General

Start time (UTC):	00:21:52
Start date (UTC):	07/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5619, Parent PID: 1

General

Start time (UTC):	00:21:53
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5619, Parent PID: 1

General

Start time (UTC):	00:21:53
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: systemd PID: 5620, Parent PID: 1

General

Start time (UTC):	00:21:53
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5620, Parent PID: 1

General

Start time (UTC):	00:21:53
Start date (UTC):	07/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5628, Parent PID: 1

General

Start time (UTC):	00:21:54
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-logind PID: 5628, Parent PID: 1

General

Start time (UTC):	00:21:54
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Chronological Activities

Analysis Process: systemd PID: 5687, Parent PID: 1

General

Start time (UTC):	00:21:54
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: agetty PID: 5687, Parent PID: 1

General

Start time (UTC):	00:21:54
Start date (UTC):	07/01/2025
Path:	/sbin/agetty
Arguments:	/sbin/agetty -o "-p -- \\u" --noclear tty2 linux
File size:	69000 bytes
MD5 hash:	3a374724ba7e863768139bdd60ca36f7

Chronological Activities

Analysis Process: gdm3 PID: 5690, Parent PID: 1289

General

Start time (UTC):	00:21:55
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5690, Parent PID: 1289

General

Start time (UTC):	00:21:55
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gdm3 PID: 5691, Parent PID: 1289

General

Start time (UTC):	00:21:55
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5691, Parent PID: 1289

General

Start time (UTC):	00:21:55
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gdm3 PID: 5692, Parent PID: 1289

General

Start time (UTC):	00:21:55
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: Default PID: 5692, Parent PID: 1289

General

Start time (UTC):	00:21:55
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: systemd PID: 5693, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5693, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: systemd PID: 5694, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: agetty PID: 5694, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/sbin/agetty
Arguments:	/sbin/agetty -o "-p -- \\u" --noclear tty2 linux
File size:	69000 bytes
MD5 hash:	3a374724ba7e863768139bdd60ca36f7

Chronological Activities

Analysis Process: systemd PID: 5695, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gpu-manager PID: 5695, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: gpu-manager PID: 5697, Parent PID: 5695

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5697, Parent PID: 5695

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5698, Parent PID: 5697

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5698, Parent PID: 5697

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5702, Parent PID: 5695

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5702, Parent PID: 5695

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5703, Parent PID: 5702

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5703, Parent PID: 5702

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5704, Parent PID: 5695

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5704, Parent PID: 5695

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5705, Parent PID: 5704

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5705, Parent PID: 5704

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5706, Parent PID: 5695

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5706, Parent PID: 5695

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5707, Parent PID: 5706

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5707, Parent PID: 5706

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5769, Parent PID: 5695

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5769, Parent PID: 5695

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5770, Parent PID: 5769

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5770, Parent PID: 5769

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5772, Parent PID: 5695

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5772, Parent PID: 5695

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5773, Parent PID: 5772

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5773, Parent PID: 5772

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5837, Parent PID: 5695

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5837, Parent PID: 5695

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5838, Parent PID: 5837

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5838, Parent PID: 5837

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: gpu-manager PID: 5842, Parent PID: 5695

General

Start time (UTC):	00:21:59
Start date (UTC):	07/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Chronological Activities

Analysis Process: sh PID: 5842, Parent PID: 5695

General

Start time (UTC):	00:21:59
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5844, Parent PID: 5842

General

Start time (UTC):	00:21:59
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: grep PID: 5844, Parent PID: 5842

General

Start time (UTC):	00:21:59
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Chronological Activities

Analysis Process: systemd PID: 5696, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5696, Parent PID: 1

General

Start time (UTC):	00:21:56
Start date (UTC):	07/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5710, Parent PID: 1

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-logind PID: 5710, Parent PID: 1

General

Start time (UTC):	00:21:57
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Chronological Activities

Analysis Process: systemd PID: 5771, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: journalctl PID: 5771, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/journalctl
Arguments:	/usr/bin/journalctl --smart-relinquish-var
File size:	80120 bytes
MD5 hash:	bf3a987344f3bacafc44efd882abda8b

Chronological Activities

Analysis Process: systemd PID: 5776, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-logind PID: 5776, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-logind
Arguments:	/lib/systemd/systemd-logind
File size:	268576 bytes
MD5 hash:	8dd58a1b4c12f7a1d5fe3ce18b2aaeef

Chronological Activities

Analysis Process: systemd PID: 5835, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: rsyslogd PID: 5835, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Chronological Activities

Analysis Process: systemd PID: 5836, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: systemd-journald PID: 5836, Parent PID: 1

General

Start time (UTC):	00:21:58
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-journald
Arguments:	/lib/systemd/systemd-journald
File size:	162032 bytes
MD5 hash:	474667ece6cecb5e04c6eb897a1d0d9e

Chronological Activities

Analysis Process: systemd PID: 5843, Parent PID: 1

General

Start time (UTC):	00:21:59
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: dbus-daemon PID: 5843, Parent PID: 1

General

Start time (UTC):	00:21:59
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: systemd PID: 5847, Parent PID: 1

General

Start time (UTC):	00:22:00
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: generate-config PID: 5847, Parent PID: 1

General

Start time (UTC):	00:22:00
Start date (UTC):	07/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: generate-config PID: 5848, Parent PID: 5847

General

Start time (UTC):	00:22:00
Start date (UTC):	07/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: pkill PID: 5848, Parent PID: 5847

General

Start time (UTC):	00:22:00
Start date (UTC):	07/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Chronological Activities

Analysis Process: systemd PID: 5849, Parent PID: 1

General

Start time (UTC):	00:22:02
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gdm-wait-for-drm PID: 5849, Parent PID: 1

General

Start time (UTC):	00:22:02
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-wait-for-drm
Arguments:	/usr/lib/gdm3/gdm-wait-for-drm
File size:	14640 bytes
MD5 hash:	82043ba752c6930b4e6aaea2f7747545

Chronological Activities

Analysis Process: systemd PID: 5850, Parent PID: 1

General

Start time (UTC):	00:22:02
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: journalctl PID: 5850, Parent PID: 1

General

Start time (UTC):	00:22:02
Start date (UTC):	07/01/2025
Path:	/usr/bin/journalctl
Arguments:	/usr/bin/journalctl --flush
File size:	80120 bytes
MD5 hash:	bf3a987344f3bacafc44efd882abda8b

Chronological Activities

Analysis Process: systemd PID: 5856, Parent PID: 1

General

Start time (UTC):	00:22:12
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Chronological Activities

Analysis Process: gdm3 PID: 5856, Parent PID: 1

General

Start time (UTC):	00:22:12
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	/usr/sbin/gdm3
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: gdm3 PID: 5859, Parent PID: 5856

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: plymouth PID: 5859, Parent PID: 5856

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/bin/plymouth
Arguments:	plymouth --ping
File size:	51352 bytes
MD5 hash:	87003efd8dad470042f5e75360a8f49f

Chronological Activities

Analysis Process: gdm3 PID: 5873, Parent PID: 5856

General

Start time (UTC):	00:22:14
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: gdm-session-worker PID: 5873, Parent PID: 5856

General

Start time (UTC):	00:22:14
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	"gdm-session-worker [pam/gdm-launch-environment]"
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Chronological Activities

Analysis Process: gdm-session-worker PID: 5879, Parent PID: 5873

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	-
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Chronological Activities

Analysis Process: gdm-wayland-session PID: 5879, Parent PID: 5873

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-wayland-session
Arguments:	/usr/lib/gdm3/gdm-wayland-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"
File size:	76368 bytes
MD5 hash:	d3def63cf1e83f7fb8a0f13b1744ff7c

Chronological Activities

Analysis Process: gdm-wayland-session PID: 5883, Parent PID: 5879

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-wayland-session
Arguments:	-
File size:	76368 bytes
MD5 hash:	d3def63cf1e83f7fb8a0f13b1744ff7c

Chronological Activities

Analysis Process: dbus-run-session PID: 5883, Parent PID: 5879

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-run-session
Arguments:	dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Chronological Activities

Analysis Process: dbus-run-session PID: 5884, Parent PID: 5883

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Chronological Activities

Analysis Process: dbus-daemon PID: 5884, Parent PID: 5883

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	dbus-daemon --nofork --print-address 4 --session
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5888, Parent PID: 5884

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5889, Parent PID: 5888

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5889, Parent PID: 5888

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-daemon PID: 5891, Parent PID: 5884

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5892, Parent PID: 5891

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5892, Parent PID: 5891

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-daemon PID: 5893, Parent PID: 5884

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5894, Parent PID: 5893

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5894, Parent PID: 5893

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-daemon PID: 5895, Parent PID: 5884

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5896, Parent PID: 5895

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5896, Parent PID: 5895

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-daemon PID: 5897, Parent PID: 5884

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5898, Parent PID: 5897

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5898, Parent PID: 5897

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-daemon PID: 5899, Parent PID: 5884

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5900, Parent PID: 5899

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5900, Parent PID: 5899

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-daemon PID: 5902, Parent PID: 5884

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5903, Parent PID: 5902

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: false PID: 5903, Parent PID: 5902

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Chronological Activities

Analysis Process: dbus-run-session PID: 5885, Parent PID: 5883

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Chronological Activities

Analysis Process: gnome-session PID: 5885, Parent PID: 5883

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/bin/gnome-session
Arguments:	gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gnome-session-binary PID: 5885, Parent PID: 5883

General

Start time (UTC):	00:22:17
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	/usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: gnome-session-binary PID: 5904, Parent PID: 5885

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: session-migration PID: 5904, Parent PID: 5885

General

Start time (UTC):	00:22:18
Start date (UTC):	07/01/2025
Path:	/usr/bin/session-migration
Arguments:	session-migration
File size:	22680 bytes
MD5 hash:	5227af42ebf14ac2fe2acddb002f68dc

Chronological Activities

Analysis Process: gnome-session-binary PID: 5905, Parent PID: 5885

General

Start time (UTC):	00:22:19
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Chronological Activities

Analysis Process: sh PID: 5905, Parent PID: 5885

General

Start time (UTC):	00:22:19
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gnome-shell PID: 5905, Parent PID: 5885

General

Start time (UTC):	00:22:19
Start date (UTC):	07/01/2025
Path:	/usr/bin/gnome-shell
Arguments:	/usr/bin/gnome-shell
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Chronological Activities

Analysis Process: gdm3 PID: 5913, Parent PID: 5856

General

Start time (UTC):	00:22:21
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Chronological Activities

Analysis Process: gdm-session-worker PID: 5913, Parent PID: 5856

General

Start time (UTC):	00:22:21
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	"gdm-session-worker [pam/gdm-launch-environment]"
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Chronological Activities

Analysis Process: gdm-session-worker PID: 5918, Parent PID: 5913

General

Start time (UTC):	00:22:22
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-session-worker
Arguments:	-
File size:	293360 bytes
MD5 hash:	692243754bd9f38fe9bd7e230b5c060a

Chronological Activities

Analysis Process: gdm-x-session PID: 5918, Parent PID: 5913

General

Start time (UTC):	00:22:22
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	/usr/lib/gdm3/gdm-x-session "dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart"
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Chronological Activities

Analysis Process: gdm-x-session PID: 5920, Parent PID: 5918

General

Start time (UTC):	00:22:22
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	-
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Chronological Activities

Analysis Process: Xorg PID: 5920, Parent PID: 5918

General

Start time (UTC):	00:22:22
Start date (UTC):	07/01/2025
Path:	/usr/bin/Xorg
Arguments:	/usr/bin/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: Xorg.wrap PID: 5920, Parent PID: 5918

General

Start time (UTC):	00:22:22
Start date (UTC):	07/01/2025
Path:	/usr/lib/xorg/Xorg.wrap
Arguments:	/usr/lib/xorg/Xorg.wrap vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3
File size:	14488 bytes
MD5 hash:	48993830888200ecf19dd7def0884dfd

Chronological Activities

Analysis Process: Xorg PID: 5920, Parent PID: 5918

General

Start time (UTC):	00:22:22
Start date (UTC):	07/01/2025
Path:	/usr/lib/xorg/Xorg
Arguments:	/usr/lib/xorg/Xorg vt1 -displayfd 3 -auth /run/user/127/gdm/Xauthority -background none -noreset -keeptty -verbose 3
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Chronological Activities

Analysis Process: Xorg PID: 5927, Parent PID: 5920

General

Start time (UTC):	00:22:30
Start date (UTC):	07/01/2025
Path:	/usr/lib/xorg/Xorg
Arguments:	-
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Chronological Activities

Analysis Process: sh PID: 5927, Parent PID: 5920

General

Start time (UTC):	00:22:30
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 5928, Parent PID: 5927

General

Start time (UTC):	00:22:30
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: xkbcomp PID: 5928, Parent PID: 5927

General

Start time (UTC):	00:22:30
Start date (UTC):	07/01/2025
Path:	/usr/bin/xkbcomp
Arguments:	/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm
File size:	217184 bytes
MD5 hash:	c5f953aec4c00d2a1cc27acb75d62c9b

Chronological Activities

Analysis Process: Xorg PID: 6151, Parent PID: 5920

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/lib/xorg/Xorg
Arguments:	-
File size:	2448840 bytes
MD5 hash:	730cf4c45a7ee8bea88abf165463b7f8

Chronological Activities

Analysis Process: sh PID: 6151, Parent PID: 5920

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "\"/usr/bin/xkbcomp\" -w 1 \"-R/usr/share/X11/xkb\" -xkm \"-\" -em1 \"The XKEYBOARD keymap compiler (xkbcomp) reports:\" -emp \"> \" -eml \"Errors from xkbcomp are not fatal to the X server\" \"/tmp/server-0.xkm\""
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: sh PID: 6153, Parent PID: 6151

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: xkbcomp PID: 6153, Parent PID: 6151

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/bin/xkbcomp
Arguments:	/usr/bin/xkbcomp -w 1 -R/usr/share/X11/xkb -xkm - -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" /tmp/server-0.xkm
File size:	217184 bytes
MD5 hash:	c5f953aec4c00d2a1cc27acb75d62c9b

Chronological Activities

Analysis Process: gdm-x-session PID: 5933, Parent PID: 5918

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	-
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Chronological Activities

Analysis Process: Default PID: 5933, Parent PID: 5918

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/Prime/Default
Arguments:	/etc/gdm3/Prime/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: gdm-x-session PID: 5934, Parent PID: 5918

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/lib/gdm3/gdm-x-session
Arguments:	-
File size:	96944 bytes
MD5 hash:	498a824333f1c1ec7767f4612d1887cc

Chronological Activities

Analysis Process: dbus-run-session PID: 5934, Parent PID: 5918

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-run-session
Arguments:	dbus-run-session -- gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Chronological Activities

Analysis Process: dbus-run-session PID: 5935, Parent PID: 5934

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Chronological Activities

Analysis Process: dbus-daemon PID: 5935, Parent PID: 5934

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	dbus-daemon --nofork --print-address 4 --session
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Chronological Activities

Analysis Process: dbus-daemon PID: 5948, Parent PID: 5935

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5949, Parent PID: 5948

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: at-spi-bus-launcher PID: 5949, Parent PID: 5948

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/libexec/at-spi-bus-launcher
Arguments:	/usr/libexec/at-spi-bus-launcher
File size:	27008 bytes
MD5 hash:	1563f274acd4e7ba530a55bdc4c95682

Analysis Process: at-spi-bus-launcher PID: 5954, Parent PID: 5949

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/libexec/at-spi-bus-launcher
Arguments:	-
File size:	27008 bytes
MD5 hash:	1563f274acd4e7ba530a55bdc4c95682

Analysis Process: dbus-daemon PID: 5954, Parent PID: 5949

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 3
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6317, Parent PID: 5954

General

Start time (UTC):	00:22:52
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6318, Parent PID: 6317

General

Start time (UTC):	00:22:52
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: at-spi2-registryd PID: 6318, Parent PID: 6317

General

Start time (UTC):	00:22:52
Start date (UTC):	07/01/2025
Path:	/usr/libexec/at-spi2-registryd
Arguments:	/usr/libexec/at-spi2-registryd --use-gnome-session
File size:	100224 bytes
MD5 hash:	1d904c2693452edebc7ede3a9e24d440

Analysis Process: dbus-daemon PID: 5975, Parent PID: 5935

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5976, Parent PID: 5975

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5976, Parent PID: 5975

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 5978, Parent PID: 5935

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5979, Parent PID: 5978

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5979, Parent PID: 5978

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 5980, Parent PID: 5935

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5981, Parent PID: 5980

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5981, Parent PID: 5980

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 5982, Parent PID: 5935

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5983, Parent PID: 5982

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5983, Parent PID: 5982

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 5984, Parent PID: 5935

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5985, Parent PID: 5984

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5985, Parent PID: 5984

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 5986, Parent PID: 5935

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5987, Parent PID: 5986

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5987, Parent PID: 5986

General

Start time (UTC):	00:22:39
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 5991, Parent PID: 5935

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 5992, Parent PID: 5991

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 5992, Parent PID: 5991

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-daemon PID: 6154, Parent PID: 5935

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6155, Parent PID: 6154

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: ibus-portal PID: 6155, Parent PID: 6154

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/libexec/ibus-portal
Arguments:	/usr/libexec/ibus-portal
File size:	92536 bytes
MD5 hash:	562ad55bd9a4d54bd7b76746b01e37d3

Analysis Process: dbus-daemon PID: 6333, Parent PID: 5935

General

Start time (UTC):	00:22:54
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6334, Parent PID: 6333

General

Start time (UTC):	00:22:54
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: gjs PID: 6334, Parent PID: 6333

General

Start time (UTC):	00:22:54
Start date (UTC):	07/01/2025
Path:	/usr/bin/gjs
Arguments:	/usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications
File size:	23128 bytes
MD5 hash:	5f3eceb792bb65c22f23d1efb4fde3ad

Analysis Process: dbus-daemon PID: 6533, Parent PID: 5935

General

Start time (UTC):	00:23:06
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: dbus-daemon PID: 6534, Parent PID: 6533

General

Start time (UTC):	00:23:06
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: false PID: 6534, Parent PID: 6533

General

Start time (UTC):	00:23:06
Start date (UTC):	07/01/2025
Path:	/bin/false
Arguments:	/bin/false
File size:	39256 bytes
MD5 hash:	3177546c74e4f0062909eae43d948bfc

Analysis Process: dbus-run-session PID: 5936, Parent PID: 5934

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-run-session
Arguments:	-
File size:	14480 bytes
MD5 hash:	245f3ef6a268850b33b0225a8753b7f4

Analysis Process: gnome-session PID: 5936, Parent PID: 5934

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/bin/gnome-session
Arguments:	gnome-session --autostart /usr/share/gdm/greeter/autostart
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gnome-session-binary PID: 5936, Parent PID: 5934

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	/usr/libexec/gnome-session-binary --systemd --autostart /usr/share/gdm/greeter/autostart
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: gnome-session-binary PID: 5937, Parent PID: 5936

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: gnome-session-check-accelerated PID: 5937, Parent PID: 5936

General

Start time (UTC):	00:22:33
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-check-accelerated
Arguments:	/usr/libexec/gnome-session-check-accelerated
File size:	18752 bytes
MD5 hash:	a64839518af85b2b9de31aca27646396

Analysis Process: gnome-session-check-accelerated PID: 5955, Parent PID: 5937

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-check-accelerated
Arguments:	-
File size:	18752 bytes
MD5 hash:	a64839518af85b2b9de31aca27646396

Analysis Process: gnome-session-check-accelerated-gl-helper PID: 5955, Parent PID: 5937

General

Start time (UTC):	00:22:37
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-check-accelerated-gl-helper
Arguments:	/usr/libexec/gnome-session-check-accelerated-gl-helper --print-renderer
File size:	22920 bytes
MD5 hash:	b1ab9a384f9e98a39ae5c36037dd5e78

Analysis Process: gnome-session-check-accelerated PID: 5964, Parent PID: 5937

General

Start time (UTC):	00:22:38
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-check-accelerated
Arguments:	-
File size:	18752 bytes
MD5 hash:	a64839518af85b2b9de31aca27646396

Analysis Process: gnome-session-check-accelerated-gles-helper PID: 5964, Parent PID: 5937

General

Start time (UTC):	00:22:38
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-check-accelerated-gles-helper
Arguments:	/usr/libexec/gnome-session-check-accelerated-gles-helper --print-renderer
File size:	14728 bytes
MD5 hash:	1bd78885765a18e60c05ed1fb5fa3bf8

Analysis Process: gnome-session-binary PID: 5993, Parent PID: 5936

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: session-migration PID: 5993, Parent PID: 5936

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/usr/bin/session-migration
Arguments:	session-migration
File size:	22680 bytes
MD5 hash:	5227af42ebf14ac2fe2acddb002f68dc

Analysis Process: gnome-session-binary PID: 5994, Parent PID: 5936

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 5994, Parent PID: 5936

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/gnome-shell
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gnome-shell PID: 5994, Parent PID: 5936

General

Start time (UTC):	00:22:40
Start date (UTC):	07/01/2025
Path:	/usr/bin/gnome-shell
Arguments:	/usr/bin/gnome-shell
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Analysis Process: gnome-shell PID: 6093, Parent PID: 5994

General

Start time (UTC):	00:22:48
Start date (UTC):	07/01/2025
Path:	/usr/bin/gnome-shell
Arguments:	-
File size:	23168 bytes
MD5 hash:	da7a257239677622fe4b3a65972c9e87

Analysis Process: ibus-daemon PID: 6093, Parent PID: 5994

General

Start time (UTC):	00:22:48
Start date (UTC):	07/01/2025
Path:	/usr/bin/ibus-daemon
Arguments:	ibus-daemon --panel disable --xim
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-daemon PID: 6148, Parent PID: 6093

General

Start time (UTC):	00:22:48
Start date (UTC):	07/01/2025
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-memconf PID: 6148, Parent PID: 6093

General

Start time (UTC):	00:22:48
Start date (UTC):	07/01/2025
Path:	/usr/libexec/ibus-memconf
Arguments:	/usr/libexec/ibus-memconf
File size:	22904 bytes
MD5 hash:	523e939905910d06598e66385761a822

Analysis Process: ibus-daemon PID: 6149, Parent PID: 6093

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-daemon PID: 6150, Parent PID: 6149

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-x11 PID: 6150, Parent PID: 1

General

Start time (UTC):	00:22:49
Start date (UTC):	07/01/2025
Path:	/usr/libexec/ibus-x11
Arguments:	/usr/libexec/ibus-x11 --kill-daemon
File size:	100352 bytes
MD5 hash:	2aa1e54666191243814c2733d6992dbd

Analysis Process: ibus-daemon PID: 6367, Parent PID: 6093

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/bin/ibus-daemon
Arguments:	-
File size:	199088 bytes
MD5 hash:	1e00fb9860b198c73f6e364e3ff16f31

Analysis Process: ibus-engine-simple PID: 6367, Parent PID: 6093

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/libexec/ibus-engine-simple
Arguments:	/usr/libexec/ibus-engine-simple
File size:	14712 bytes
MD5 hash:	0238866d5e8802a0ce1b1b9af8cb1376

Analysis Process: gnome-session-binary PID: 6349, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6349, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sharing
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-sharing PID: 6349, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-sharing
Arguments:	/usr/libexec/gsd-sharing
File size:	35424 bytes
MD5 hash:	e29d9025d98590fbb69f89fdbd4438b3

Analysis Process: gnome-session-binary PID: 6351, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6351, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-wacom
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-wacom PID: 6351, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-wacom
Arguments:	/usr/libexec/gsd-wacom
File size:	39520 bytes
MD5 hash:	13778dd1a23a4e94ddc17ac9caa4fcc1

Analysis Process: gnome-session-binary PID: 6353, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6353, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-color
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-color PID: 6353, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-color
Arguments:	/usr/libexec/gsd-color
File size:	92832 bytes
MD5 hash:	ac2861ad93ce047283e8e87cefef9a19

Analysis Process: gnome-session-binary PID: 6354, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6354, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-keyboard
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-keyboard PID: 6354, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-keyboard
Arguments:	/usr/libexec/gsd-keyboard
File size:	39760 bytes
MD5 hash:	8e288fd17c80bb0a1148b964b2ac2279

Analysis Process: gnome-session-binary PID: 6356, Parent PID: 5936

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6356, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-print-notifications
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-print-notifications PID: 6356, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-print-notifications
Arguments:	/usr/libexec/gsd-print-notifications
File size:	51840 bytes
MD5 hash:	71539698aa691718cee775d6b9450ae2

Analysis Process: gsd-print-notifications PID: 6530, Parent PID: 6356

General

Start time (UTC):	00:23:05
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-print-notifications
Arguments:	-
File size:	51840 bytes
MD5 hash:	71539698aa691718cee775d6b9450ae2

Analysis Process: gsd-print-notifications PID: 6531, Parent PID: 6530

General

Start time (UTC):	00:23:06
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-print-notifications
Arguments:	-
File size:	51840 bytes
MD5 hash:	71539698aa691718cee775d6b9450ae2

Analysis Process: gsd-printer PID: 6531, Parent PID: 1

General

Start time (UTC):	00:23:06
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-printer
Arguments:	/usr/libexec/gsd-printer
File size:	31120 bytes
MD5 hash:	7995828cf98c315fd55f2ffb3b22384d

Analysis Process: gnome-session-binary PID: 6357, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6357, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-rfkill PID: 6357, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-rfkill
Arguments:	/usr/libexec/gsd-rfkill
File size:	51808 bytes
MD5 hash:	88a16a3c0aba1759358c06215ecfb5cc

Analysis Process: gnome-session-binary PID: 6358, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6358, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-smartcard
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-smartcard PID: 6358, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-smartcard
Arguments:	/usr/libexec/gsd-smartcard
File size:	109152 bytes
MD5 hash:	ea1fbd7f62e4cd0331eae2ef754ee605

Analysis Process: gnome-session-binary PID: 6360, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6360, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-datetime
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-datetime PID: 6360, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-datetime
Arguments:	/usr/libexec/gsd-datetime
File size:	76736 bytes
MD5 hash:	d80d39745740de37d6634d36e344d4bc

Analysis Process: gnome-session-binary PID: 6361, Parent PID: 5936

General

Start time (UTC):	00:22:59
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6361, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-media-keys
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-media-keys PID: 6361, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-media-keys
Arguments:	/usr/libexec/gsd-media-keys
File size:	232936 bytes
MD5 hash:	a425448c135afb4b8bfd79cc0b6b74da

Analysis Process: gnome-session-binary PID: 6364, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6364, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-screensaver-proxy
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-screensaver-proxy PID: 6364, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-screensaver-proxy
Arguments:	/usr/libexec/gsd-screensaver-proxy
File size:	27232 bytes
MD5 hash:	77e309450c87dceee43f1a9e50cc0d02

Analysis Process: gnome-session-binary PID: 6366, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6366, Parent PID: 5936

General

Start time (UTC):	00:23:00
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-sound
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-sound PID: 6366, Parent PID: 5936

General

Start time (UTC):	00:23:01
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-sound
Arguments:	/usr/libexec/gsd-sound
File size:	31248 bytes
MD5 hash:	4c7d3fb993463337b4a0eb5c80c760ee

Analysis Process: gnome-session-binary PID: 6368, Parent PID: 5936

General

Start time (UTC):	00:23:01
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6368, Parent PID: 5936

General

Start time (UTC):	00:23:01
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-a11y-settings
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-a11y-settings PID: 6368, Parent PID: 5936

General

Start time (UTC):	00:23:01
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-a11y-settings
Arguments:	/usr/libexec/gsd-a11y-settings
File size:	23056 bytes
MD5 hash:	18e243d2cf30ecee7ea89d1462725c5c

Analysis Process: gnome-session-binary PID: 6373, Parent PID: 5936

General

Start time (UTC):	00:23:01
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6373, Parent PID: 5936

General

Start time (UTC):	00:23:01
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-housekeeping
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-housekeeping PID: 6373, Parent PID: 5936

General

Start time (UTC):	00:23:02
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-housekeeping
Arguments:	/usr/libexec/gsd-housekeeping
File size:	51840 bytes
MD5 hash:	b55f3394a84976ddb92a2915e5d76914

Analysis Process: gnome-session-binary PID: 6375, Parent PID: 5936

General

Start time (UTC):	00:23:02
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6375, Parent PID: 5936

General

Start time (UTC):	00:23:02
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-power
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gsd-power PID: 6375, Parent PID: 5936

General

Start time (UTC):	00:23:02
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gsd-power
Arguments:	/usr/libexec/gsd-power
File size:	88672 bytes
MD5 hash:	28b8e1b43c3e7f1db6741ea1ecd978b7

Analysis Process: gnome-session-binary PID: 6706, Parent PID: 5936

General

Start time (UTC):	00:23:19
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6706, Parent PID: 5936

General

Start time (UTC):	00:23:19
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/bin/spice-vdagent
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: spice-vdagent PID: 6706, Parent PID: 5936

General

Start time (UTC):	00:23:19
Start date (UTC):	07/01/2025
Path:	/usr/bin/spice-vdagent
Arguments:	/usr/bin/spice-vdagent
File size:	80664 bytes
MD5 hash:	80fb7f613aa78d1b8a229dbcf4577a9d

Analysis Process: gnome-session-binary PID: 6750, Parent PID: 5936

General

Start time (UTC):	00:23:21
Start date (UTC):	07/01/2025
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Analysis Process: sh PID: 6750, Parent PID: 5936

General

Start time (UTC):	00:23:21
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh xbrlapi -q
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: xbrlapi PID: 6750, Parent PID: 5936

General

Start time (UTC):	00:23:22
Start date (UTC):	07/01/2025
Path:	/usr/bin/xbrlapi
Arguments:	xbrlapi -q
File size:	166384 bytes
MD5 hash:	0cfe25df39d38af32d6265ed947ca5b9

Analysis Process: gdm3 PID: 5914, Parent PID: 5856

General

Start time (UTC):	00:22:21
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: Default PID: 5914, Parent PID: 5856

General

Start time (UTC):	00:22:21
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: gdm3 PID: 5915, Parent PID: 5856

General

Start time (UTC):	00:22:21
Start date (UTC):	07/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Analysis Process: Default PID: 5915, Parent PID: 5856

General

Start time (UTC):	00:22:21
Start date (UTC):	07/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: systemd PID: 5860, Parent PID: 1

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: accounts-daemon PID: 5860, Parent PID: 1

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	/usr/lib/accountsservice/accounts-daemon
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: accounts-daemon PID: 5864, Parent PID: 5860

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/lib/accountsservice/accounts-daemon
Arguments:	-
File size:	203192 bytes
MD5 hash:	01a899e3fb5e7e434bea1290255a1f30

Analysis Process: language-validate PID: 5864, Parent PID: 5860

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/share/language-tools/language-validate
Arguments:	/usr/share/language-tools/language-validate en_US.UTF-8
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-validate PID: 5865, Parent PID: 5864

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/share/language-tools/language-validate
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: language-options PID: 5865, Parent PID: 5864

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/share/language-tools/language-options
Arguments:	/usr/share/language-tools/language-options
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: language-options PID: 5866, Parent PID: 5865

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/share/language-tools/language-options
Arguments:	-
File size:	3478464 bytes
MD5 hash:	16a21f464119ea7fad1d3660de963637

Analysis Process: sh PID: 5866, Parent PID: 5865

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	sh -c "locale -a \| grep -F .utf8 "
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: sh PID: 5867, Parent PID: 5866

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: locale PID: 5867, Parent PID: 5866

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/bin/locale
Arguments:	locale -a
File size:	58944 bytes
MD5 hash:	c72a78792469db86d91369c9057f20d2

Analysis Process: sh PID: 5868, Parent PID: 5866

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Analysis Process: grep PID: 5868, Parent PID: 5866

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/bin/grep
Arguments:	grep -F .utf8
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Analysis Process: systemd PID: 5869, Parent PID: 1

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: polkitd PID: 5869, Parent PID: 1

General

Start time (UTC):	00:22:13
Start date (UTC):	07/01/2025
Path:	/usr/lib/policykit-1/polkitd
Arguments:	/usr/lib/policykit-1/polkitd --no-debug
File size:	121504 bytes
MD5 hash:	8efc9b4b5b524210ad2ea1954a9d0e69

Analysis Process: systemd PID: 5881, Parent PID: 1299

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: dbus-daemon PID: 5881, Parent PID: 1299

General

Start time (UTC):	00:22:16
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: systemd PID: 6014, Parent PID: 1

General

Start time (UTC):	00:22:48
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-localed PID: 6014, Parent PID: 1

General

Start time (UTC):	00:22:48
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-localed
Arguments:	/lib/systemd/systemd-localed
File size:	43232 bytes
MD5 hash:	1244af9646256d49594f2a8203329aa9

Analysis Process: systemd PID: 6164, Parent PID: 1

General

Start time (UTC):	00:22:50
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: upowerd PID: 6164, Parent PID: 1

General

Start time (UTC):	00:22:50
Start date (UTC):	07/01/2025
Path:	/usr/lib/upower/upowerd
Arguments:	/usr/lib/upower/upowerd
File size:	260328 bytes
MD5 hash:	1253eea2fe5fe4017069664284e326cd

Analysis Process: systemd PID: 6204, Parent PID: 1299

General

Start time (UTC):	00:22:50
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: pulseaudio PID: 6204, Parent PID: 1299

General

Start time (UTC):	00:22:50
Start date (UTC):	07/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Analysis Process: systemd PID: 6207, Parent PID: 1

General

Start time (UTC):	00:22:51
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: geoclue PID: 6207, Parent PID: 1

General

Start time (UTC):	00:22:51
Start date (UTC):	07/01/2025
Path:	/usr/libexec/geoclue
Arguments:	/usr/libexec/geoclue
File size:	301544 bytes
MD5 hash:	30ac5455f3c598dde91dc87477fb19f7

Analysis Process: systemd PID: 6315, Parent PID: 1

General

Start time (UTC):	00:22:51
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: rtkit-daemon PID: 6315, Parent PID: 1

General

Start time (UTC):	00:22:51
Start date (UTC):	07/01/2025
Path:	/usr/libexec/rtkit-daemon
Arguments:	/usr/libexec/rtkit-daemon
File size:	68096 bytes
MD5 hash:	df0cacf1db4ec95ac70f5b6e06b8ffd7

Analysis Process: systemd PID: 6327, Parent PID: 1

General

Start time (UTC):	00:22:53
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: wpa_supplicant PID: 6327, Parent PID: 1

General

Start time (UTC):	00:22:53
Start date (UTC):	07/01/2025
Path:	/sbin/wpa_supplicant
Arguments:	/sbin/wpa_supplicant -u -s -O /run/wpa_supplicant
File size:	2893136 bytes
MD5 hash:	2a5acf2a7a908a1388a09991ed7881e1

Analysis Process: systemd PID: 6328, Parent PID: 1

General

Start time (UTC):	00:22:53
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: avahi-daemon PID: 6328, Parent PID: 1

General

Start time (UTC):	00:22:53
Start date (UTC):	07/01/2025
Path:	/usr/sbin/avahi-daemon
Arguments:	/usr/sbin/avahi-daemon -s
File size:	141832 bytes
MD5 hash:	0125e88392fec809934928f8638511ff

Analysis Process: avahi-daemon PID: 6330, Parent PID: 6328

General

Start time (UTC):	00:22:54
Start date (UTC):	07/01/2025
Path:	/usr/sbin/avahi-daemon
Arguments:	-
File size:	141832 bytes
MD5 hash:	0125e88392fec809934928f8638511ff

Analysis Process: systemd PID: 6331, Parent PID: 1

General

Start time (UTC):	00:22:54
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: packagekitd PID: 6331, Parent PID: 1

General

Start time (UTC):	00:22:54
Start date (UTC):	07/01/2025
Path:	/usr/lib/packagekit/packagekitd
Arguments:	/usr/lib/packagekit/packagekitd
File size:	289288 bytes
MD5 hash:	46b0c31f013b71a0eb63b1c040f11c86

Analysis Process: packagekitd PID: 6355, Parent PID: 6331

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/lib/packagekit/packagekitd
Arguments:	-
File size:	289288 bytes
MD5 hash:	46b0c31f013b71a0eb63b1c040f11c86

Analysis Process: dpkg PID: 6355, Parent PID: 6331

General

Start time (UTC):	00:22:58
Start date (UTC):	07/01/2025
Path:	/usr/bin/dpkg
Arguments:	/usr/bin/dpkg --print-foreign-architectures
File size:	309944 bytes
MD5 hash:	5e18156b434fc45062eec2f28b9147be

Analysis Process: systemd PID: 6392, Parent PID: 1

General

Start time (UTC):	00:23:05
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: systemd-hostnamed PID: 6392, Parent PID: 1

General

Start time (UTC):	00:23:05
Start date (UTC):	07/01/2025
Path:	/lib/systemd/systemd-hostnamed
Arguments:	/lib/systemd/systemd-hostnamed
File size:	35040 bytes
MD5 hash:	2cc8a5576629a2d5bd98e49a4b8bef65

Analysis Process: systemd PID: 6565, Parent PID: 1

General

Start time (UTC):	00:23:10
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: fprintd PID: 6565, Parent PID: 1

General

Start time (UTC):	00:23:10
Start date (UTC):	07/01/2025
Path:	/usr/libexec/fprintd
Arguments:	/usr/libexec/fprintd
File size:	125312 bytes
MD5 hash:	b0d8829f05cd028529b84b061b660e84

Analysis Process: systemd PID: 6682, Parent PID: 1

General

Start time (UTC):	00:23:13
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: colord PID: 6682, Parent PID: 1

General

Start time (UTC):	00:23:13
Start date (UTC):	07/01/2025
Path:	/usr/libexec/colord
Arguments:	/usr/libexec/colord
File size:	346632 bytes
MD5 hash:	70861d1b2818c9279cd4a5c9035dac1f

Analysis Process: colord PID: 6751, Parent PID: 6682

General

Start time (UTC):	00:23:21
Start date (UTC):	07/01/2025
Path:	/usr/libexec/colord
Arguments:	-
File size:	346632 bytes
MD5 hash:	70861d1b2818c9279cd4a5c9035dac1f

Analysis Process: colord-sane PID: 6751, Parent PID: 6682

General

Start time (UTC):	00:23:21
Start date (UTC):	07/01/2025
Path:	/usr/libexec/colord-sane
Arguments:	/usr/libexec/colord-sane
File size:	18736 bytes
MD5 hash:	5f98d754a07bf1385c3ff001cde3882e

Analysis Process: systemd PID: 6711, Parent PID: 1

General

Start time (UTC):	00:23:20
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: ModemManager PID: 6711, Parent PID: 1

General

Start time (UTC):	00:23:20
Start date (UTC):	07/01/2025
Path:	/usr/sbin/ModemManager
Arguments:	/usr/sbin/ModemManager --filter-policy=strict
File size:	1588448 bytes
MD5 hash:	24379bf705a8ff3b2379314585843d4f

Analysis Process: systemd PID: 6757, Parent PID: 2955

General

Start time (UTC):	00:23:23
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: dbus-daemon PID: 6757, Parent PID: 2955

General

Start time (UTC):	00:23:23
Start date (UTC):	07/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Analysis Process: systemd PID: 6758, Parent PID: 2955

General

Start time (UTC):	00:23:23
Start date (UTC):	07/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Analysis Process: pulseaudio PID: 6758, Parent PID: 2955

General

Start time (UTC):	00:23:23
Start date (UTC):	07/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report vevhea4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/proc/5889/oom_score_adj

/proc/5892/oom_score_adj

/proc/5894/oom_score_adj

/proc/5896/oom_score_adj

/proc/5898/oom_score_adj

/proc/5900/oom_score_adj

/proc/5903/oom_score_adj

/proc/5949/oom_score_adj

/proc/5976/oom_score_adj

/proc/5979/oom_score_adj

/proc/5981/oom_score_adj

/proc/5983/oom_score_adj

/proc/5985/oom_score_adj

/proc/5987/oom_score_adj

/proc/5992/oom_score_adj

/proc/6155/oom_score_adj

/proc/6318/oom_score_adj

/proc/6334/oom_score_adj

/proc/6534/oom_score_adj

/run/avahi-daemon/pid

/run/gdm3.pid

/run/systemd/inhibit/.#1s4lp8V

/run/systemd/inhibit/.#24EVzTY

/run/systemd/inhibit/.#3eHARLX

/run/systemd/inhibit/.#43M01yW

/run/systemd/inhibit/.#5ZqM0hW

/run/systemd/journal/streams/.#9:68432vIcgLv

/run/systemd/journal/streams/.#9:68434JRWcPw

/run/systemd/journal/streams/.#9:68440eD499t

Linux Analysis Report
vevhea4.elf