Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
vejfa5.elf

Overview

General Information

Sample name:vejfa5.elf
Analysis ID:1639121
MD5:73a497bfc6144e1af5647269b5820494
SHA1:292433b0a7a8c2d47dc45f048757eab62139e235
SHA256:58022c64580667150cf8ebfa2246ba62ccc331fff19353ab15c31ac923a635e1
Tags:elfMiraiuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100

Signatures

Multi AV Scanner detection for submitted file
Reads system files that contain records of logged in users
Sample deletes itself
Sample tries to kill multiple processes (SIGKILL)
Sends malformed DNS queries
Creates hidden files and/or directories
Detected TCP or UDP traffic on non-standard ports
Document contains embedded VBA macros
Document misses a certain OLE stream usually present in this Microsoft Office document type
Enumerates processes within the "proc" file system
Executes commands using a shell command-line interpreter
Executes the "grep" command used to find patterns in files or piped streams
Executes the "rm" command used to delete files or directories
Reads CPU information from /sys indicative of miner or evasive malware
Sample has stripped symbol table
Sample tries to kill a process (SIGKILL)
Sample tries to set the executable flag
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1639121
Start date and time:2025-03-15 02:57:57 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 59s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:vejfa5.elf
Detection:MAL
Classification:mal64.spre.troj.evad.linELF@0/2@58/0
  • Report size exceeded maximum capacity and may have missing behavior information.
Command:/tmp/vejfa5.elf
PID:5481
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
kovey/cursinq was here, go away!
Standard Error:
  • system is lnxubuntu20
  • vejfa5.elf (PID: 5481, Parent: 5401, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/vejfa5.elf
  • wrapper-2.0 (PID: 5499, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
  • wrapper-2.0 (PID: 5500, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
  • wrapper-2.0 (PID: 5501, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
  • wrapper-2.0 (PID: 5502, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
    • xfpm-power-backlight-helper (PID: 5522, Parent: 5502, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness
  • wrapper-2.0 (PID: 5503, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
  • wrapper-2.0 (PID: 5504, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
  • xfconfd (PID: 5521, Parent: 5520, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
  • gdm3 New Fork (PID: 5550, Parent: 1400)
  • Default (PID: 5550, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default
  • gdm3 New Fork (PID: 5553, Parent: 1400)
  • Default (PID: 5553, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default
  • systemd New Fork (PID: 5554, Parent: 2935)
  • xfce4-notifyd (PID: 5554, Parent: 2935, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
  • xfwm4 (PID: 5557, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5
  • xfce4-panel (PID: 5560, Parent: 2984, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2d6b1caf2-8023-452b-bd0d-d23295482740
  • rm (PID: 5562, Parent: 2984, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /home/saturnino/.cache/sessions/Thunar-2ec7c2e14-9c4d-40f3-9704-8617ab831fb4
  • xfdesktop (PID: 5563, Parent: 2984, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 260d40b3c-9c6a-4cb1-bbe4-3557725aa528
  • xfwm4 (PID: 5565, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5
  • xfce4-panel (PID: 5566, Parent: 2984, MD5: a15b657c7d54ac1385f1f15004ea6784) Arguments: xfce4-panel --display :1.0 --sm-client-id 2d6b1caf2-8023-452b-bd0d-d23295482740
    • wrapper-2.0 (PID: 5638, Parent: 5566, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
    • wrapper-2.0 (PID: 5639, Parent: 5566, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
    • wrapper-2.0 (PID: 5640, Parent: 5566, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
    • wrapper-2.0 (PID: 5641, Parent: 5566, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
      • xfpm-power-backlight-helper (PID: 5683, Parent: 5641, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness
    • wrapper-2.0 (PID: 5642, Parent: 5566, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
    • wrapper-2.0 (PID: 5647, Parent: 5566, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
  • xfdesktop (PID: 5567, Parent: 2984, MD5: dfb13e1581f80065dcea16f2476f16f2) Arguments: xfdesktop --display :1.0 --sm-client-id 260d40b3c-9c6a-4cb1-bbe4-3557725aa528
  • xfconfd (PID: 5597, Parent: 5596, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
  • systemd New Fork (PID: 5611, Parent: 1)
  • systemd-user-runtime-dir (PID: 5611, Parent: 1, MD5: d55f4b0847f88131dbcfb07435178e54) Arguments: /lib/systemd/systemd-user-runtime-dir stop 127
  • xfwm4 (PID: 5629, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5
  • tumblerd (PID: 5631, Parent: 5630, MD5: 2ef099898845e9c5ec6f1a6fd3ad61af) Arguments: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd
  • xfwm4 (PID: 5646, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5
  • systemd New Fork (PID: 5662, Parent: 2935)
  • Thunar (PID: 5662, Parent: 2935, MD5: ca35dca6175038f11f012b29178a4f46) Arguments: /usr/bin/Thunar --daemon
  • xfwm4 (PID: 5682, Parent: 2984, MD5: 59defa3c00cc30d85ed77b738d55e9da) Arguments: xfwm4 --display :1.0 --sm-client-id 27575c7dd-2dac-48f0-9f3a-eff67ec043e5
  • systemd New Fork (PID: 5695, Parent: 1)
  • accounts-daemon (PID: 5695, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon
    • language-validate (PID: 5711, Parent: 5695, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8
      • language-options (PID: 5712, Parent: 5711, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options
        • sh (PID: 5713, Parent: 5712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "
          • sh New Fork (PID: 5714, Parent: 5713)
          • locale (PID: 5714, Parent: 5713, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a
          • sh New Fork (PID: 5715, Parent: 5713)
          • grep (PID: 5715, Parent: 5713, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8
  • cleanup
No yara matches
No Suricata rule has matched

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: vejfa5.elfReversingLabs: Detection: 44%
Source: vejfa5.elfVirustotal: Detection: 37%Perma Link
Source: /usr/bin/xfwm4 (PID: 5565)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 5631)Reads CPU info from /sys: /sys/devices/system/cpu/online

Networking

barindex
Source: global trafficDNS traffic detected: malformed DNS query: raw.awaken-network.net. [malformed]
Source: global trafficTCP traffic: 192.168.2.13:51634 -> 141.98.10.142:2211
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global trafficDNS traffic detected: DNS query: raw.awaken-network.net
Source: global trafficDNS traffic detected: DNS query: raw.awaken-network.net. [malformed]
Source: global trafficDNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

barindex
Source: /tmp/vejfa5.elf (PID: 5484)SIGKILL sent: pid: 5487, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3104, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3161, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3162, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3163, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3164, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3165, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3170, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3182, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3208, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3212, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5490, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 780, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 780, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 1411, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 1563, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 1563, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 2936, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 2984, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3134, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3134, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3146, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3147, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3147, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3153, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3153, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3158, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3158, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3183, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3183, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3203, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3203, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3220, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3220, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5462, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5462, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5500, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5501, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5503, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5504, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5521, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5554, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5557, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5557, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5560, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5560, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5563, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5563, result: no such processJump to behavior
Source: xfce4-panel.xml.new.31.drOLE indicator, VBA macros: true
Source: xfce4-panel.xml.new.31.drOLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: ELF static info symbol of initial sample.symtab present: no
Source: /tmp/vejfa5.elf (PID: 5484)SIGKILL sent: pid: 5487, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3104, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3161, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3162, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3163, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3164, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3165, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3170, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3182, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3208, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3212, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5490, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 780, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 780, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 1411, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 1563, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 1563, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 2936, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 2984, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3134, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3134, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3146, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3147, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3147, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3153, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3153, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3158, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3158, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3183, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3183, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3203, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3203, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3220, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 3220, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5462, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5462, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5500, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5501, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5503, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5504, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5521, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5554, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5557, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5557, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5560, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5560, result: no such processJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5563, result: successfulJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)SIGKILL sent: pid: 5563, result: no such processJump to behavior
Source: classification engineClassification label: mal64.spre.troj.evad.linELF@0/2@58/0
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5501)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5502)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /home/saturnino/.cacheJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /home/saturnino/.localJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Directory: /home/saturnino/.configJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5521)Directory: /home/saturnino/.cacheJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5521)Directory: /home/saturnino/.localJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5521)Directory: /home/saturnino/.configJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5521)Directory: /home/saturnino/.configJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5554)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.drircJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.cacheJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.localJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.configJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Directory: /home/saturnino/.cacheJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /home/saturnino/.cacheJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /home/saturnino/.localJump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Directory: /home/saturnino/.configJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5638)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5639)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /home/saturnino/.Xdefaults-galassiaJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /home/saturnino/.local/share/fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /home/saturnino/.fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/X11/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cMap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cmap/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/opentype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/X11/Type1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/X11/encodings/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/X11/misc/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/X11/util/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cmap/adobe-cns1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cmap/adobe-gb1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cmap/adobe-japan1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cmap/adobe-japan2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/cmap/adobe-korea1/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/opentype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/opentype/mathjax/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/opentype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/opentype/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/Gargi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/Gubbi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/Nakula/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/Navilu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/Sahadeva/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/Sarai/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/abyssinica/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/ancient-scripts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/dejavu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/droid/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/freefont/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/kacst/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/kacst-one/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lao/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lato/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/liberation/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/liberation2/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-assamese/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-bengali/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-kannada/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-oriya/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-tamil/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/lohit-telugu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/malayalam/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/noto/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/openoffice/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/padauk/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/pagul/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/samyak/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/samyak-fonts/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/sinhala/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/tibetan-machine/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/tlwg/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/truetype/ubuntu/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/type1/urw-base35/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /usr/share/fonts/X11/encodings/large/.uuidJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /home/saturnino/.cacheJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /home/saturnino/.localJump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Directory: /home/saturnino/.configJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/230/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/230/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/230/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/110/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/110/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/110/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/231/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/231/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/231/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/111/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/111/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/111/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/232/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/232/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/232/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/112/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/112/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/112/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/233/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/233/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/233/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/113/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/113/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/113/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/234/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/234/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/234/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/114/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/114/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/114/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/235/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/235/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/235/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/115/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/115/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/115/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/236/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/236/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/236/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/116/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/116/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/116/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/237/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/237/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/237/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/117/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/117/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/117/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/238/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/238/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/238/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/118/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/118/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/118/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/239/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/239/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/239/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/119/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/119/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/119/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/914/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/914/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/914/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/10/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/10/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/10/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/917/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/917/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/917/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/11/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/11/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/11/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/12/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/12/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/12/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/13/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/13/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/13/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/14/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/14/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/14/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/15/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/15/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/15/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/16/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/16/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/16/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/17/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/17/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/17/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/18/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/18/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/18/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/19/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/19/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/19/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/240/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/240/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/240/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/3095/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/3095/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/3095/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/120/statJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/120/cmdlineJump to behavior
Source: /tmp/vejfa5.elf (PID: 5486)File opened: /proc/120/statJump to behavior
Source: /usr/share/language-tools/language-options (PID: 5713)Shell command executed: sh -c "locale -a | grep -F .utf8 "
Source: /bin/sh (PID: 5715)Grep executable: /usr/bin/grep -> grep -F .utf8
Source: /usr/bin/xfce4-session (PID: 5562)Rm executable: /usr/bin/rm -> rm -f /home/saturnino/.cache/sessions/Thunar-2ec7c2e14-9c4d-40f3-9704-8617ab831fb4Jump to behavior
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5695)File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5695)File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)

Hooking and other Techniques for Hiding and Protection

barindex
Source: /tmp/vejfa5.elf (PID: 5484)File: /tmp/vejfa5.elfJump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Reads CPU info from /sys: /sys/devices/system/cpu/onlineJump to behavior
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 5631)Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /tmp/vejfa5.elf (PID: 5481)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5499)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5500)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5501)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5502)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5503)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5504)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5554)Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5557)Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5560)Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5565)Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/xfce4-panel (PID: 5566)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5638)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5639)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5640)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5641)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5642)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5647)Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/xfdesktop (PID: 5567)Queries kernel information via 'uname': Jump to behavior
Source: /usr/bin/xfwm4 (PID: 5629)Queries kernel information via 'uname': Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd (PID: 5631)Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 5646)Queries kernel information via 'uname':
Source: /usr/bin/Thunar (PID: 5662)Queries kernel information via 'uname':
Source: /usr/bin/xfwm4 (PID: 5682)Queries kernel information via 'uname':
Source: vejfa5.elf, 5490.1.00007fa358052000.00007fa35805a000.rw-.sdmpBinary or memory string: vmware
Source: vejfa5.elf, 5481.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5486.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5487.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5490.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5491.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmpBinary or memory string: P$x86_64/usr/bin/qemu-arm/tmp/vejfa5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/vejfa5.elf
Source: vejfa5.elf, 5490.1.00007fa358052000.00007fa35805a000.rw-.sdmpBinary or memory string: vmwareD
Source: vejfa5.elf, 5490.1.0000555fa8f59000.0000555fa8f7f000.rw-.sdmpBinary or memory string: /arm/tmp/vmware-root_727-4290690966
Source: vejfa5.elf, 5490.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmpBinary or memory string: /tmp/vmware-root_727-4290690966
Source: vejfa5.elf, 5481.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmpBinary or memory string: _U/tmp/qemu-open.YCyd6F:
Source: vejfa5.elf, 5481.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5486.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5487.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5490.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5491.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmpBinary or memory string: _U!/etc/qemu-binfmt/arm
Source: vejfa5.elf, 5481.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5486.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5487.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5490.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmp, vejfa5.elf, 5491.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/arm
Source: vejfa5.elf, 5481.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmpBinary or memory string: /tmp/qemu-open.YCyd6F
Source: vejfa5.elf, 5481.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5486.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5487.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5490.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmp, vejfa5.elf, 5491.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmpBinary or memory string: /usr/bin/qemu-arm
Source: vejfa5.elf, 5490.1.00007fa358052000.00007fa35805a000.rw-.sdmpBinary or memory string: P/tmp/systemd-private-fe424f1b0f85425093f40a37100b81c4-colord.service-PB7Ovf$/tmp/vmware-root_727-4290690966X/tmp/systemd-private-fe424f1b0f85425093f40a37100b81c4-systemd-logind.service-WfFmsi4/tmp/hsperfdata_root
Source: vejfa5.elf, 5490.1.0000555fa8f59000.0000555fa8f7f000.rw-.sdmpBinary or memory string: _U/arm/tmp/vmware-root_727-4290690966
Source: vejfa5.elf, 5490.1.0000555fa8e2b000.0000555fa8f59000.rw-.sdmpBinary or memory string: _U!/tmp1/tmp/vmware-root_727-4290690966!
Source: vejfa5.elf, 5486.1.00007fffcbab1000.00007fffcbad2000.rw-.sdmpBinary or memory string: qemu: uncaught target signal 11 (Segmentation fault) - core dumped

Language, Device and Operating System Detection

barindex
Source: /usr/lib/accountsservice/accounts-daemon (PID: 5695)Logged in records file read: /var/log/wtmp
ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity Information2
Scripting
Valid AccountsWindows Management Instrumentation2
Scripting
Path Interception1
File and Directory Permissions Modification
1
OS Credential Dumping
11
Security Software Discovery
Remote ServicesData from Local System1
Non-Standard Port
Exfiltration Over Other Network Medium1
Service Stop
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Hidden Files and Directories
LSASS Memory1
System Owner/User Discovery
Remote Desktop ProtocolData from Removable Media1
Non-Application Layer Protocol
Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)11
File Deletion
Security Account Manager1
System Information Discovery
SMB/Windows Admin SharesData from Network Shared Drive1
Application Layer Protocol
Automated ExfiltrationData Encrypted for Impact
No configs have been found
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1639121 Sample: vejfa5.elf Startdate: 15/03/2025 Architecture: LINUX Score: 64 53 raw.awaken-network.net. [malformed] 2->53 55 raw.awaken-network.net 141.98.10.142, 2211, 51634, 51658 HOSTBALTICLT Lithuania 2->55 57 daisy.ubuntu.com 2->57 61 Multi AV Scanner detection for submitted file 2->61 10 vejfa5.elf 2->10         started        12 systemd accounts-daemon 2->12         started        15 xfce4-session xfce4-panel 2->15         started        17 23 other processes 2->17 signatures3 63 Sends malformed DNS queries 53->63 process4 signatures5 19 vejfa5.elf 10->19         started        69 Reads system files that contain records of logged in users 12->69 22 accounts-daemon language-validate 12->22         started        24 xfce4-panel wrapper-2.0 15->24         started        26 xfce4-panel wrapper-2.0 15->26         started        28 xfce4-panel wrapper-2.0 15->28         started        32 3 other processes 15->32 30 wrapper-2.0 xfpm-power-backlight-helper 17->30         started        process6 signatures7 65 Sample tries to kill multiple processes (SIGKILL) 19->65 67 Sample deletes itself 19->67 34 vejfa5.elf 19->34         started        37 vejfa5.elf 19->37         started        39 vejfa5.elf 19->39         started        41 vejfa5.elf 19->41         started        43 language-validate language-options 22->43         started        45 wrapper-2.0 xfpm-power-backlight-helper 24->45         started        process8 signatures9 59 Sample tries to kill multiple processes (SIGKILL) 34->59 47 language-options sh 43->47         started        process10 process11 49 sh locale 47->49         started        51 sh grep 47->51         started       

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand
SourceDetectionScannerLabelLink
vejfa5.elf44%ReversingLabsLinux.Backdoor.Mirai
vejfa5.elf38%VirustotalBrowse
No Antivirus matches
No Antivirus matches
No Antivirus matches
NameIPActiveMaliciousAntivirus DetectionReputation
daisy.ubuntu.com
162.213.35.25
truefalse
    high
    raw.awaken-network.net
    141.98.10.142
    truefalse
      high
      raw.awaken-network.net. [malformed]
      unknown
      unknownfalse
        high
        • No. of IPs < 25%
        • 25% < No. of IPs < 50%
        • 50% < No. of IPs < 75%
        • 75% < No. of IPs
        IPDomainCountryFlagASNASN NameMalicious
        141.98.10.142
        raw.awaken-network.netLithuania
        209605HOSTBALTICLTfalse
        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
        141.98.10.142Aqua.mips.elfGet hashmaliciousUnknownBrowse
          rjfe686.elfGet hashmaliciousUnknownBrowse
            jfeeps.elfGet hashmaliciousUnknownBrowse
              vjwe68k.elfGet hashmaliciousUnknownBrowse
                eehah4.elfGet hashmaliciousUnknownBrowse
                  weje64.elfGet hashmaliciousUnknownBrowse
                    bejv86.elfGet hashmaliciousUnknownBrowse
                      bejv86.elfGet hashmaliciousMiraiBrowse
                        drea4.elfGet hashmaliciousGafgyt, MiraiBrowse
                          weje64.elfGet hashmaliciousGafgyt, MiraiBrowse
                            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                            daisy.ubuntu.comefea6.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            vjwe68k.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            sshd.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            weje64.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.25
                            hgfs.arm5.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            hgfs.mpsl.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            hgfs.x86.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.25
                            hgfs.arm.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            hgfs.arm6.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.24
                            i.elfGet hashmaliciousUnknownBrowse
                            • 162.213.35.25
                            raw.awaken-network.netAqua.mips.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            jfeeps.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            weje64.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            efjepc.elfGet hashmaliciousGafgyt, MiraiBrowse
                            • 141.98.10.142
                            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                            HOSTBALTICLTAqua.mips.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            rjfe686.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            jfeeps.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            vjwe68k.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            eehah4.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            weje64.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            bejv86.elfGet hashmaliciousUnknownBrowse
                            • 141.98.10.142
                            peYnzEuoAo.exeGet hashmaliciousHancitorBrowse
                            • 141.98.10.54
                            sBvrNv0wtb.exeGet hashmaliciousHancitorBrowse
                            • 141.98.10.54
                            peYnzEuoAo.exeGet hashmaliciousHancitorBrowse
                            • 141.98.10.54
                            No context
                            No context
                            Process:/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
                            File Type:XML 1.0 document, ASCII text
                            Category:dropped
                            Size (bytes):5128
                            Entropy (8bit):4.457618060812407
                            Encrypted:false
                            SSDEEP:96:R14GBdYLSNUH+ZAFQrSRR6dn0tWlTDFwIfM/vfzPpjT9I3jZ/qeH2Wg:74GnYLSNUH+ZAyrSRRYn0taTDKIfMPzv
                            MD5:2A2A7C34B585CDAE5E123F3C5100C253
                            SHA1:E814B1B1531B25581DB76CB813C85E53E1390BA4
                            SHA-256:BCA18B654D038B69B25ACDF84CFF99BF521A1B54F482F1DE2B54CE13AC219A04
                            SHA-512:CEC7A3A7A6AD6C2A6D101A3BF6D89A01EBDCEB0121AA3DE1CEA024268410B39E4E9188382439C7C3FD734C66764B66B13F1D277700B00A2FCB35CB67E31996DD
                            Malicious:false
                            Reputation:moderate, very likely benign file
                            Preview:<?xml version="1.0" encoding="UTF-8"?>..<channel name="xfce4-panel" version="1.0">. <property name="configver" type="int" value="2"/>. <property name="panels" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <property name="panel-1" type="empty">. <property name="position" type="string" value="p=6;x=0;y=0"/>. <property name="length" type="uint" value="100"/>. <property name="position-locked" type="bool" value="true"/>. <property name="icon-size" type="uint" value="16"/>. <property name="size" type="uint" value="26"/>. <property name="plugin-ids" type="array">. <value type="int" value="1"/>. <value type="int" value="2"/>. <value type="int" value="3"/>. <value type="int" value="4"/>. <value type="int" value="5"/>. <value type="int" value="6"/>. <value type="int" value="7"/>. <value type="int" value="8"/>. <value type="int" value="9"/>. <value type="in
                            Process:/tmp/vejfa5.elf
                            File Type:data
                            Category:dropped
                            Size (bytes):26
                            Entropy (8bit):4.132944044980958
                            Encrypted:false
                            SSDEEP:3:TgOa8HJN:TgOHJN
                            MD5:079B40630E4A0B76B23C3BCE169EF09D
                            SHA1:2CEA90056BE9C627F34E568D62B4B3ABDCF5A24F
                            SHA-256:70A13BE099FF5BB666A892A3B10CDBEB1E3D612FEDFBCFF8261E8225007A11CD
                            SHA-512:CEA5628D3E159007A3218F1D99A6B987BCAAF441DCA5EBE7EDE2D5C1EE7B6EC8F09A13C60F95B4D43C4893724CC1AFE8F203B27FC9AADA49A8A9131F4444D36C
                            Malicious:false
                            Reputation:low
                            Preview:/tmp/vejfa5.elf.nwlrbbmqbh
                            File type:ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
                            Entropy (8bit):5.459923426586667
                            TrID:
                            • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                            File name:vejfa5.elf
                            File size:154'400 bytes
                            MD5:73a497bfc6144e1af5647269b5820494
                            SHA1:292433b0a7a8c2d47dc45f048757eab62139e235
                            SHA256:58022c64580667150cf8ebfa2246ba62ccc331fff19353ab15c31ac923a635e1
                            SHA512:f8559043e15331fafe463a20fc3f9a4760d6de47497ca10772ed13d7f4e0aa6f1520b2816b4afae0aa44bd1689ac421a158bcd545147bea5c3f278aa41236f6b
                            SSDEEP:3072:ZuetWLd5Gtvfht4oSELXM8cLl5zB5RvU7:ZuJu15t4o1LXZcZ5z9v2
                            TLSH:C6E30985BC818B53C6D612BBFB5E428D37262768D3EE72079D256F21378785B0E37242
                            File Content Preview:.ELF...a..........(.........4....Y......4. ...(.....................................................PI..@...........Q.td..................................-...L."....t..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

                            ELF header

                            Class:ELF32
                            Data:2's complement, little endian
                            Version:1 (current)
                            Machine:ARM
                            Version Number:0x1
                            Type:EXEC (Executable file)
                            OS/ABI:ARM - ABI
                            ABI Version:0
                            Entry Point Address:0x8190
                            Flags:0x2
                            ELF Header Size:52
                            Program Header Offset:52
                            Program Header Size:32
                            Number of Program Headers:3
                            Section Header Offset:154000
                            Section Header Size:40
                            Number of Section Headers:10
                            Header String Table Index:9
                            NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                            NULL0x00x00x00x00x0000
                            .initPROGBITS0x80940x940x180x00x6AX004
                            .textPROGBITS0x80b00xb00x1d0500x00x6AX0016
                            .finiPROGBITS0x251000x1d1000x140x00x6AX004
                            .rodataPROGBITS0x251140x1d1140x3c780x00x2A004
                            .ctorsPROGBITS0x310000x210000xc0x00x3WA004
                            .dtorsPROGBITS0x3100c0x2100c0x80x00x3WA004
                            .dataPROGBITS0x310200x210200x49300x00x3WA0032
                            .bssNOBITS0x359500x259500xc5f00x00x3WA004
                            .shstrtabSTRTAB0x00x259500x3e0x00x0001
                            TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                            LOAD0x00x80000x80000x20d8c0x20d8c5.92410x5R E0x8000.init .text .fini .rodata
                            LOAD0x210000x310000x310000x49500x10f400.44200x6RW 0x8000.ctors .dtors .data .bss
                            GNU_STACK0x00x00x00x00x00.00000x7RWE0x4
                            TimestampSource PortDest PortSource IPDest IP
                            Mar 15, 2025 02:58:58.475028992 CET516342211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:58.481379986 CET221151634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:58.481487989 CET516342211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:58.527374983 CET516342211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:58.533083916 CET221151634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:58.533162117 CET516342211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:58.538630962 CET221151634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.087538958 CET545447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.092273951 CET773354544141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.092318058 CET545447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.094746113 CET545447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.099370003 CET773354544141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.102905035 CET545467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.107569933 CET773354546141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.107629061 CET545467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.108891964 CET545467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.113553047 CET773354546141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.115250111 CET545487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.119945049 CET773354548141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.120009899 CET545487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.121314049 CET545487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.125933886 CET773354548141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.128410101 CET545507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.133088112 CET773354550141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.134094954 CET545507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.136766911 CET545507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.141391039 CET773354550141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.143712044 CET545527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.148437977 CET773354552141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.148509979 CET545527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.150505066 CET545527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.155141115 CET773354552141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.155148983 CET545547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.159862041 CET773354554141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.159904957 CET545547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.161426067 CET545547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.166126013 CET773354554141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.168570995 CET545567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.173295975 CET773354556141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.173355103 CET545567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.174763918 CET545567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.179481030 CET773354556141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.180025101 CET545587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.184717894 CET773354558141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.184819937 CET545587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.188818932 CET545587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.193456888 CET773354558141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.198329926 CET545607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.202982903 CET773354560141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.203027964 CET545607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.205962896 CET545607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.210681915 CET773354560141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.231120110 CET221151634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.231288910 CET516342211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.231373072 CET516342211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.251033068 CET545627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.255728006 CET773354562141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.255805016 CET545627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.263339996 CET545627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.268012047 CET773354562141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.321839094 CET545647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.326494932 CET773354564141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.326596975 CET545647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.385066032 CET545647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.389763117 CET773354564141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.490226984 CET516582211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.494954109 CET221151658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.495039940 CET516582211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.501565933 CET516582211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.506247997 CET221151658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:58:59.506290913 CET516582211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:58:59.510932922 CET221151658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:00.195312977 CET221151658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:00.195411921 CET516582211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:00.195411921 CET516582211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:00.490931034 CET516602211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:00.495657921 CET221151660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:00.495847940 CET516602211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:00.504637957 CET516602211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:00.509279966 CET221151660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:00.509340048 CET516602211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:00.514036894 CET221151660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:01.199302912 CET221151660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:01.199397087 CET516602211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:01.199398041 CET516602211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:01.336004019 CET516622211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:01.340816975 CET221151662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:01.340868950 CET516622211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:01.346091986 CET516622211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:01.350738049 CET221151662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:01.350779057 CET516622211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:01.355403900 CET221151662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.027647972 CET221151662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.027726889 CET516622211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.027817011 CET516622211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.143583059 CET516642211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.148322105 CET221151664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.148387909 CET516642211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.154467106 CET516642211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.159147024 CET221151664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.159204960 CET516642211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.163857937 CET221151664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.826642990 CET221151664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.826698065 CET516642211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.826740026 CET516642211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.973293066 CET516662211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.978014946 CET221151666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.978092909 CET516662211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.986749887 CET516662211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.991462946 CET221151666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:02.991524935 CET516662211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:02.996162891 CET221151666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:07.610287905 CET545767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:07.615040064 CET773354576141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:07.615104914 CET545767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:07.624773026 CET773354576141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:07.626579046 CET545767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:07.631314039 CET773354576141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.355266094 CET545787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.360167027 CET773354578141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.360255003 CET545787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.365093946 CET773354578141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.368303061 CET545787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.372315884 CET545787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.377034903 CET773354578141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.392055035 CET545807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.396893978 CET773354580141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.396974087 CET545807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.401807070 CET773354580141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.404254913 CET545807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.408442020 CET545807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.413142920 CET773354580141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.429645061 CET545827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.434391022 CET773354582141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.434458017 CET545827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.439362049 CET773354582141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.440274954 CET545827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.445398092 CET545827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.450115919 CET773354582141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.465869904 CET545847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.470722914 CET773354584141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.470781088 CET545847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.475603104 CET773354584141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.476279974 CET545847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.482465029 CET545847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.487165928 CET773354584141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.504760981 CET545867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.509620905 CET773354586141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.509675980 CET545867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.514432907 CET773354586141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.516249895 CET545867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.519210100 CET545867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.523868084 CET773354586141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.539844036 CET545887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.544548988 CET773354588141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.544609070 CET545887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.549505949 CET773354588141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.552247047 CET545887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.556139946 CET545887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.560796976 CET773354588141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.573466063 CET545907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.578134060 CET773354590141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.578182936 CET545907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.585236073 CET773354590141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.588248014 CET545907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.589312077 CET545907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.593952894 CET773354590141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.610548019 CET545927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.615338087 CET773354592141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.615386009 CET545927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.624104023 CET773354592141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.624253035 CET545927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.626580954 CET545927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.631171942 CET773354592141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.651443005 CET545947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.656171083 CET773354594141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.656225920 CET545947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.661041975 CET773354594141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.664249897 CET545947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.669815063 CET545947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.674490929 CET773354594141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.694412947 CET545967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.699193001 CET773354596141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.699270010 CET545967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.704246998 CET773354596141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.708257914 CET545967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.713272095 CET545967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.717912912 CET773354596141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.734957933 CET545987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.739830971 CET773354598141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.739893913 CET545987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.744746923 CET773354598141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.752249002 CET545987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.752979040 CET545987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.757661104 CET773354598141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.767163992 CET546007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.771905899 CET773354600141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.771961927 CET546007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.776716948 CET773354600141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.780329943 CET546007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.781156063 CET546007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.785768986 CET773354600141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.798835993 CET546027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.803627014 CET773354602141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.803679943 CET546027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.808500051 CET773354602141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.812256098 CET546027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.813872099 CET546027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.818552017 CET773354602141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.831964970 CET546047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.836782932 CET773354604141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.836858988 CET546047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.841742039 CET773354604141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.844260931 CET546047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.849369049 CET546047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.854053974 CET773354604141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.865524054 CET546067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.870244026 CET773354606141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.870342016 CET546067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.875188112 CET773354606141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:08.880258083 CET546067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.882327080 CET546067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:08.887077093 CET773354606141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.037627935 CET546087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.042457104 CET773354608141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.042519093 CET546087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.047357082 CET773354608141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.048255920 CET546087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.051364899 CET546087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.056094885 CET773354608141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.066920996 CET546107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.071630955 CET773354610141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.071691990 CET546107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.076544046 CET773354610141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.080246925 CET546107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.082591057 CET546107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.087449074 CET773354610141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.255095005 CET546127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.259740114 CET773354612141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.259802103 CET546127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.264585018 CET773354612141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.268291950 CET546127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.270831108 CET546127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.275439978 CET773354612141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.856964111 CET546147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.861726046 CET773354614141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.861787081 CET546147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.866980076 CET773354614141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.868247986 CET546147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.870219946 CET546147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.875360012 CET773354614141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.883991957 CET546167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.888742924 CET773354616141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.888799906 CET546167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.893670082 CET773354616141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.896249056 CET546167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.914141893 CET546167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.918804884 CET773354616141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.942430973 CET546187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.947065115 CET773354618141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.947117090 CET546187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.951908112 CET773354618141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.952244043 CET546187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.959919930 CET546187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.964531898 CET773354618141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.976293087 CET546207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.980962992 CET773354620141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.981031895 CET546207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.985780001 CET773354620141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:09.988264084 CET546207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.991003990 CET546207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:09.995583057 CET773354620141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.017581940 CET546227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.022200108 CET773354622141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.022243023 CET546227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.026983976 CET773354622141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.032150984 CET546227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.036875010 CET773354622141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.050087929 CET546247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.054773092 CET773354624141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.054862022 CET546247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.059653044 CET773354624141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.060245991 CET546247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.063975096 CET546247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.068684101 CET773354624141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.079066992 CET546267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.083761930 CET773354626141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.083844900 CET546267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.089127064 CET773354626141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.092284918 CET546267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.093967915 CET546267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.098623037 CET773354626141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.112610102 CET546287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.117280006 CET773354628141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.117350101 CET546287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.122112036 CET773354628141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.124249935 CET546287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.125981092 CET546287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.130625010 CET773354628141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.143698931 CET546307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.148402929 CET773354630141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.148503065 CET546307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.153285027 CET773354630141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.158857107 CET546307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.163533926 CET773354630141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.175201893 CET546327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.180068016 CET773354632141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.180114031 CET546327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.184875965 CET773354632141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.188241005 CET546327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.192260027 CET546327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.196894884 CET773354632141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.210860968 CET546347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.215517998 CET773354634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.215562105 CET546347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.220349073 CET773354634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.224250078 CET546347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.224513054 CET546347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.239028931 CET773354634141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.240592957 CET546367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.245565891 CET773354636141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.245621920 CET546367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.251141071 CET773354636141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.252249002 CET546367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.254496098 CET546367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.259114027 CET773354636141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.270728111 CET546387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.275408030 CET773354638141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.275450945 CET546387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.280245066 CET773354638141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.284248114 CET546387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.284535885 CET546387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.289133072 CET773354638141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.297457933 CET546407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.302105904 CET773354640141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.302170992 CET546407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.306941032 CET773354640141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.308260918 CET546407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.310326099 CET546407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.314985037 CET773354640141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.322366953 CET546427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.327014923 CET773354642141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.327065945 CET546427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.331878901 CET773354642141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.332246065 CET546427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.335231066 CET546427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.339906931 CET773354642141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.348977089 CET546447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.353686094 CET773354644141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.353729010 CET546447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.358439922 CET773354644141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.360249043 CET546447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.361411095 CET546447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.366082907 CET773354644141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.374825954 CET546467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.379491091 CET773354646141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.379544973 CET546467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.384347916 CET773354646141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.387581110 CET546467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.392215967 CET773354646141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.527053118 CET546487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.531760931 CET773354648141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.531816006 CET546487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.536602020 CET773354648141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.539711952 CET546487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.544333935 CET773354648141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.552175045 CET546507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.556866884 CET773354650141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.556931019 CET546507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.561682940 CET773354650141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.563898087 CET546507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.568557024 CET773354650141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.577896118 CET546527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.582668066 CET773354652141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.582715988 CET546527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.587500095 CET773354652141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.588257074 CET546527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.591273069 CET546527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.595887899 CET773354652141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.604737043 CET546547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.609390020 CET773354654141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.609493017 CET546547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.618191004 CET546547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.622819901 CET773354654141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.625556946 CET773354654141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.631067991 CET546567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.635776997 CET773354656141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.635818958 CET546567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.640651941 CET773354656141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.643728971 CET546567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.648442030 CET773354656141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.657413960 CET546587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.662049055 CET773354658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.662095070 CET546587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.666892052 CET773354658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.668261051 CET546587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.669255018 CET546587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.673917055 CET773354658141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.681601048 CET546607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.686300039 CET773354660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.686357975 CET546607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.691155910 CET773354660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.692250013 CET546607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.694046021 CET546607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.698796034 CET773354660141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.706589937 CET546627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.711227894 CET773354662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.711298943 CET546627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.716665030 CET773354662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.719032049 CET546627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.723901033 CET773354662141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.732337952 CET546647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.737065077 CET773354664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.737118959 CET546647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.742238998 CET773354664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.744246960 CET546647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.744455099 CET546647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.749053955 CET773354664141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.757145882 CET546667733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.761785984 CET773354666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.761842012 CET546667733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.766956091 CET773354666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.768249035 CET546667733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.769062042 CET546667733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.773670912 CET773354666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.781063080 CET546687733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.785763025 CET773354668141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.785825968 CET546687733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.790643930 CET773354668141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.792256117 CET546687733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.793768883 CET546687733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.798396111 CET773354668141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.827133894 CET546707733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.831907034 CET773354670141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.831953049 CET546707733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.836723089 CET773354670141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.839114904 CET546707733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.843789101 CET773354670141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.851502895 CET546727733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.856240034 CET773354672141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.856296062 CET546727733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.861200094 CET773354672141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.864269018 CET546727733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.864835978 CET546727733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.869477034 CET773354672141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.877773046 CET546747733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.882451057 CET773354674141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.882505894 CET546747733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.887326002 CET773354674141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.888247013 CET546747733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.889277935 CET546747733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.893907070 CET773354674141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.902523041 CET546767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.907223940 CET773354676141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.907274961 CET546767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.912039042 CET773354676141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.912247896 CET546767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.914694071 CET546767733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.919369936 CET773354676141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.931132078 CET546787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.935801029 CET773354678141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.935858965 CET546787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.940628052 CET773354678141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.944247007 CET546787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.946901083 CET546787733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.951546907 CET773354678141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.960094929 CET546807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.964742899 CET773354680141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.964807987 CET546807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.969643116 CET773354680141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:10.972629070 CET546807733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:10.977313042 CET773354680141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.315658092 CET546827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.320422888 CET773354682141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.320492029 CET546827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.325397015 CET773354682141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.328252077 CET546827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.335225105 CET546827733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.339998960 CET773354682141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.491938114 CET546847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.496730089 CET773354684141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.496778965 CET546847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.501615047 CET773354684141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.504288912 CET546847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.504435062 CET546847733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.509064913 CET773354684141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.518124104 CET546867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.522775888 CET773354686141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.522977114 CET546867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.527776957 CET773354686141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.528244972 CET546867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.530760050 CET546867733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.535403013 CET773354686141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.544204950 CET546887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.548840046 CET773354688141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.548896074 CET546887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.553801060 CET773354688141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.556252956 CET546887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.556360006 CET546887733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.560976982 CET773354688141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.571893930 CET546907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.576550007 CET773354690141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.576637030 CET546907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.581414938 CET773354690141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.582252979 CET546907733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.586965084 CET773354690141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.594672918 CET546927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.599385977 CET773354692141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.599436045 CET546927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.604235888 CET773354692141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.607542992 CET546927733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.612195969 CET773354692141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.622999907 CET546947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.627630949 CET773354694141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.627706051 CET546947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.632493973 CET773354694141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.635107040 CET546947733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.639816046 CET773354694141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.649092913 CET546967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.653769970 CET773354696141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.653825045 CET546967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.658622980 CET773354696141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.660254955 CET546967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.660916090 CET546967733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.666594982 CET773354696141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.675688028 CET546987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.680422068 CET773354698141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.680473089 CET546987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.685950041 CET773354698141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.688260078 CET546987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.689769030 CET546987733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.695293903 CET773354698141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.702511072 CET547007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.707171917 CET773354700141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.707252026 CET547007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.712111950 CET773354700141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.712286949 CET547007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.714740038 CET547007733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.719367981 CET773354700141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.730098963 CET547027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.735750914 CET773354702141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.735805035 CET547027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.740567923 CET773354702141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.744252920 CET547027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.745318890 CET547027733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.752919912 CET773354702141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.761720896 CET547047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.767065048 CET773354704141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.767138958 CET547047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.772540092 CET773354704141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.776249886 CET547047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.779011011 CET547047733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.784284115 CET773354704141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.796205997 CET547067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.801950932 CET773354706141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.802000999 CET547067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.807533979 CET773354706141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.810978889 CET547067733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.816405058 CET773354706141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.826714039 CET547087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.831938982 CET773354708141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.832020044 CET547087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.837809086 CET773354708141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.840259075 CET547087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.841500998 CET547087733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.847179890 CET773354708141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.854340076 CET547107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.860063076 CET773354710141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.860102892 CET547107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.865598917 CET773354710141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.867100000 CET547107733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.876785040 CET773354710141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.880376101 CET547127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.885052919 CET773354712141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.885097980 CET547127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.890602112 CET773354712141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.891990900 CET547127733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.896600962 CET773354712141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.905802965 CET547147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.910530090 CET773354714141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.910579920 CET547147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.919133902 CET547147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.919792891 CET773354714141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.920243979 CET547147733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.923794985 CET773354714141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.924899101 CET773354714141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.931902885 CET547167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.936553001 CET773354716141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.936594009 CET547167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.941354036 CET773354716141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.945451021 CET547167733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.950109959 CET773354716141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.984548092 CET547187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.989293098 CET773354718141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.989350080 CET547187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:11.994174004 CET773354718141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:11.996273994 CET547187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.001802921 CET547187733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.006831884 CET773354718141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.226648092 CET547207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.231427908 CET773354720141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.231507063 CET547207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.236327887 CET773354720141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.243441105 CET547207733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.248131037 CET773354720141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.450268030 CET547227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.454921961 CET773354722141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.454965115 CET547227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.460015059 CET773354722141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.464247942 CET547227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.466458082 CET547227733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.471174002 CET773354722141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.677584887 CET547247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.682291985 CET773354724141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.682354927 CET547247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.687217951 CET773354724141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.688266993 CET547247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.693717003 CET547247733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.699714899 CET773354724141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.890352011 CET547267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.895061970 CET773354726141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.895111084 CET547267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.900062084 CET773354726141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:12.900291920 CET547267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.905504942 CET547267733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:12.910211086 CET773354726141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:13.115968943 CET547287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:13.120645046 CET773354728141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:13.121203899 CET547287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:13.126106024 CET773354728141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:13.128253937 CET547287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:13.134032011 CET547287733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:13.139164925 CET773354728141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.049287081 CET547307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.054018974 CET773354730141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.054088116 CET547307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.058901072 CET773354730141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.060287952 CET547307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.063389063 CET547307733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.068037987 CET773354730141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.214663982 CET547327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.219703913 CET773354732141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.219758034 CET547327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.224575043 CET773354732141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.227384090 CET547327733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.232002020 CET773354732141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.261461973 CET547347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.266170979 CET773354734141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.266225100 CET547347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.271008968 CET773354734141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.272259951 CET547347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.273998022 CET547347733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.278635025 CET773354734141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.310350895 CET547367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.314994097 CET773354736141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.315052032 CET547367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.319966078 CET773354736141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.320301056 CET547367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.323115110 CET547367733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.327785969 CET773354736141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.352663994 CET547387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.357450962 CET773354738141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.357506037 CET547387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.362379074 CET773354738141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.365025043 CET547387733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.369740963 CET773354738141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.393647909 CET547407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.398396969 CET773354740141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.398456097 CET547407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.403284073 CET773354740141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.404252052 CET547407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.404309034 CET547407733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.408906937 CET773354740141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.430609941 CET547427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.435625076 CET773354742141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.435673952 CET547427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.440671921 CET547427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.441087961 CET773354742141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.444237947 CET547427733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.445389032 CET773354742141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.448949099 CET773354742141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.462352991 CET547447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.467000961 CET773354744141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.467046976 CET547447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.471513033 CET547447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.472115993 CET773354744141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.472244024 CET547447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.476146936 CET773354744141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.476906061 CET773354744141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.553236961 CET547467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.557956934 CET773354746141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.558012962 CET547467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.560679913 CET547467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.562849045 CET773354746141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.564249039 CET547467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.565290928 CET773354746141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.568882942 CET773354746141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.622823000 CET547487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.627567053 CET773354748141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.627629042 CET547487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.631292105 CET547487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:14.632417917 CET773354748141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:14.635905981 CET773354748141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:16.901415110 CET545467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:16.906335115 CET773354546141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.201078892 CET545627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201081038 CET545647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201081038 CET545607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201090097 CET545547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201090097 CET545587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201093912 CET545567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201093912 CET545527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201107025 CET545507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201107025 CET545467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201112986 CET545487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.201112986 CET545447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:17.247981071 CET773354544141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.247992992 CET773354548141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248003006 CET773354546141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248014927 CET773354550141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248024940 CET773354560141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248034000 CET773354552141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248044014 CET773354556141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248055935 CET773354564141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248064041 CET773354558141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248073101 CET773354554141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:17.248083115 CET773354562141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.482414007 CET773354544141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.482486010 CET545447733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.515201092 CET773354550141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.515264988 CET545507733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.517235041 CET773354546141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.517276049 CET545467733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.528860092 CET773354554141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.528913975 CET545547733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.529536963 CET773354548141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.529582977 CET545487733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.544414997 CET773354556141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.544487000 CET545567733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.546149969 CET773354552141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.546231031 CET545527733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.575553894 CET773354558141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.575623035 CET545587733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.592947006 CET773354560141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.593007088 CET545607733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.625379086 CET773354562141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.625425100 CET545627733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:20.700604916 CET773354564141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:20.700654030 CET545647733192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:24.215723038 CET221151666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:24.215884924 CET516662211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:24.220629930 CET221151666141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:25.346892118 CET518422211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:25.351644993 CET221151842141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:25.351703882 CET518422211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:25.360831976 CET518422211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:25.365581989 CET221151842141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:25.365643024 CET518422211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:25.370306015 CET221151842141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:26.041487932 CET221151842141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:26.044395924 CET518422211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:26.044395924 CET518422211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:26.307332993 CET518442211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:26.312175035 CET221151844141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:26.312247038 CET518442211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:26.317003012 CET518442211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:26.321621895 CET221151844141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:26.321670055 CET518442211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:26.326417923 CET221151844141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:27.031829119 CET221151844141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:27.031891108 CET518442211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.031924009 CET518442211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.178714037 CET518462211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.183501959 CET221151846141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:27.183574915 CET518462211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.188718081 CET518462211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.193365097 CET221151846141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:27.193411112 CET518462211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.198041916 CET221151846141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:27.892155886 CET221151846141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:27.892237902 CET518462211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:27.892293930 CET518462211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.011322021 CET518482211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.016024113 CET221151848141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:28.016108036 CET518482211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.022047043 CET518482211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.026751041 CET221151848141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:28.026839972 CET518482211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.031526089 CET221151848141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:28.733947992 CET221151848141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:28.734057903 CET518482211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.734116077 CET518482211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.918597937 CET518502211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.923291922 CET221151850141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:28.923371077 CET518502211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.935841084 CET518502211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.940567017 CET221151850141.98.10.142192.168.2.13
                            Mar 15, 2025 02:59:28.940665007 CET518502211192.168.2.13141.98.10.142
                            Mar 15, 2025 02:59:28.945306063 CET221151850141.98.10.142192.168.2.13
                            Mar 15, 2025 03:00:18.982886076 CET518502211192.168.2.13141.98.10.142
                            Mar 15, 2025 03:00:18.987658978 CET221151850141.98.10.142192.168.2.13
                            Mar 15, 2025 03:00:28.993181944 CET518502211192.168.2.13141.98.10.142
                            Mar 15, 2025 03:00:28.997847080 CET221151850141.98.10.142192.168.2.13
                            TimestampSource PortDest PortSource IPDest IP
                            Mar 15, 2025 02:58:58.376461029 CET4968753192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:58.383960009 CET53496878.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:58.402112961 CET3523553192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:58.409035921 CET53352358.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:58.424432039 CET5169053192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:58.431294918 CET53516908.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:58.438003063 CET5537553192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:58.445017099 CET53553758.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:58.452002048 CET6035953192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:58.458878040 CET53603598.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:58.466073036 CET3375953192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:58.473803043 CET53337598.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.252202034 CET5881153192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.258405924 CET53588118.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.264838934 CET5677953192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.271011114 CET53567798.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.353332043 CET5552753192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.359308958 CET53555278.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.389786005 CET5357053192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.395834923 CET53535708.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.416948080 CET5164453192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.423135042 CET53516448.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.430614948 CET5773853192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.436646938 CET53577388.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.444704056 CET3808153192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.450753927 CET53380818.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.460232973 CET6016553192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.466540098 CET53601658.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.471134901 CET5394653192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.477269888 CET53539468.8.8.8192.168.2.13
                            Mar 15, 2025 02:58:59.481664896 CET5073953192.168.2.138.8.8.8
                            Mar 15, 2025 02:58:59.487797976 CET53507398.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.203356028 CET3322553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.209553003 CET53332258.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.216665030 CET5485453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.222801924 CET53548548.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.230036974 CET5908153192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.236280918 CET53590818.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.243486881 CET4765553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.249676943 CET53476558.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.257327080 CET4461353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.263366938 CET53446138.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.271047115 CET5737553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.279320955 CET53573758.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.441246033 CET5876553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.447374105 CET53587658.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.454931021 CET3878053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.460964918 CET53387808.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.468081951 CET4279253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.473974943 CET53427928.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:00.480952024 CET4334253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:00.487061977 CET53433428.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.207067013 CET3984653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.213284016 CET53398468.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.220530033 CET6063753192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.226747036 CET53606378.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.233095884 CET5918053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.239309072 CET53591808.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.245909929 CET4088953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.251770973 CET53408898.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.258127928 CET4058253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.264336109 CET53405828.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.270744085 CET4769453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.277062893 CET53476948.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.283622026 CET3988553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.289771080 CET53398858.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.299891949 CET3791853192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.306132078 CET53379188.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.313328028 CET4541553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.319430113 CET53454158.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:01.326739073 CET4362553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:01.333003998 CET53436258.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.033926964 CET4127453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.039975882 CET53412748.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.046689987 CET5959053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.052934885 CET53595908.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.056797981 CET4411153192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.062756062 CET53441118.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.065360069 CET3281453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.071294069 CET53328148.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.073656082 CET4025353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.079715014 CET53402538.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.086410046 CET5217353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.092374086 CET53521738.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.095851898 CET3782053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.101733923 CET53378208.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.108369112 CET5351053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.114481926 CET53535108.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.121162891 CET5082953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.127373934 CET53508298.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.134066105 CET4554953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.140197039 CET53455498.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.834234953 CET3340653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.840195894 CET53334068.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.848526001 CET6052453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.854444981 CET53605248.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.862478971 CET4199553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.868469000 CET53419958.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.876902103 CET5878453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.882947922 CET53587848.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.890476942 CET3564053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.896445036 CET53356408.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.905438900 CET4204753192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.911423922 CET53420478.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.920088053 CET4017853192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.925997972 CET53401788.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.935168028 CET3999053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.941704035 CET53399908.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.949131966 CET3629553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.955260038 CET53362958.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:02.963443995 CET5294353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:02.969351053 CET53529438.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:19.092279911 CET5484053192.168.2.131.1.1.1
                            Mar 15, 2025 02:59:19.092323065 CET4872653192.168.2.131.1.1.1
                            Mar 15, 2025 02:59:19.098963022 CET53487261.1.1.1192.168.2.13
                            Mar 15, 2025 02:59:19.099549055 CET53548401.1.1.1192.168.2.13
                            Mar 15, 2025 02:59:25.226794958 CET4926053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.232980013 CET53492608.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.249826908 CET3513653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.255883932 CET53351368.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.261810064 CET4213253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.267926931 CET53421328.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.273318052 CET5773953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.279220104 CET53577398.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.285244942 CET5330253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.291480064 CET53533028.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.295792103 CET4616953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.301846027 CET53461698.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.306071043 CET5916753192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.311986923 CET53591678.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.317401886 CET3314653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.323410988 CET53331468.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.328223944 CET3795653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.334100962 CET53379568.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:25.338637114 CET4684253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:25.344614983 CET53468428.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.193173885 CET5336953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.199107885 CET53533698.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.204962969 CET4510053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.211148977 CET53451008.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.216747046 CET4111653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.222875118 CET53411168.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.227830887 CET4582453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.233833075 CET53458248.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.238720894 CET4615453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.246444941 CET53461548.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.252825975 CET5507353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.258727074 CET53550738.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.263349056 CET4130153192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.269262075 CET53413018.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.275026083 CET3797853192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.281120062 CET53379788.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.286792040 CET3887253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.292663097 CET53388728.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:26.297875881 CET4813653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:26.304150105 CET53481368.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.037153006 CET3690953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.043155909 CET53369098.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.048784971 CET5004553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.054781914 CET53500458.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.059866905 CET4739153192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.065988064 CET53473918.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.070432901 CET4545953192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.076401949 CET53454598.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.082022905 CET5826553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.088058949 CET53582658.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.093823910 CET4328853192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.099791050 CET53432888.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.105457067 CET5091453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.111510992 CET53509148.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.117686987 CET3706053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.123955965 CET53370608.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.128644943 CET4394053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.143270016 CET53439408.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.170310020 CET5569053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.176387072 CET53556908.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.897964001 CET4625553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.904328108 CET53462558.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.908776999 CET5320753192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.915067911 CET53532078.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.919672012 CET5060453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.925868988 CET53506048.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.931030989 CET3757653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.937401056 CET53375768.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.942742109 CET5652753192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.948813915 CET53565278.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.953617096 CET5194253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.959726095 CET53519428.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.965245008 CET3779253192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.971208096 CET53377928.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.977720976 CET4420353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.983712912 CET53442038.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:27.990700006 CET4103053192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:27.996670008 CET53410308.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.002031088 CET4468553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.008438110 CET53446858.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.746767044 CET4021453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.752979040 CET53402148.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.765578985 CET4005753192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.771660089 CET53400578.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.786271095 CET4437453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.792495966 CET53443748.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.803819895 CET4848853192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.809748888 CET53484888.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.821028948 CET4760553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.827188015 CET53476058.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.838063955 CET4411453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.844130039 CET53441148.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.854779959 CET4606353192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.860698938 CET53460638.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.872823954 CET4273453192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.878906965 CET53427348.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.889662027 CET5869653192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.895889997 CET53586968.8.8.8192.168.2.13
                            Mar 15, 2025 02:59:28.907069921 CET5471553192.168.2.138.8.8.8
                            Mar 15, 2025 02:59:28.913386106 CET53547158.8.8.8192.168.2.13
                            TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                            Mar 15, 2025 02:58:58.376461029 CET192.168.2.138.8.8.80x5a42Standard query (0)raw.awaken-network.netA (IP address)IN (0x0001)false
                            Mar 15, 2025 02:58:58.402112961 CET192.168.2.138.8.8.80x8e21Standard query (0)raw.awaken-network.net. [malformed]256482false
                            Mar 15, 2025 02:58:58.424432039 CET192.168.2.138.8.8.80x8e21Standard query (0)raw.awaken-network.net. [malformed]256482false
                            Mar 15, 2025 02:58:58.438003063 CET192.168.2.138.8.8.80x8e21Standard query (0)raw.awaken-network.net. [malformed]256482false
                            Mar 15, 2025 02:58:58.452002048 CET192.168.2.138.8.8.80x8e21Standard query (0)raw.awaken-network.net. [malformed]256482false
                            Mar 15, 2025 02:58:58.466073036 CET192.168.2.138.8.8.80x8e21Standard query (0)raw.awaken-network.net. [malformed]256482false
                            Mar 15, 2025 02:58:59.430614948 CET192.168.2.138.8.8.80x236eStandard query (0)raw.awaken-network.net. [malformed]256483false
                            Mar 15, 2025 02:58:59.444704056 CET192.168.2.138.8.8.80x236eStandard query (0)raw.awaken-network.net. [malformed]256483false
                            Mar 15, 2025 02:58:59.460232973 CET192.168.2.138.8.8.80x236eStandard query (0)raw.awaken-network.net. [malformed]256483false
                            Mar 15, 2025 02:58:59.471134901 CET192.168.2.138.8.8.80x236eStandard query (0)raw.awaken-network.net. [malformed]256483false
                            Mar 15, 2025 02:58:59.481664896 CET192.168.2.138.8.8.80x236eStandard query (0)raw.awaken-network.net. [malformed]256483false
                            Mar 15, 2025 02:59:00.271047115 CET192.168.2.138.8.8.80x1086Standard query (0)raw.awaken-network.net. [malformed]256484false
                            Mar 15, 2025 02:59:00.441246033 CET192.168.2.138.8.8.80x1086Standard query (0)raw.awaken-network.net. [malformed]256484false
                            Mar 15, 2025 02:59:00.454931021 CET192.168.2.138.8.8.80x1086Standard query (0)raw.awaken-network.net. [malformed]256484false
                            Mar 15, 2025 02:59:00.468081951 CET192.168.2.138.8.8.80x1086Standard query (0)raw.awaken-network.net. [malformed]256484false
                            Mar 15, 2025 02:59:00.480952024 CET192.168.2.138.8.8.80x1086Standard query (0)raw.awaken-network.net. [malformed]256484false
                            Mar 15, 2025 02:59:01.270744085 CET192.168.2.138.8.8.80xd873Standard query (0)raw.awaken-network.net. [malformed]256485false
                            Mar 15, 2025 02:59:01.283622026 CET192.168.2.138.8.8.80xd873Standard query (0)raw.awaken-network.net. [malformed]256485false
                            Mar 15, 2025 02:59:01.299891949 CET192.168.2.138.8.8.80xd873Standard query (0)raw.awaken-network.net. [malformed]256485false
                            Mar 15, 2025 02:59:01.313328028 CET192.168.2.138.8.8.80xd873Standard query (0)raw.awaken-network.net. [malformed]256485false
                            Mar 15, 2025 02:59:01.326739073 CET192.168.2.138.8.8.80xd873Standard query (0)raw.awaken-network.net. [malformed]256485false
                            Mar 15, 2025 02:59:02.086410046 CET192.168.2.138.8.8.80x246eStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.095851898 CET192.168.2.138.8.8.80x246eStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.108369112 CET192.168.2.138.8.8.80x246eStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.121162891 CET192.168.2.138.8.8.80x246eStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.134066105 CET192.168.2.138.8.8.80x246eStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.905438900 CET192.168.2.138.8.8.80x7d7bStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.920088053 CET192.168.2.138.8.8.80x7d7bStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.935168028 CET192.168.2.138.8.8.80x7d7bStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.949131966 CET192.168.2.138.8.8.80x7d7bStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:02.963443995 CET192.168.2.138.8.8.80x7d7bStandard query (0)raw.awaken-network.net. [malformed]256486false
                            Mar 15, 2025 02:59:19.092279911 CET192.168.2.131.1.1.10x2051Standard query (0)daisy.ubuntu.comA (IP address)IN (0x0001)false
                            Mar 15, 2025 02:59:19.092323065 CET192.168.2.131.1.1.10xc98aStandard query (0)daisy.ubuntu.com28IN (0x0001)false
                            Mar 15, 2025 02:59:25.295792103 CET192.168.2.138.8.8.80x6c01Standard query (0)raw.awaken-network.net. [malformed]256509false
                            Mar 15, 2025 02:59:25.306071043 CET192.168.2.138.8.8.80x6c01Standard query (0)raw.awaken-network.net. [malformed]256509false
                            Mar 15, 2025 02:59:25.317401886 CET192.168.2.138.8.8.80x6c01Standard query (0)raw.awaken-network.net. [malformed]256509false
                            Mar 15, 2025 02:59:25.328223944 CET192.168.2.138.8.8.80x6c01Standard query (0)raw.awaken-network.net. [malformed]256509false
                            Mar 15, 2025 02:59:25.338637114 CET192.168.2.138.8.8.80x6c01Standard query (0)raw.awaken-network.net. [malformed]256509false
                            Mar 15, 2025 02:59:26.252825975 CET192.168.2.138.8.8.80x4070Standard query (0)raw.awaken-network.net. [malformed]256510false
                            Mar 15, 2025 02:59:26.263349056 CET192.168.2.138.8.8.80x4070Standard query (0)raw.awaken-network.net. [malformed]256510false
                            Mar 15, 2025 02:59:26.275026083 CET192.168.2.138.8.8.80x4070Standard query (0)raw.awaken-network.net. [malformed]256510false
                            Mar 15, 2025 02:59:26.286792040 CET192.168.2.138.8.8.80x4070Standard query (0)raw.awaken-network.net. [malformed]256510false
                            Mar 15, 2025 02:59:26.297875881 CET192.168.2.138.8.8.80x4070Standard query (0)raw.awaken-network.net. [malformed]256510false
                            Mar 15, 2025 02:59:27.093823910 CET192.168.2.138.8.8.80xdaadStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.105457067 CET192.168.2.138.8.8.80xdaadStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.117686987 CET192.168.2.138.8.8.80xdaadStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.128644943 CET192.168.2.138.8.8.80xdaadStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.170310020 CET192.168.2.138.8.8.80xdaadStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.953617096 CET192.168.2.138.8.8.80x1a4fStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.965245008 CET192.168.2.138.8.8.80x1a4fStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.977720976 CET192.168.2.138.8.8.80x1a4fStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:27.990700006 CET192.168.2.138.8.8.80x1a4fStandard query (0)raw.awaken-network.net. [malformed]256511false
                            Mar 15, 2025 02:59:28.002031088 CET192.168.2.138.8.8.80x1a4fStandard query (0)raw.awaken-network.net. [malformed]256256false
                            Mar 15, 2025 02:59:28.838063955 CET192.168.2.138.8.8.80x2393Standard query (0)raw.awaken-network.net. [malformed]256256false
                            Mar 15, 2025 02:59:28.854779959 CET192.168.2.138.8.8.80x2393Standard query (0)raw.awaken-network.net. [malformed]256256false
                            Mar 15, 2025 02:59:28.872823954 CET192.168.2.138.8.8.80x2393Standard query (0)raw.awaken-network.net. [malformed]256256false
                            Mar 15, 2025 02:59:28.889662027 CET192.168.2.138.8.8.80x2393Standard query (0)raw.awaken-network.net. [malformed]256256false
                            Mar 15, 2025 02:59:28.907069921 CET192.168.2.138.8.8.80x2393Standard query (0)raw.awaken-network.net. [malformed]256256false
                            TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                            Mar 15, 2025 02:58:58.383960009 CET8.8.8.8192.168.2.130x5a42No error (0)raw.awaken-network.net141.98.10.142A (IP address)IN (0x0001)false
                            Mar 15, 2025 02:59:19.099549055 CET1.1.1.1192.168.2.130x2051No error (0)daisy.ubuntu.com162.213.35.25A (IP address)IN (0x0001)false
                            Mar 15, 2025 02:59:19.099549055 CET1.1.1.1192.168.2.130x2051No error (0)daisy.ubuntu.com162.213.35.24A (IP address)IN (0x0001)false

                            System Behavior