Edit tour

Linux Analysis Report
G2k1zBLxQT.elf

Overview

General Information

Sample name:	G2k1zBLxQT.elf renamed because original name is a hash value
Original sample name:	53b65a787299dfaf7896ecaeb0fa7df3.elf
Analysis ID:	1443201
MD5:	53b65a787299dfaf7896ecaeb0fa7df3
SHA1:	4d8562dfb1e317461d0c91ba4c0d37425427d408
SHA256:	063a72a8455d81ea7e5bf04ebfab92270dac488d1bb1d6bd97b5e623c90ee1ff
Tags:	32armelfgafgyt
Infos:

Detection

Gafgyt, Mirai

Score:	96
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Gafgyt

Yara detected Mirai

Creates hidden files and/or directories

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1443201
Start date and time:	2024-05-17 10:50:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	G2k1zBLxQT.elf renamed because original name is a hash value
Original Sample Name:	53b65a787299dfaf7896ecaeb0fa7df3.elf
Detection:	MAL
Classification:	mal96.troj.linELF@0/8@0/0

Runtime Messages

Command:	/tmp/G2k1zBLxQT.elf
PID:	6198
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

G2k1zBLxQT.elf (PID: 6198, Parent: 6117, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/G2k1zBLxQT.elf

G2k1zBLxQT.elf New Fork (PID: 6200, Parent: 6198)

G2k1zBLxQT.elf New Fork (PID: 6202, Parent: 6200)

G2k1zBLxQT.elf New Fork (PID: 6204, Parent: 6202)

G2k1zBLxQT.elf New Fork (PID: 6206, Parent: 6204)

dash New Fork (PID: 6242, Parent: 4331)

rm (PID: 6242, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.85XLiWjmjp /tmp/tmp.J5hFGX77n9 /tmp/tmp.gJbrX1qCf0

dash New Fork (PID: 6243, Parent: 4331)

cat (PID: 6243, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.85XLiWjmjp

dash New Fork (PID: 6244, Parent: 4331)

head (PID: 6244, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6245, Parent: 4331)

tr (PID: 6245, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6246, Parent: 4331)

cut (PID: 6246, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6247, Parent: 4331)

cat (PID: 6247, Parent: 4331, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.85XLiWjmjp

dash New Fork (PID: 6248, Parent: 4331)

head (PID: 6248, Parent: 4331, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6249, Parent: 4331)

tr (PID: 6249, Parent: 4331, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6250, Parent: 4331)

cut (PID: 6250, Parent: 4331, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6251, Parent: 4331)

rm (PID: 6251, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.85XLiWjmjp /tmp/tmp.J5hFGX77n9 /tmp/tmp.gJbrX1qCf0

fwupd New Fork (PID: 6280, Parent: 1)

gpg (PID: 6280, Parent: 1, MD5: 3c2e7402cc788b3a878a1d2bea56afbf) Arguments: /usr/bin/gpg --version

fwupd New Fork (PID: 6282, Parent: 1)

gpg (PID: 6282, Parent: 1, MD5: 3c2e7402cc788b3a878a1d2bea56afbf) Arguments: gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 24 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 26 --import -- -&27

fwupd New Fork (PID: 6284, Parent: 1)

gpg (PID: 6284, Parent: 1, MD5: 3c2e7402cc788b3a878a1d2bea56afbf) Arguments: gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 24 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 26 --import -- -&27

fwupd New Fork (PID: 6286, Parent: 1)

gpg (PID: 6286, Parent: 1, MD5: 3c2e7402cc788b3a878a1d2bea56afbf) Arguments: gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 23 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 25 --verify -- -&26 -&28

fwupd New Fork (PID: 6288, Parent: 1)

gpg (PID: 6288, Parent: 1, MD5: 3c2e7402cc788b3a878a1d2bea56afbf) Arguments: gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 23 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 25 --verify -- -&26 -&28

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
G2k1zBLxQT.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
G2k1zBLxQT.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
G2k1zBLxQT.elf	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x175a:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
G2k1zBLxQT.elf	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x166a:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00

Memory Dumps

Source	Rule	Description	Author	Strings
6200.1.00007f6968017000.00007f696802c000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
6200.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x175a:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
6200.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x166a:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
6198.1.00007f6968017000.00007f696802c000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
6198.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x175a:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
6198.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x166a:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
6202.1.00007f6968017000.00007f696802c000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
6202.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x175a:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
6202.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x166a:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
6206.1.00007f6968017000.00007f696802c000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
6206.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_6a510422	unknown	unknown	0x175a:$a: 0B E5 24 30 1B E5 2C 30 0B E5 1C 00 00 EA 18 30 1B E5 00 30
6206.1.00007f6968017000.00007f696802c000.r-x.sdmp	Linux_Trojan_Gafgyt_d2953f92	unknown	unknown	0x166a:$a: 1B E5 2A 00 53 E3 0A 00 00 0A 30 30 1B E5 3F 00 53 E3 23 00
Process Memory Space: G2k1zBLxQT.elf PID: 6198	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: G2k1zBLxQT.elf PID: 6200	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Click to see the 9 entries

Snort Signatures

ETPRO TROJAN ELF/BASHLITE Variant CnC Checkin - Source IP: 192.168.2.23 - Destination IP: 93.123.85.139

Timestamp:	05/17/24-10:50:44.237075
SID:	2847206
Source Port:	40898
Destination Port:	23
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: G2k1zBLxQT.elf

Avira: detected

Found malware configuration

Source: G2k1zBLxQT.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.139:23"}

Multi AV Scanner detection for submitted file

Source: G2k1zBLxQT.elf	ReversingLabs: Detection: 71%
Source: G2k1zBLxQT.elf	Virustotal: Detection: 63%			Perma Link

Source: unknown	HTTPS traffic detected: 54.171.230.55:443 -> 192.168.2.23:33606 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.49:443 -> 192.168.2.23:58948 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2847206 ETPRO TROJAN ELF/BASHLITE Variant CnC Checkin 192.168.2.23:40898 -> 93.123.85.139:23

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.139
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.139
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.139
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.230.55
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49
Source: unknown	TCP traffic detected without corresponding DNS query: 151.101.194.49

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33606
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58948
Source: unknown	Network traffic detected: HTTP traffic on port 58948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: unknown	HTTPS traffic detected: 54.171.230.55:443 -> 192.168.2.23:33606 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.49:443 -> 192.168.2.23:58948 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: G2k1zBLxQT.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: G2k1zBLxQT.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 6200.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 6200.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 6198.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 6198.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 6202.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 6202.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown
Source: 6206.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 Author: unknown
Source: 6206.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 Author: unknown

Source: G2k1zBLxQT.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: G2k1zBLxQT.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 6200.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 6200.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 6198.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 6198.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 6202.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 6202.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16
Source: 6206.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6a510422 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 8ee116ff41236771cdc8dc4b796c3b211502413ae631d5b5aedbbaa2eccc3b75, id = 6a510422-3662-4fdb-9c03-0101f16e87cd, last_modified = 2021-09-16
Source: 6206.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d2953f92 severity = 100, os = linux, arch_context = x86, creation_date = 2021-06-28, scan_context = file, memory, reference = 14cc92b99daa0c91aa09d9a7996ee5549a5cacd7be733960b2cf3681a7c2b628, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 276c6d62a8a335d0e2421b6b5b90c2c0eb69eec294bc9fcdeb7743abbf08d8bc, id = d2953f92-62ee-428d-88c5-723914c88c6e, last_modified = 2021-09-16

Source: classification engine

Classification label: mal96.troj.linELF@0/8@0/0

Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/bzero.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S
Source: G2k1zBLxQT.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/vfork.S

Source: /usr/bin/gpg (PID: 6282)	File: /var/lib/fwupd/gnupg/.#lk0x0000555848f78b80.galassia.6282	Jump to behavior
Source: /usr/bin/gpg (PID: 6284)	File: /var/lib/fwupd/gnupg/.#lk0x000056031a3c1b80.galassia.6284	Jump to behavior
Source: /usr/bin/gpg (PID: 6286)	File: /var/lib/fwupd/gnupg/.#lk0x00005648efbfcb80.galassia.6286	Jump to behavior
Source: /usr/bin/gpg (PID: 6288)	File: /var/lib/fwupd/gnupg/.#lk0x0000558759f3db80.galassia.6288	Jump to behavior

Source: /usr/bin/dash (PID: 6242)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.85XLiWjmjp /tmp/tmp.J5hFGX77n9 /tmp/tmp.gJbrX1qCf0			Jump to behavior
Source: /usr/bin/dash (PID: 6251)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.85XLiWjmjp /tmp/tmp.J5hFGX77n9 /tmp/tmp.gJbrX1qCf0			Jump to behavior

Source: /tmp/G2k1zBLxQT.elf (PID: 6198)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpg (PID: 6282)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpg (PID: 6284)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpg (PID: 6286)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpg (PID: 6288)	Queries kernel information via 'uname':	Jump to behavior

Source: G2k1zBLxQT.elf, 6198.1.000055edd7bac000.000055edd7cda000.rw-.sdmp, G2k1zBLxQT.elf, 6200.1.000055edd7bac000.000055edd7cda000.rw-.sdmp, G2k1zBLxQT.elf, 6202.1.000055edd7bac000.000055edd7cda000.rw-.sdmp, G2k1zBLxQT.elf, 6206.1.000055edd7bac000.000055edd7cda000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: G2k1zBLxQT.elf, 6198.1.000055edd7bac000.000055edd7cda000.rw-.sdmp, G2k1zBLxQT.elf, 6200.1.000055edd7bac000.000055edd7cda000.rw-.sdmp, G2k1zBLxQT.elf, 6202.1.000055edd7bac000.000055edd7cda000.rw-.sdmp, G2k1zBLxQT.elf, 6206.1.000055edd7bac000.000055edd7cda000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: G2k1zBLxQT.elf, 6198.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp, G2k1zBLxQT.elf, 6200.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp, G2k1zBLxQT.elf, 6202.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp, G2k1zBLxQT.elf, 6206.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: G2k1zBLxQT.elf, 6198.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp, G2k1zBLxQT.elf, 6200.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp, G2k1zBLxQT.elf, 6202.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp, G2k1zBLxQT.elf, 6206.1.00007ffcfd3e7000.00007ffcfd408000.rw-.sdmp	Binary or memory string: fbx86_64/usr/bin/qemu-arm/tmp/G2k1zBLxQT.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/G2k1zBLxQT.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: G2k1zBLxQT.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: G2k1zBLxQT.elf, type: SAMPLE
Source: Yara match	File source: 6200.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6198.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6202.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6206.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: G2k1zBLxQT.elf PID: 6198, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: G2k1zBLxQT.elf PID: 6200, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.86 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Safari/604.1.38
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; CrOS x86_64 9592.96.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.114 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; Lumia 535) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Mobile Safari/537.36 Edge/14.14393
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.4; HTC Desire 620 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 10_2_1 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Mobile/14D27
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en; rv:1.8.1.11) Gecko/20071128 Camino/1.5.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; cs; rv:1.9.2.6) Gecko/20100628 myibrow/4alpha2
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Win 9x 4.90; SG; rv:1.9.2.4) Gecko/20101104 Netscape/9.1.0285
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 Lightning/4.0.2
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) SkypeUriPreview Preview/0.5

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: G2k1zBLxQT.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: G2k1zBLxQT.elf, type: SAMPLE
Source: Yara match	File source: 6200.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6198.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6202.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6206.1.00007f6968017000.00007f696802c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: G2k1zBLxQT.elf PID: 6198, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: G2k1zBLxQT.elf PID: 6200, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.139:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
G2k1zBLxQT.elf	71%	ReversingLabs	Linux.Trojan.Gafgyt
G2k1zBLxQT.elf	64%	Virustotal		Browse
G2k1zBLxQT.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
93.123.85.139:23	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.139:23	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.171.230.55	unknown	United States	16509	AMAZON-02US	false
151.101.194.49	unknown	United States	54113	FASTLYUS	false
93.123.85.139	unknown	Bulgaria	43561	NET1-ASBG	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
54.171.230.55	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	fjTiZgp3uX.elf	Get hash	malicious	Unknown	Browse
	TNLbMmfVrZ.elf	Get hash	malicious	Unknown	Browse
	WGK8uuLBtB.elf	Get hash	malicious	Unknown	Browse
	a-r.m-6.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	x-8.6-.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	da3kfB4m8R.elf	Get hash	malicious	Mirai, Okiru	Browse
	SecuriteInfo.com.ELF.SSHScanner-D.13138.24408.elf	Get hash	malicious	Unknown	Browse
	LnotJxlL40.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.13162.26731.elf	Get hash	malicious	Unknown	Browse
151.101.194.49	Pt1Xss90eE.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	6uPZGWXA2x.elf	Get hash	malicious	Mirai	Browse
	liIBMdOQ7U.elf	Get hash	malicious	Unknown	Browse
	CnEvVVPgmL.elf	Get hash	malicious	Unknown	Browse
	I4i6z8T1j9j8N5349890049902.zip	Get hash	malicious	Unknown	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:va6c2:b9dfa724-1395-4aee-a0d2-16448fc39e11	Get hash	malicious	Unknown	Browse
	ePt0gXr9X2.elf	Get hash	malicious	Unknown	Browse
	1wfo0yCbI7.elf	Get hash	malicious	Mirai	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:fa638089-7002-4695-8f6c-4bd87ff16941	Get hash	malicious	Unknown	Browse
	3048923].eml	Get hash	malicious	Unknown	Browse
93.123.85.139	Y2tzBVyXex.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	cundi.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	cundi.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	5SsPe9hD0H.elf	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Linux.Siggen.9999.9164.5600.elf	Get hash	malicious	Gafgyt	Browse
	zvOF48KNCc.elf	Get hash	malicious	Unknown	Browse
	dgKY4xI5s3.elf	Get hash	malicious	Gafgyt	Browse
	B9N53jcurM.elf	Get hash	malicious	Gafgyt	Browse
	fjTiZgp3uX.elf	Get hash	malicious	Unknown	Browse
	0u918t8y6w.elf	Get hash	malicious	Gafgyt, Mirai	Browse
91.189.91.43	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	cundi.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	cundi.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	5SsPe9hD0H.elf	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Linux.Siggen.9999.9164.5600.elf	Get hash	malicious	Gafgyt	Browse
	zvOF48KNCc.elf	Get hash	malicious	Unknown	Browse
	dgKY4xI5s3.elf	Get hash	malicious	Gafgyt	Browse
	B9N53jcurM.elf	Get hash	malicious	Gafgyt	Browse
	fjTiZgp3uX.elf	Get hash	malicious	Unknown	Browse
	0u918t8y6w.elf	Get hash	malicious	Gafgyt, Mirai	Browse
91.189.91.42	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	cundi.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	cundi.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	5SsPe9hD0H.elf	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Linux.Siggen.9999.9164.5600.elf	Get hash	malicious	Gafgyt	Browse
	zvOF48KNCc.elf	Get hash	malicious	Unknown	Browse
	dgKY4xI5s3.elf	Get hash	malicious	Gafgyt	Browse
	B9N53jcurM.elf	Get hash	malicious	Gafgyt	Browse
	fjTiZgp3uX.elf	Get hash	malicious	Unknown	Browse
	0u918t8y6w.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	cundi.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	cundi.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	cundi.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	cundi.mpsl.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	185.125.190.26
	5SsPe9hD0H.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SecuriteInfo.com.Linux.Siggen.9999.9164.5600.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	szOZ3Y9E76.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	zvOF48KNCc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dgKY4xI5s3.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
CANONICAL-ASGB	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	cundi.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	cundi.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	cundi.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	cundi.mpsl.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	185.125.190.26
	5SsPe9hD0H.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	SecuriteInfo.com.Linux.Siggen.9999.9164.5600.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	szOZ3Y9E76.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	zvOF48KNCc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	dgKY4xI5s3.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
FASTLYUS	https://links.sesamereminders.com/ls/click?upn=u001.bShiO97bKfZC6Sj8Ca95x47ppbVzft7akUEK5zOXM4m6mO8FT1FaiuB9WBC7X-2FBZxnjp_1Iq7IL6-2FIHY-2B-2FDCz7NWEbrYL-2B7Ygb5GcnH-2FtMbLhPi4Ur3L8fJc-2FsSTcJ0UkSH-2BPj06Yg2NJpKve6Pake3ZGjgySpbsWxSnI5Q9ITNehmav1P0x9cfqoATnAJgXns8MN2LObx-2BcAwCg-2BeHZZ8Z6N3MJAYLpsbKQFL435icez6dcazxoo-2BiHTT-2BhKDuLKhT71bqsMcJyk90hjkb3LSk22QQ-3D-3D#bWFzc2ltb19zZWxtb0BiYXJyeS1jYWxsZWJhdXQuY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://iamgold24-recruter.smartforum.xyz/	Get hash	malicious	Unknown	Browse	199.232.192.193
	https://asemailmgmteu.com/api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//csider.com.br/dele/DHMkD/YWxpQGRhdGFicmlja3MuY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://asemailmgmteu.com/api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//csider.com.br/dele/38I3h/aW5mb0BkYXRhYnJpY2tzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:3884f367-683f-4d94-bda4-885dae5d3ddc	Get hash	malicious	Unknown	Browse	151.101.1.138
	https://phisher.knowbe4.com/inbox/?keywords=urls%3A%22https%3A%2F%2Furl2.mailanyone.net%2Fscanner%3Fm%3D1s7cBX-0003xn-5s%26d%3D4%257Cmail%252F90%252F1715869800%252F1s7cBX-0003xn-5s%257Cin2j%257C57e1b682%257C17902772%257C12174482%257C6646196BDA1CAE4281274FFB42ECFAC2%26o%3D%252Fphtx%253A%252Fwtsxkbeetep.aVm.cTG0Ko%252F%252FN%26s%3DUfYFvtZTP-_Tyg7wEY7-OhTdltE%22	Get hash	malicious	HTMLPhisher	Browse	151.101.2.217
	https://clouds-tree-bbeb.lexiegamboa.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://pub-ecb1731253fc43b1be7bb38cb575d5d6.r2.dev/Chimzy.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://raji-6xs.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	SecuriteInfo.com.Win64.SpywareX-gen.2363.7900.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
AMAZON-02US	http://d37qf8t9pe6csu.cloudfront.net	Get hash	malicious	Unknown	Browse	13.227.219.93
	fdOerxdL1v.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	13.225.78.58
	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	54.171.230.55
	https://links.sesamereminders.com/ls/click?upn=u001.bShiO97bKfZC6Sj8Ca95x47ppbVzft7akUEK5zOXM4m6mO8FT1FaiuB9WBC7X-2FBZxnjp_1Iq7IL6-2FIHY-2B-2FDCz7NWEbrYL-2B7Ygb5GcnH-2FtMbLhPi4Ur3L8fJc-2FsSTcJ0UkSH-2BPj06Yg2NJpKve6Pake3ZGjgySpbsWxSnI5Q9ITNehmav1P0x9cfqoATnAJgXns8MN2LObx-2BcAwCg-2BeHZZ8Z6N3MJAYLpsbKQFL435icez6dcazxoo-2BiHTT-2BhKDuLKhT71bqsMcJyk90hjkb3LSk22QQ-3D-3D#bWFzc2ltb19zZWxtb0BiYXJyeS1jYWxsZWJhdXQuY29t	Get hash	malicious	HTMLPhisher	Browse	18.245.31.89
	Erzs#U00e9bet - #U00e1raj#U00e1nlat k#U00e9r#U00e9se.xlsm	Get hash	malicious	FormBook	Browse	3.64.163.50
	https://iamgold24-recruter.smartforum.xyz/	Get hash	malicious	Unknown	Browse	18.193.100.165
	https://documentautomation.wolterskluwer.com/smartdocuments/wizard/Redirect.jsp?url=https://marhenzproperties.com//zlnn/zql/qwad/bmV0d29ya0BoeXVuZGFpbW92ZXguY29t	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	3.125.75.38
	file.exe	Get hash	malicious	RisePro Stealer	Browse	54.180.28.87
	https://asemailmgmteu.com/api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//csider.com.br/dele/DHMkD/YWxpQGRhdGFicmlja3MuY29t	Get hash	malicious	HTMLPhisher	Browse	18.245.31.5
	https://asemailmgmteu.com/api/channels/email/unsubscribe?app_key=UQFtfjD1SJy3G7HKVytUwA&channel_id=hmAq7TweRB-4MzPTFpQTfA&push_id=d85eee10-522d-11ee-99e5-0242ab6c490e&message_type=commercial&campaigns=SME_First_Anniversary_Email_13092023&campaigns=MC&redirect=//csider.com.br/dele/38I3h/aW5mb0BkYXRhYnJpY2tzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	18.245.31.33
INIT7CH	nUjgRSb1i7.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	cundi.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	cundi.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	5SsPe9hD0H.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	SecuriteInfo.com.Linux.Siggen.9999.9164.5600.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	zvOF48KNCc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	dgKY4xI5s3.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	B9N53jcurM.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	fjTiZgp3uX.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	0u918t8y6w.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
NET1-ASBG	kiddionsmodmenu.exe	Get hash	malicious	Unknown	Browse	94.156.8.167
	ModestMenu.bat	Get hash	malicious	Unknown	Browse	94.156.8.167
	rnnTivv9Q5.elf	Get hash	malicious	Mirai	Browse	93.123.30.211
	New Inquiry RFQ.NO_8877.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	94.156.8.210
	8XrwLY8YCe.elf	Get hash	malicious	Mirai	Browse	94.156.8.215
	LQ9k8IZLPM.elf	Get hash	malicious	Mirai	Browse	94.156.8.215
	ZK7TqkGSwx.elf	Get hash	malicious	Mirai	Browse	94.156.8.215
	GI3XcvBCM6.elf	Get hash	malicious	Mirai	Browse	94.156.8.215
	izuz9Yxei5.elf	Get hash	malicious	Mirai	Browse	94.156.8.215
	TOrl35yjIn.elf	Get hash	malicious	Mirai	Browse	94.156.8.215

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/var/lib/fwupd/gnupg/.#lk0x0000555848f78b80.galassia.6282

Download File

Process:	/usr/bin/gpg
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.0086949695628418
Encrypted:	false
SSDEEP:	3:N/DXGvn:svn
MD5:	3B84CBF5D3B84E39B3A82379BF275CE1
SHA1:	E334F1FEC37627D7AFE0779D5416DF683D62B76D
SHA-256:	916555CE96ECEADC20A28FFEBBA2C101E0C4E255CE9870CC83E3A407FC0CE05D
SHA-512:	D73D0577EB3C264D91535BE2D51F2A0D78B785DC95B868720ECB00D91271F6FC1F54AE9107B6B36BDE172F394EB05EA10839FABB8DFC7197608FB51C959F3EB3
Malicious:	false
Reputation:	low
Preview:	6282.galassia.

/var/lib/fwupd/gnupg/.#lk0x0000558759f3db80.galassia.6288

Download File

Process:	/usr/bin/gpg
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.0086949695628418
Encrypted:	false
SSDEEP:	3:N/DdVwvn:Jwvn
MD5:	E2FF5C45621486FF1C786F343FFDE88A
SHA1:	3C4A76F679206E88F277A5004DC61FDC3B13A3D5
SHA-256:	9C6381754401687C833058A1EE02141377412131E02A9E31A934390BEAD40E81
SHA-512:	45796BA26138874484FF69BF2998CC44770799EDC60E6B12C862F4E7FFBE2D6560B717FB6AF73F76E5D452FCA08EA16D840E4105169057D72256BF585F4550E8
Malicious:	false
Reputation:	low
Preview:	6288.galassia.

/var/lib/fwupd/gnupg/.#lk0x000056031a3c1b80.galassia.6284

Download File

Process:	/usr/bin/gpg
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.108694969562842
Encrypted:	false
SSDEEP:	3:N/DRPJIvn:RIvn
MD5:	7E820207A2A97258E5C181B9EFA78439
SHA1:	C3417E936316513F286B6CC160F5F59FFAC9B15D
SHA-256:	F9D1834A6C1C1117D411DC5DCDF56ACEC20B3D671A271F0060A33A3713E02CB2
SHA-512:	664D38C6174B51780BF8F6C838B6E66CD9284BC2643711FFDEA91B43D2877B95CE6C7231E3E25C392C1C6880B0F1FD107AF740A7288BBDAFD6E2048E7C52DDCF
Malicious:	false
Reputation:	low
Preview:	6284.galassia.

/var/lib/fwupd/gnupg/.#lk0x00005648efbfcb80.galassia.6286

Download File

Process:	/usr/bin/gpg
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.0086949695628418
Encrypted:	false
SSDEEP:	3:N/DTaB/vn:ohvn
MD5:	3DE0C2D0D34E4E96FA0064ED77D04525
SHA1:	C68EDCD3F420BB78649EA2E372C3FA12BB56380F
SHA-256:	6F58A885244C485FB6209C42D400481F9304E5738688B14F12FB33EE3737F1C5
SHA-512:	E50EBEBBBDA2F27F8E29D469E072A45E5479CA4A22E8C607F7BBEC5FA61D6CBB06349F6CCE6193E2249C04B05EEC3FC4E58E7E5FD5E2A1F6F8BD9CB433FA4986
Malicious:	false
Reputation:	low
Preview:	6286.galassia.

/var/lib/fwupd/gnupg/pubring.kbx.tmp

Download File

Process:	/usr/bin/gpg
File Type:	GPG keybox database version 1, created-at Tue Aug 17 14:04:41 2021, last-maintained Fri May 17 08:51:25 2024
Category:	dropped
Size (bytes):	2534
Entropy (8bit):	7.620213072266071
Encrypted:	false
SSDEEP:	48:s34Z3Buh7g8ZMUfN1i9N+EvbYJYv20hIhoRU3h0LJv9ARRt:SwUc8ZM+Y+AbcoRU3CARRt
MD5:	4D84D477B7495914F897D175FF18436A
SHA1:	ED1FBA2FFAE3C275BF34E7AAEA8216026448E884
SHA-256:	1FD553F478CEA5C5DDE314C4722BE77AC50F0A7033E5F499A3A20541EFB2A14B
SHA-512:	4A5E012EDCF43AF9DD1CCA1023D8955A3FA908CFF363C90EF47F5521EE73399E4070B240EB18AB04D0C693ECE94B474DE18C97C3FC850AE69EA225AF72DA708B
Malicious:	false
Reputation:	low
Preview:	... ....KBXf....a...fG.....................^........?..A..../.H...E8..... .............~............................a...........U.........T.x8.sU....K'....F....l...K....cL.`Y......=....^~.5\|.%.......2..../.h..O..T........'.6E....HV..?.6l.......e..1o.O.,Y3....1,..a4..\|..s.w......f2......gaIK..i...x.T...~..W..N."..Z..ia!..V..so.....<.6j..........3C&..t1..Gf...j..z...U.........gpg.........Linux Vendor Firmware Service <sign@fwupd.org>....gpg.........7.....!..U..................................H...E8..c....d.....d.....3....a..y..?...........l...1/...)......T.f....-..UoxT... .v...\|...7.....d..PB..>..W{...-..R....&S.....~..2.ps.8:...{..^{?..@.?..e6....y...c.Rw.SK.F.;U)...A..S> an....W.?.\|.{.dB....x~B...V....O....'./!...\|;...Xw.:.!.p,n.A.H\..\...).....gpg......z.......D<............~...$......B.Y..A...n.m...o=.... ......8>4.G8E..L...+G..Z...<.................Z............................a...........[.......I....DR:....!._.P..`.1..6.9..G....O.y.?.......

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.981194190878899
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	G2k1zBLxQT.elf
File size:	125'200 bytes
MD5:	53b65a787299dfaf7896ecaeb0fa7df3
SHA1:	4d8562dfb1e317461d0c91ba4c0d37425427d408
SHA256:	063a72a8455d81ea7e5bf04ebfab92270dac488d1bb1d6bd97b5e623c90ee1ff
SHA512:	0264382574a90663cb9e12478406d40eba6a18af7d316c78d53a7e365e26bbb08f311ab994c423c94d9ab1d7de2bed1f14f485bc9c16aacd43aca0a62b3ce8ee
SSDEEP:	3072:reyaXy6zoAwSQoOFXzM3WJmtmCQA/FXRy4:reyaXy6wFDM3PtmCQA/ZRy4
TLSH:	A1C32801D5508B97C2D227BAB79F425D33336F68979B33119A247FB42FE2B991E39120
File Content Preview:	.ELF..............(.........4....m......4. ...(........p.J...........................................J...J...............P...P...P.......j..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81b0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	93676
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80b4	0xb4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80d0	0xd0	0x11bb4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x19c84	0x11c84	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x19c98	0x11c98	0x2e34	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1cacc	0x14acc	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1cae4	0x14ae4	0x10	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x25000	0x15000	0x4	0x0	0x3	WA	0	0	4
.init_array	INIT_ARRAY	0x25004	0x15004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x25008	0x15008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2500c	0x1500c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x25010	0x15010	0x78	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x25088	0x15088	0x2f8	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x25380	0x15380	0x6680	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x15380	0xcac	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x16030	0xe0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x16110	0x4b0	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x165c0	0x8c	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1664c	0x655	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x16ca4	0x58	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x16cfc	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x16d0c	0xdd	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x171ac	0x4da0	0x10	0x0		23	670	4
.strtab	STRTAB	0x0	0x1bf4c	0x29c4	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x14ae4	0x1cae4	0x1cae4	0x10	0x10	2.4056	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x14af4	0x14af4	6.1318	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x15000	0x25000	0x25000	0x380	0x6a00	3.9886	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x19c84	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x19c98	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1cacc	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1cae4	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x25000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x25004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x25008	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2500c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x25010	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x25088	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x25380	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
$a	.symtab	0x80b4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x19c84	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80c0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x19c90	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x810c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x927c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9644	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9e08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xab54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xad20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb3a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbac0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc610	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd6cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd94c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe52c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe6a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe6d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe7a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe7dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe7f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe824	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe8c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe8e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe958	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe98c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xea20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xea54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeb2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xecd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xecf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeddc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf73c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10750	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1089c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10904	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1093c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10aac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ae4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11614	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ab4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11cd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12068	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12224	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12244	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12584	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12eb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13354	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1342c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13440	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x134d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1353c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13570	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13738	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1387c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13968	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14024	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x140d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x145f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1468c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15174	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x156e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15dcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15eac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16098	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16564	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1699c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16db4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17044	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1710c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17148	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x178f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1867c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x186c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x189f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ac4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18fa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18fdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19048	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x190f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19af0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25008	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x819c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25004	0	NOTYPE	<unknown>	DEFAULT	8
$d	.symtab	0x2508c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x81e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25090	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x82bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8d10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9278	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19cc4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9640	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x996c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9c58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9e00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9e68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa45c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa788	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xab30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xad10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb39c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xba90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc60c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc734	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd6a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd940	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdbf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe500	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xeca0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xecd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25124	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x2512c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xecec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xee3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xee70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xef38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25168	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x25134	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x1ba24	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf71c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf9cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xff64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25270	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10390	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x106a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1074c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10850	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x108f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10938	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x109b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x109ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10aa8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x115f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25274	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x11a98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11aec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2528c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x11cbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11e34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ed8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x252a4	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x2533c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x11fd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12064	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12134	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1221c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c650	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25350	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x12580	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x126ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12da0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12eb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x131b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25368	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x132fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x133a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13654	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13730	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x137e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c6cc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13954	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2b5d8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1397c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fe4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x143ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14fbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c700	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x150a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15160	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x154e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1562c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15dc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ea4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16050	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1654c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x168fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16944	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16994	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16f14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17428	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x177f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1859c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18664	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18d9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18f9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19040	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25378	0	NOTYPE	<unknown>	DEFAULT	12
$t	.symtab	0x80d0	0	NOTYPE	<unknown>	DEFAULT	2
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.1.3506	.symtab	0x1c6cc	24	OBJECT	<unknown>	DEFAULT	4
C.91.4935	.symtab	0x1a2cc	144	OBJECT	<unknown>	DEFAULT	4
C.93.4969	.symtab	0x1b118	12	OBJECT	<unknown>	DEFAULT	4
C.94.4970	.symtab	0x1b0f8	12	OBJECT	<unknown>	DEFAULT	4
GetRandomIP	.symtab	0x9e08	100	FUNC	<unknown>	DEFAULT	2
Laligned	.symtab	0x10148	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x10164	0	NOTYPE	<unknown>	DEFAULT	2
OreoServer	.symtab	0x25090	4	OBJECT	<unknown>	DEFAULT	12
Q	.symtab	0x253c0	16384	OBJECT	<unknown>	DEFAULT	13
RandString	.symtab	0x98b8	184	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0xebb4	44	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x25010	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x25124	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1b424	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x25378	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1c7cc	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x2512c	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1b724	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x25000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x25000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x25124	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x25378	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x2512c	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_b	.symtab	0x25128	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x2537c	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x25130	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0xecd8	28	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xeac0	108	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x15508	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x10568	24	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x13968	28	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xea54	108	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x10c34	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x10c58	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x10c10	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x12de8	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x12eb8	108	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x105b0	256	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xebb4	44	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x11af4	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x12224	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x16950	76	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xe958	52	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x133c4	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xec4c	52	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x13570	248	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x13cac	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x13ce0	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x13984	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10904	56	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0xe6a0	52	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x2b5d8	4	OBJECT	<unknown>	HIDDEN	13
__GI_execl	.symtab	0x12ca8	172	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x13354	52	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x12420	184	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x13e50	436	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xea54	108	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x152fc	524	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x14fdc	220	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x15508	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x150b8	188	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x15634	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x14004	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xe894	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0xff94	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x16db4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x16dd8	336	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x169a8	88	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0xffcc	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x15508	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0xe9c0	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1342c	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x13440	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x134c0	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x10880	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0x1089c	104	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x16190	672	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x186c8	760	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x189f4	120	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x13388	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xe7dc	20	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x133f8	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1093c	56	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0xea20	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x133b0	20	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x2b5dc	4	OBJECT	<unknown>	HIDDEN	13
__GI_htonl	.symtab	0x10760	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x10750	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x10858	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x16098	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x1083c	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x107b0	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x17578	644	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x17218	540	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x12140	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xeb60	84	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x106b0	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0xec80	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xe9ec	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x18ac4	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x15b70	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x101b0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x18b30	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x15f48	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x15dcc	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x10080	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x131f8	104	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x16c30	64	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x134d4	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x13508	52	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x10790	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x10780	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xe748	96	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x13738	172	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0xe7a8	52	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x189c0	52	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x10ae4	28	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x11c34	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x11fd8	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x15d1c	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xe98c	52	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1387c	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x109b8	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x13454	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xe918	64	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x109f0	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x10a28	64	FUNC	<unknown>	HIDDEN	2
__GI_seteuid	.symtab	0xe6d4	116	FUNC	<unknown>	HIDDEN	2
__GI_setresuid	.symtab	0xebe0	52	FUNC	<unknown>	HIDDEN	2
__GI_setreuid	.symtab	0xe8e4	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x10a68	68	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x11ef4	228	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x13280	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x10b00	68	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x10b44	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x10b58	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0xec14	56	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x124d8	172	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10aac	56	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0xecf4	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x12068	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x18a6c	88	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x18fdc	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x10478	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x15f6c	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x10190	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x10190	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x10398	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x15cd8	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x18b40	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x10120	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x103bc	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x102cc	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x16058	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x15ef8	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x15eac	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x101d0	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x10580	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x15c60	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x12244	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x126d0	1496	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x106d4	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xe824	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xeca8	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x18fa8	52	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0xe660	64	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0xed28	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x13320	52	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xe8c8	28	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x13d28	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x13da0	176	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x13d7c	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xeb2c	52	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2500c	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x2500c	0	OBJECT	<unknown>	DEFAULT	10
__adddf3	.symtab	0x19244	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x19ba0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x19ba0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x19b84	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x19c30	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x19244	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x19bb8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x19c00	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x19c18	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x19be8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x19bd0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x198e4	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x19654	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x19238	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x19240	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x195a0	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x19578	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x190f4	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x19220	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x195f4	96	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x19554	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xe52c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xe628	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x195e0	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1699c	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr1	.symtab	0x169a0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr2	.symtab	0x169a4	4	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x2b5d0	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x25350	24	OBJECT	<unknown>	DEFAULT	12
__bss_end__	.symtab	0x2ba00	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x25380	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x25380	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x12e64	84	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x185e4	152	FUNC	<unknown>	HIDDEN	2
__cmpdf2	.symtab	0x19b00	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x25128	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x2537c	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x25130	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x2b5e0	4	OBJECT	<unknown>	HIDDEN	13
__data_start	.symtab	0x25088	0	NOTYPE	<unknown>	DEFAULT	12
__decode_dotted	.symtab	0x177fc	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x18c60	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x13318	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1330c	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xe640	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x198e4	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x190f4	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x178f4	2024	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x810c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x25008	0	OBJECT	<unknown>	DEFAULT	9
__dso_handle	.symtab	0x25088	0	OBJECT	<unknown>	HIDDEN	12
__encode_dotted	.symtab	0x19048	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x18b74	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x18d14	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x2ba00	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2b5c8	4	OBJECT	<unknown>	DEFAULT	13
__eqdf2	.symtab	0x19b00	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xecd8	28	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__error	.symtab	0xe69c	0	NOTYPE	<unknown>	DEFAULT	2
__exidx_end	.symtab	0x1caf4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1cae4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2b5c0	4	OBJECT	<unknown>	HIDDEN	13
__extendsfdf2	.symtab	0x195a0	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0xeac0	108	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x15508	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2500c	0	NOTYPE	<unknown>	HIDDEN	9
__fini_array_start	.symtab	0x25008	0	NOTYPE	<unknown>	HIDDEN	9
__fixunsdfsi	.symtab	0x19c30	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x195f4	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x19578	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x195e0	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x19554	36	FUNC	<unknown>	HIDDEN	2
__frame_dummy_init_array_entry	.symtab	0x25004	0	OBJECT	<unknown>	DEFAULT	8
__gedf2	.symtab	0x19af0	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x1867c	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x16c70	324	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x13388	40	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x10568	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x19af0	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x13968	28	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x25008	0	NOTYPE	<unknown>	HIDDEN	8
__init_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	8
__ledf2	.symtab	0x19af8	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xec4c	52	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10904	56	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xea54	108	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xe894	52	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x18ac4	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x13508	52	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xe748	96	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xe98c	52	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x109b8	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xe918	64	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x109f0	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x10a28	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x13280	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2b5c4	4	OBJECT	<unknown>	DEFAULT	13
__libc_waitpid	.symtab	0xe8c8	28	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xeb2c	52	FUNC	<unknown>	DEFAULT	2
__local_nameserver	.symtab	0x1c7ac	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x19af8	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x116c4	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x10c7c	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x25274	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x2b66c	888	OBJECT	<unknown>	DEFAULT	13
__malloc_trim	.symtab	0x11614	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x19654	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x2b9f4	4	OBJECT	<unknown>	HIDDEN	13
__nameservers	.symtab	0x2b9f8	4	OBJECT	<unknown>	HIDDEN	13
__nedf2	.symtab	0x19b00	132	FUNC	<unknown>	HIDDEN	2
__open_etc_hosts	.symtab	0x18d74	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x18188	1116	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x2b5cc	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__progname	.symtab	0x2536c	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x25370	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x12dac	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x12da4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x12da4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x12da4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x12da4	8	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x18da4	516	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x2b9ec	4	OBJECT	<unknown>	HIDDEN	13
__resolv_attempts	.symtab	0x25377	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x2b5e8	24	OBJECT	<unknown>	DEFAULT	13
__resolv_timeout	.symtab	0x25376	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x2b5d4	4	OBJECT	<unknown>	HIDDEN	13
__searchdomain	.symtab	0x2b9f0	4	OBJECT	<unknown>	HIDDEN	13
__searchdomains	.symtab	0x2b9fc	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x10c34	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x10c58	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x10c10	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x25174	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x16f28	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x14024	180	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x16f80	196	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x143e0	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0xee44	52	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4636	.symtab	0x1ba24	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x17044	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1710c	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x17074	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x14520	208	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0xef4c	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x25178	4	OBJECT	<unknown>	DEFAULT	12
__subdf3	.symtab	0x19240	788	FUNC	<unknown>	HIDDEN	2
__syscall_error	.symtab	0x13260	32	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1353c	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x12de8	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x12eb8	108	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x12f24	724	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x25368	4	OBJECT	<unknown>	HIDDEN	12
__udivsi3	.symtab	0xe52c	252	FUNC	<unknown>	HIDDEN	2
__vfork	.symtab	0xe660	64	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x105b0	256	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x16acc	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x16a00	204	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x16b78	184	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2b3d0	10	OBJECT	<unknown>	DEFAULT	13
_bss_end__	.symtab	0x2ba00	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80d1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80d5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80d9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80dd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x80e1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x80e5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x80e9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x80ed	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0xef7c	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2b614	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_handler	.symtab	0x2b63c	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_spec	.symtab	0x25270	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x16918	56	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2b9e4	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x2b9e8	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x25380	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2ba00	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x2b5d8	4	OBJECT	<unknown>	DEFAULT	13
_exit	.symtab	0xebb4	44	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x19c84	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x293d0	8192	OBJECT	<unknown>	DEFAULT	13
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0xefd0	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x147e8	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x2b5dc	4	OBJECT	<unknown>	DEFAULT	13
_init	.symtab	0x80b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x145f0	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x156e0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0xf73c	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0xfa24	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0xf7dc	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0xf820	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0xf9d0	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x12dbc	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x12db4	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2b664	8	OBJECT	<unknown>	HIDDEN	13
_start	.symtab	0x81b0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x140d8	776	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0xeddc	104	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2517c	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x25134	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x15174	392	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x293cc	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x2514c	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x293c8	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x25180	240	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0xee78	212	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x25164	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x12260	448	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x14660	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1baf4	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1468c	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0xf054	1768	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x11af4	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
aeabi_unwind_cpp_pr1.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x12224	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x12224	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x10180	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2b5bc	4	OBJECT	<unknown>	DEFAULT	13
brk	.symtab	0x16950	76	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x10b58	184	FUNC	<unknown>	DEFAULT	2
buf.2975	.symtab	0x2b3e0	16	OBJECT	<unknown>	DEFAULT	13
buf.5444	.symtab	0x2b3f0	440	OBJECT	<unknown>	DEFAULT	13
bzero	.symtab	0x101c0	12	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x2509c	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x16430	308	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0xe958	52	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_tcp_udp	.symtab	0x9fc0	424	FUNC	<unknown>	DEFAULT	2
clock_getres	.symtab	0x133c4	52	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xec4c	52	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x13570	248	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.4959	.symtab	0x25380	1	OBJECT	<unknown>	DEFAULT	13
connect	.symtab	0x10904	56	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x9350	624	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x9e6c	340	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x25094	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x2508c	0	NOTYPE	<unknown>	DEFAULT	12
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0xe6a0	52	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2b5c8	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x2b5d8	4	OBJECT	<unknown>	DEFAULT	13
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x12ca8	172	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x13354	52	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x12420	184	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1c700	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x13e50	436	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xea54	108	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x13668	208	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x927c	212	FUNC	<unknown>	DEFAULT	2
fdopen_pids	.symtab	0x293c0	4	OBJECT	<unknown>	DEFAULT	13
fdopendir	.symtab	0x137e4	152	FUNC	<unknown>	DEFAULT	2
fdpclose	.symtab	0x90f4	392	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x8e6c	648	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x152fc	524	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x14fdc	220	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x15508	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x150b8	188	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x15634	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1c6e8	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x14004	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0xe894	52	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0xff94	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x11878	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x16db4	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x16db4	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x16dd8	336	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x169a8	88	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0xffcc	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getHost	.symtab	0x97f0	104	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0xd94c	700	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x14fdc	220	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x15508	300	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0xe9c0	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x1342c	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x13440	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x134c0	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x10880	28	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0x1089c	104	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x16190	672	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x186c8	760	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x189f4	120	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x13388	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xe7dc	20	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x133f8	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x1093c	56	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x10974	68	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0xea20	52	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x133b0	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x253a8	4	OBJECT	<unknown>	DEFAULT	13
h_errno	.symtab	0x2b5dc	4	OBJECT	<unknown>	DEFAULT	13
hextable	.symtab	0x19cc4	1024	OBJECT	<unknown>	DEFAULT	4
hoste.5443	.symtab	0x2b5a8	20	OBJECT	<unknown>	DEFAULT	13
htonl	.symtab	0x10760	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x10750	16	FUNC	<unknown>	DEFAULT	2
i.4037	.symtab	0x250a0	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0x10478	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x10858	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x16098	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x1083c	28	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x107b0	140	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x17578	644	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x17434	324	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x17218	540	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x17148	208	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xd7bc	400	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81ec	216	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x11d90	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x12140	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xeb60	84	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ioctl_keepalive	.symtab	0xc610	308	FUNC	<unknown>	DEFAULT	2
ioctl_pid	.symtab	0x253a0	4	OBJECT	<unknown>	DEFAULT	13
isatty	.symtab	0x106b0	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xec80	40	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xe9ec	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5501	.symtab	0x25374	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.5500	.symtab	0x2b5e4	4	OBJECT	<unknown>	DEFAULT	13
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bzero.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/vfork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9c60	424	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x18ac4	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x253b8	6	OBJECT	<unknown>	DEFAULT	13
main	.symtab	0xdc08	2340	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x253a4	4	OBJECT	<unknown>	DEFAULT	13
makeIPPacket	.symtab	0xa23c	256	FUNC	<unknown>	DEFAULT	2
makeVSEPacket	.symtab	0xa33c	292	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x10cf4	2336	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
05/17/24-10:50:44.237075	TCP	2847206	ETPRO TROJAN ELF/BASHLITE Variant CnC Checkin	40898	23	192.168.2.23	93.123.85.139

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 17, 2024 10:50:44.230756998 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:50:44.235816956 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:50:44.235882998 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:50:44.237075090 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:50:44.291834116 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:50:44.564563990 CEST	43928	443	192.168.2.23	91.189.91.42
May 17, 2024 10:50:49.936094999 CEST	42836	443	192.168.2.23	91.189.91.43
May 17, 2024 10:50:50.959839106 CEST	42516	80	192.168.2.23	109.202.202.202
May 17, 2024 10:50:53.881474018 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:50:53.881591082 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:50:53.881664991 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:50:53.881664991 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:50:53.881881952 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:50:53.882203102 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:50:53.883999109 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:50:53.895431995 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:50:53.909357071 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:50:53.909368038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:50:53.909559965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.909559965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.909598112 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:50:53.909641981 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.909885883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:50:53.909929991 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.910449028 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:50:53.910490990 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.912704945 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.912727118 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:50:53.920274973 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:50:53.924989939 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:06.061728954 CEST	43928	443	192.168.2.23	91.189.91.42
May 17, 2024 10:51:10.979918003 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:51:10.980170012 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:51:10.980405092 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:51:10.980818033 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:10.980901957 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:10.981605053 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:10.986629009 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:51:10.990787983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.581399918 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.581414938 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.581656933 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.581656933 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.581700087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.582472086 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.634898901 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.634912014 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.635068893 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.635068893 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.690886974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.690900087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.690995932 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.690995932 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.691050053 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.691098928 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.747368097 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.747380972 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.747529030 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.747551918 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.801542044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.801553011 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.801620960 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.801620960 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.868452072 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.868556023 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.868573904 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.868694067 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.931701899 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.931792021 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.931971073 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.932013988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:12.932125092 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:12.932174921 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.300915956 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.300929070 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.301049948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.301049948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.352758884 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:51:13.353040934 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:51:13.353641987 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.353677034 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.353796959 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.353797913 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.355341911 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:51:13.366703987 CEST	443	33606	54.171.230.55	192.168.2.23
May 17, 2024 10:51:13.366779089 CEST	33606	443	192.168.2.23	54.171.230.55
May 17, 2024 10:51:13.406622887 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.406653881 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.406675100 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.406697035 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.460711002 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.460776091 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.461036921 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.461097002 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.522983074 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.523036003 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.523036003 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.523076057 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.567020893 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.567037106 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.567076921 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.567076921 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.621994972 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.622035027 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.622255087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.622255087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.675424099 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.675447941 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.675652027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.675652027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.728668928 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.728724957 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.729835987 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.781933069 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.781954050 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.782123089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.835958958 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.837835073 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.837887049 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.837985039 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.837985039 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.888156891 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.888180017 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.888377905 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.890180111 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.890536070 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.890824080 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.890996933 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.891057014 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.945115089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.945159912 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.945321083 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.946221113 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.946302891 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:13.997950077 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.998003006 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:13.998214960 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.084197998 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.091370106 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.092123985 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.175997972 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.176424980 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.185241938 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.185256004 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.185319901 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.185319901 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.198775053 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.199387074 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.201283932 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.201378107 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.207097054 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.207197905 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.247184038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.247230053 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.247373104 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.247373104 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.249445915 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.249535084 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.261446953 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.261611938 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.265492916 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.265600920 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.267204046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.267221928 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.267257929 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.267257929 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.289876938 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.289891005 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.289901018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.289937019 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.289937019 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.289937019 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.371614933 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.371710062 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.371786118 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.371786118 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.371956110 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.372104883 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.372647047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.372706890 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.372708082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.372785091 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.373595953 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.373631001 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.373668909 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.373668909 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.374403000 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.374438047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.374490023 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.374490023 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.375338078 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.375400066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.376131058 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.376189947 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.376370907 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.376445055 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.376996994 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.377007961 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.377104998 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.378005981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.378016949 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.378066063 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.378830910 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.378843069 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.379416943 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.382539034 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.382551908 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.383332014 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.383357048 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.383606911 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.383683920 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.383745909 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.383821964 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.383865118 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.384072065 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.384792089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.384803057 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.385066032 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.385673046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.385685921 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.385694027 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.385715961 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.385853052 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.386486053 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.386497021 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.386921883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.386934042 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.386981010 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.386981010 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.387341976 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.388691902 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.388735056 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.388827085 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.388943911 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.389018059 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.389414072 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.389425993 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.390204906 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.390217066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.390260935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.390260935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.390316963 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.391122103 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.391132116 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.391143084 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.391184092 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.391184092 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.391346931 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.393477917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.393558025 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.393696070 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.393778086 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.393821955 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.393985033 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.394175053 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.394218922 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.398282051 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.398396015 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.476578951 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.476592064 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.476803064 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.476813078 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.476819992 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.476881027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.476881027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.476881027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.476881027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.477412939 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.477689981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.477700949 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.477710009 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.477719069 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.477725983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.477751970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.477751970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.477751970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.477751970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.477751970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.477777958 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.478555918 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.478571892 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.478605986 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.478605986 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.481429100 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.481462955 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.481548071 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.481559992 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.481568098 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.481601954 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.481601954 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.481601954 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483484030 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483500957 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483509064 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483520031 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483540058 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483544111 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483544111 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483544111 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483568907 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483568907 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483668089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483676910 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483685970 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483695030 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483705044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483751059 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483751059 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483752012 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483758926 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483752012 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483752012 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483771086 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483807087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483807087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483936071 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483946085 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483953953 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.483984947 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483984947 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.483984947 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.485121012 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.485131025 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.485167027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.485167027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.485625029 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.485634089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.485642910 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.485651016 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.485672951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.485672951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.485672951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.485688925 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.486479998 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.486490965 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.486498117 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.486507893 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.486516953 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.486521006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.486521006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.486534119 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.486534119 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.486543894 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.487370968 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.487379074 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.487380981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.487386942 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.487425089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.487425089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.487425089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.487425089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.488380909 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.488390923 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.488399982 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.488405943 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.488413095 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.488428116 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.488428116 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.488445997 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.488445997 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.488445997 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.488888979 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.488966942 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.491070986 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.491116047 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.497994900 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.498233080 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579003096 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579157114 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579181910 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579267979 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579279900 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579317093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579317093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579606056 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579719067 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579730988 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579740047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579750061 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579760075 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579761028 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579771996 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.579778910 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579778910 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579778910 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579812050 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.579812050 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.580684900 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.580697060 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.580705881 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.580717087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.580729008 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.580738068 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.580739021 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.580739021 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.580739021 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.580754995 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.580754995 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.580754995 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.581624985 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.581635952 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.581645012 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.581671000 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.581671000 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.581671000 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582180023 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582191944 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582220078 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582220078 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582608938 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582621098 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582628965 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582634926 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582643032 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582648993 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.582657099 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582657099 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582657099 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582672119 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582672119 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.582701921 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.583569050 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.583580971 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.583590031 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.583600044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.583611012 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.583617926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.583617926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.583617926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.583635092 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.583661079 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.584574938 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.584585905 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.584595919 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.584604979 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.584614992 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.584626913 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.584626913 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.584626913 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.584631920 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.584644079 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.584664106 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.584664106 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.585505962 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.585517883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.585527897 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.585539103 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.585549116 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.585556984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.585556984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.585556984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.585575104 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.585575104 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.586503983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.586520910 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.586524010 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.586524963 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.586529970 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.586539984 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.586560965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.586560965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.586560965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.586561918 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.586561918 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.586561918 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.587419033 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.587430954 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.587440968 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.587450981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.587460041 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.587467909 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.587469101 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.587469101 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.587486029 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.587486029 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.619368076 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.619592905 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.683490038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.683567047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.683620930 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.683620930 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.683707952 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.683721066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.683751106 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.683765888 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.684159040 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.684170008 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.684178114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.684186935 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.684200048 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.684200048 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.684216022 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.684240103 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.684962034 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685003996 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.685106039 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685117960 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685127020 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685137987 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685148001 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685157061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.685157061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.685157061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.685163021 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.685168982 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.685185909 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.685185909 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686285973 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686295986 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686305046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686315060 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686323881 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686326981 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686326981 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686336040 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686336040 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686336040 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686343908 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686347961 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.686371088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.686371088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.687228918 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.687239885 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.687248945 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.687263012 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.687268972 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.687269926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.687269926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.687269926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.687315941 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.687315941 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.688194036 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.688206911 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.688215017 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.688225031 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.688235044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.688235998 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.688235998 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.688251972 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.688251972 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.688258886 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.689018011 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.689028978 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.689038992 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.689049006 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.689057112 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.689057112 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.689059019 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.689066887 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.689099073 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.689099073 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.689979076 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.689990997 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690000057 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690010071 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690020084 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690021038 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690021038 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690027952 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690032959 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690037012 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690043926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690072060 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690932035 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690943003 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690952063 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690963030 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690973043 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.690978050 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690978050 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690989017 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.690989017 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691003084 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691716909 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.691729069 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.691737890 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.691747904 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.691757917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.691761971 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691761971 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691761971 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691770077 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.691785097 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691797018 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.691814899 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.723143101 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.723201036 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.786873102 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.786889076 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.786962986 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787002087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787192106 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787204981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787214994 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787224054 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787231922 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787240982 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787247896 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787271023 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787775040 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787786007 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787796974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.787811995 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787826061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.787826061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.788541079 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.788552046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.788575888 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.788587093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.788587093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.788588047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.788600922 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.788610935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.788616896 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.788635969 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.788635969 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.788649082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.789504051 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.789516926 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.789526939 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.789535999 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.789546013 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.789552927 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.789552927 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.789557934 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.789561033 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.789585114 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.789585114 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.789597988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.790441990 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.790452957 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.790463924 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.790471077 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.790476084 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.790483952 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.790488005 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.790503025 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.790503025 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.790508986 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.790517092 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.791409969 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.791420937 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.791430950 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.791435957 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.791444063 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.791466951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.791466951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.791481018 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.791487932 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.792347908 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.792359114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.792368889 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.792380095 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.792388916 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.792395115 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.792395115 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.792401075 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.792413950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.792413950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.792428017 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.793289900 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.793303013 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.793313980 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.793324947 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.793334961 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.793334961 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.793354034 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.793354034 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.793374062 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.793380976 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.794286013 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.794298887 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.794307947 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.794318914 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.794328928 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.794333935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.794333935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.794339895 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.794342995 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.794349909 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.794379950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.795016050 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.795022964 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.795027971 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.795032978 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.795032978 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.795056105 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.795069933 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.795069933 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.795078993 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.827152014 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.827341080 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892028093 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892039061 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892254114 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892254114 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892332077 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892488003 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892589092 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892601013 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892631054 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892642975 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892782927 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892808914 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.892831087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.892843008 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.893420935 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.893476009 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.893663883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.893677950 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.893691063 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.893732071 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.893742085 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.893742085 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.894354105 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.894407988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.894608974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.894628048 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.894658089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.894659042 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.895216942 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.895275116 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.895349979 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.895396948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.895457983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.895503044 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.895633936 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.895678997 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.895936012 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.895999908 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.896356106 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.896377087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.896403074 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.896404982 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.896416903 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.896450043 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.896552086 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.896591902 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.897145987 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.897190094 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.897345066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.897362947 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.897396088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.897396088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.897480965 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.897536993 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.898217916 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.898236990 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.898267984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.898267984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.898540974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.898557901 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.898587942 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.898587942 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.899211884 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.899229050 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.899252892 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.899260044 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.899267912 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.899308920 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.899354935 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.899399042 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.900158882 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.900177956 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.900216103 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.900216103 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.900476933 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.900495052 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.900522947 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.900522947 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.901113987 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.901132107 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.901158094 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.901204109 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.901334047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.901376009 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.901916981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.901935101 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.901963949 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.901963949 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.902029991 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.902075052 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.902249098 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.902265072 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.902290106 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.902290106 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.903065920 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.903084040 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.903111935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.903111935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.903223038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.903239965 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.903270006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.903270006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.904145002 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.904189110 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.906733990 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.906753063 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.906780958 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.906794071 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.935158968 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.935225964 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.994523048 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.994605064 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.994621038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.994638920 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.994667053 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.994667053 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.994975090 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.995016098 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.995325089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.995345116 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.995359898 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.995368958 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.995368958 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.995402098 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.995863914 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.995881081 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.995910883 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.995910883 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.996067047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.996083975 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.996117115 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.996117115 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.996437073 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.996480942 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.996829033 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.996866941 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.996998072 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.997014999 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.997040987 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.997051001 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.997661114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.997711897 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.997842073 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.997881889 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.997901917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.997946024 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.998110056 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.998143911 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.998647928 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.998701096 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.998733997 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.998778105 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.998960972 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.999006033 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.999583006 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.999599934 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.999624968 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.999624968 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.999838114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.999855042 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.999870062 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:14.999885082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.999885082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:14.999908924 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.000530958 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.000571966 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.000773907 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.000792980 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.000824928 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.000837088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.001135111 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.001176119 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.001348019 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.001399994 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002134085 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002151966 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002177000 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002187014 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002470970 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002491951 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002513885 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002522945 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002557993 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002599001 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002810001 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002851963 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.002907038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.002953053 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.003531933 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.003549099 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.003567934 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.003576994 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.003576994 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.003611088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.003747940 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.003788948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.004441023 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.004458904 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.004484892 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.004484892 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.004761934 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.004779100 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.004803896 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.004813910 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.005336046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.005378962 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.005418062 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.005466938 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.005573034 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.005614996 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.006138086 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.006155014 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.006176949 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.006190062 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.006607056 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.006649971 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.010932922 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.010977983 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.100498915 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.100512981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.100645065 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.100687027 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.100707054 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.100707054 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.101020098 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.101032019 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.101156950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.101156950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.101346970 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.101392031 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.101424932 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.101479053 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.101843119 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.101886034 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.101958990 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.102001905 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.102034092 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.102046967 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.102073908 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.102085114 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.102905989 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.102919102 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.102952957 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.102952957 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.102988958 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.103032112 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.103193998 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.103205919 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.103235006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.103235006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.103562117 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.103604078 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.104126930 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.104168892 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.104403973 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.104415894 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.104446888 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.104446888 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.104861021 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.104903936 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.104932070 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.104943991 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.104974031 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.104985952 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.105300903 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.105313063 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.105343103 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.105391026 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.105854988 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.105866909 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.105896950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.105896950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.105979919 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.106020927 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.106796026 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.106828928 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.106843948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.106872082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.106921911 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.106962919 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.107240915 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.107292891 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.107672930 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.107724905 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.107778072 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.107793093 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.107820988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.107820988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.107929945 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.107970953 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.108661890 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.108704090 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.108747005 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.108788013 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.108869076 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.108880997 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.108911037 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.108911037 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.109616041 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.109657049 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.109694004 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.109735012 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.109838963 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.109880924 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.110353947 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.110368013 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.110399008 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.110399008 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.110661983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.110672951 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.110712051 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.110712051 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.110768080 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.110810041 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.111502886 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.111546040 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.111670017 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.111711025 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.111743927 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.111785889 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.112090111 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.112135887 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.115585089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.115597963 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.115628004 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.115628004 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.143284082 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.143433094 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.207169056 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.207179070 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.207324982 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.207324982 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.207509041 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.207552910 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.207575083 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.207617044 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.207818031 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.207856894 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.207906961 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.207952976 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.208156109 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.208194017 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.208388090 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.208400011 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.208440065 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.208440065 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.209103107 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.209146023 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.209207058 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.209244967 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.209287882 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.209327936 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.209888935 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.209903002 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.209933996 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.209933996 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.210134983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.210175991 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.210611105 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.210622072 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.210653067 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.210653067 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.210680008 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.210716009 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.211345911 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.211385965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.211409092 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.211447954 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.211553097 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.211594105 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.212132931 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.212145090 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.212176085 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.212176085 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.212661028 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.212701082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.212918043 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.212958097 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.212970018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.212975979 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.212995052 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.213006973 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.213150978 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.213191986 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.213660002 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.213670969 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.213701010 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.213701963 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.214412928 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.214426041 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.214457035 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.214457035 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.214808941 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.214848042 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.215137959 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.215150118 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.215178013 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.215178013 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.215473890 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.215516090 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.215678930 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.215691090 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.215719938 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.215719938 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.215761900 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.215801954 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.216062069 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.216104984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.216576099 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.216588974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.216619015 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.216631889 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.216850042 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.216861963 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.216890097 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.216890097 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.217359066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.217398882 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.217516899 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.217530012 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.217545033 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.217569113 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.217569113 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.217569113 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.218080997 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.218122959 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.218322992 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.218333960 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.218360901 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.218360901 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.218457937 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.218545914 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.219366074 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.219409943 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.223164082 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.223208904 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.310250044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.310261965 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.310350895 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.310350895 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.310549021 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.310559988 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.310587883 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.310600996 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.310919046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.310930014 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.310961962 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.310975075 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.311141968 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.311595917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.311609030 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.311635971 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.311773062 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.311784983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.311810970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.312561035 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.312573910 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.312601089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.312740088 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.312778950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.313031912 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.313532114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.313544035 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.313570023 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.313882113 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.313893080 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.313919067 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.314431906 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.314446926 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.314470053 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.314486027 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.314620972 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.314677954 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.315062046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.315098047 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.315351009 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.315414906 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.315450907 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.315548897 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.316356897 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.316370010 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.316395044 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.316534042 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.316546917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.316580057 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.317368984 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.317409039 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.317415953 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.317428112 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.317476034 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.317539930 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.318243980 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.318283081 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.318327904 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.318425894 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.318438053 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.318463087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.319227934 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.319240093 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.319268942 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.319353104 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.319391012 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.319832087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.319844961 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.319895983 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.320147038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.320203066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.320240021 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.320452929 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.321115017 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.321156025 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.321244001 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.321341991 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.321381092 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.321428061 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.322010994 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.322052002 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.324667931 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.324681044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.324727058 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.351064920 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.351223946 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.415055037 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.415155888 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.415231943 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.415272951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.415292025 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.415332079 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.415582895 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.415595055 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.415606022 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.415625095 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.415635109 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.415635109 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.416002989 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.416043043 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417092085 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417105913 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417135000 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417135000 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417253971 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417293072 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417416096 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417454004 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417536974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417577028 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417689085 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417701006 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.417730093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.417730093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.418339014 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.418349981 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.418360949 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.418382883 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.418411970 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.418638945 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.418653011 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.418701887 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.419301987 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.419318914 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.419361115 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.419576883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.419761896 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.419775009 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.419801950 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.420203924 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.420250893 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.420424938 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.420435905 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.420485020 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.421221018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.421233892 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.421281099 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.421370029 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.421632051 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.421669006 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.422097921 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.422338963 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.422353983 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.422363997 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.422383070 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.422404051 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.423119068 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.423132896 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.423166990 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.423263073 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.423401117 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.423440933 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.424307108 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.424381971 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.424417973 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.424433947 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.424571991 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.424608946 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.424614906 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.424971104 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.425018072 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.425095081 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.425367117 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.425412893 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.425988913 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.426026106 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.426071882 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.426238060 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.426275015 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.426318884 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.427376032 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.429642916 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.429689884 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.429692984 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.429753065 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.459110975 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.459177017 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491162062 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491219044 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491267920 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491323948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491383076 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491416931 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491429090 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491461039 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491729021 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491774082 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491777897 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491817951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.491846085 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.491887093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.492197037 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.492230892 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.492244005 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.492276907 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.492979050 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.493012905 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.493024111 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.493057013 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.493094921 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.493134022 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.493397951 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.493441105 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.494184971 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.494220018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.494235039 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.494257927 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.494267941 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.494304895 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.494347095 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.494482994 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.495229006 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.495275021 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.495346069 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.495381117 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.495516062 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.495556116 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.495697975 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.495740891 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.496395111 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.496431112 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.496481895 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.496537924 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.496598959 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.523447990 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.523590088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.547168016 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.547233105 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.547432899 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.547471046 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.547501087 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.547516108 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.598274946 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.598320007 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.598351002 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.598387957 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.600184917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.600234985 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.600286007 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.600332975 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.600460052 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.600506067 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.654726982 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.654748917 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.654891968 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.654911041 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.655123949 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.655164003 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.709142923 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.709481001 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.709517002 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.709557056 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.709574938 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.709583998 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.761686087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.761708021 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.761850119 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.761929989 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.816657066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.816667080 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.816876888 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.817327976 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.817344904 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.817397118 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.870656967 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.870668888 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.870683908 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.870801926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.929902077 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.929913044 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.929929018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.929944038 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.930074930 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.930279970 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.930418968 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.931049109 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.931150913 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.931159973 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.931210995 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.931241035 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.988928080 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.989064932 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.989120007 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.989386082 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.989396095 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.989414930 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.989469051 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.990124941 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.990199089 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:15.990402937 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.990412951 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:15.990464926 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.116540909 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.118614912 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.118630886 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.118716002 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.120665073 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.120681047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.120696068 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.120728016 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.120764971 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.122620106 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.122627974 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.122694969 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.124504089 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.124511957 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.124573946 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.126369953 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.126383066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.126440048 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.128223896 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.128237009 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.128259897 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.128304005 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.130004883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.130023003 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.130069017 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.131732941 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.131747007 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.131788015 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.133438110 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.133450031 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.133488894 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.135092020 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.135106087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.135149956 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.136671066 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.136682987 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.136693954 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.136722088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.136742115 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.138257027 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.138272047 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.138329983 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.139751911 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.139767885 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.139816046 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.141288042 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.141299009 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.141355038 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.142642975 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.142653942 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.142663956 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.142707109 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.144109964 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.144124985 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.144164085 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.145512104 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.145522118 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.145560980 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.146882057 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.146892071 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.146931887 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.148219109 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.148227930 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.148276091 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.149514914 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.149524927 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.149565935 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.150154114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.150162935 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.150196075 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.151421070 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.151432991 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.151462078 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.152693033 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.152717113 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.152745962 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.153902054 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.153911114 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.153922081 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.153953075 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.153970957 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.155114889 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.155258894 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.177839994 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.177916050 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.178570986 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.178580999 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.178627014 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.178627014 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.179332018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.179339886 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.179353952 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.179387093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.179387093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.179387093 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.180083036 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.180090904 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.180109024 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.180144072 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.180144072 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.180144072 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.181155920 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.181164980 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.181178093 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.181205988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.181205988 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.181232929 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.182256937 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.182265997 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.182270050 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.182276011 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.182297945 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.182297945 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.182312965 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.183341026 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.183352947 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.183363914 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.183388948 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.183418036 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.184381962 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.184390068 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.184401035 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.184441090 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.185352087 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.185363054 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.185369968 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.185376883 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.185393095 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.185420036 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.186572075 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.186578989 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.186618090 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.186660051 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.192516088 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:16.230428934 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:16.300196886 CEST	42836	443	192.168.2.23	91.189.91.43
May 17, 2024 10:51:20.395776033 CEST	42516	80	192.168.2.23	109.202.202.202
May 17, 2024 10:51:25.691411018 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:25.691566944 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:27.028135061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:27.028135061 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:27.050132990 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:27.051007986 CEST	443	58948	151.101.194.49	192.168.2.23
May 17, 2024 10:51:27.051157951 CEST	58948	443	192.168.2.23	151.101.194.49
May 17, 2024 10:51:47.016057968 CEST	43928	443	192.168.2.23	91.189.91.42
May 17, 2024 10:51:47.415211916 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:51:47.415512085 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:51:47.419970989 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:51:47.420031071 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:51:47.420494080 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:51:47.420537949 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:51:47.431236982 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:51:47.431247950 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:51:47.431329966 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:51:47.431329966 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:52:46.476814032 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:52:46.477116108 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:52:47.565956116 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:52:47.566328049 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:53:46.408910990 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:53:46.411813974 CEST	40898	23	192.168.2.23	93.123.85.139
May 17, 2024 10:53:46.559596062 CEST	23	40898	93.123.85.139	192.168.2.23
May 17, 2024 10:53:46.559943914 CEST	40898	23	192.168.2.23	93.123.85.139

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After
May 17, 2024 10:50:53.881881952 CEST	54.171.230.55	443	192.168.2.23	33606	CN=motd.ubuntu.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=ISRG Root X1, O=Internet Security Research Group, C=US	Thu Mar 07 10:27:55 CET 2024 Fri Sep 04 02:00:00 CEST 2020	Wed Jun 05 11:27:54 CEST 2024 Mon Sep 15 18:00:00 CEST 2025
May 17, 2024 10:50:53.881881952 CEST	54.171.230.55	443	192.168.2.23	33606	CN=R3, O=Let's Encrypt, C=US	CN=ISRG Root X1, O=Internet Security Research Group, C=US	Fri Sep 04 02:00:00 CEST 2020	Mon Sep 15 18:00:00 CEST 2025
May 17, 2024 10:50:53.909885883 CEST	151.101.194.49	443	192.168.2.23	58948	CN=cdn.fwupd.org CN=GlobalSign Atlas R3 DV TLS CA 2024 Q2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Atlas R3 DV TLS CA 2024 Q2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Apr 10 21:52:04 CEST 2024 Wed Jan 17 04:24:32 CET 2024	Mon May 12 21:52:03 CEST 2025 Sat Jan 17 01:00:00 CET 2026
May 17, 2024 10:50:53.909885883 CEST	151.101.194.49	443	192.168.2.23	58948	CN=GlobalSign Atlas R3 DV TLS CA 2024 Q2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Jan 17 04:24:32 CET 2024	Sat Jan 17 01:00:00 CET 2026

System Behavior

Analysis Process: G2k1zBLxQT.elf PID: 6198, Parent PID: 6117

General

Start time (UTC):	08:50:43
Start date (UTC):	17/05/2024
Path:	/tmp/G2k1zBLxQT.elf
Arguments:	/tmp/G2k1zBLxQT.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6200, Parent PID: 6198

General

Start time (UTC):	08:50:43
Start date (UTC):	17/05/2024
Path:	/tmp/G2k1zBLxQT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6202, Parent PID: 6200

General

Start time (UTC):	08:50:43
Start date (UTC):	17/05/2024
Path:	/tmp/G2k1zBLxQT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6204, Parent PID: 6202

General

Start time (UTC):	08:50:43
Start date (UTC):	17/05/2024
Path:	/tmp/G2k1zBLxQT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6206, Parent PID: 6204

General

Start time (UTC):	08:50:43
Start date (UTC):	17/05/2024
Path:	/tmp/G2k1zBLxQT.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: dash PID: 6242, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6242, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.85XLiWjmjp /tmp/tmp.J5hFGX77n9 /tmp/tmp.gJbrX1qCf0
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6243, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cat PID: 6243, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.85XLiWjmjp
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Chronological Activities

Analysis Process: dash PID: 6244, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: head PID: 6244, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Chronological Activities

Analysis Process: dash PID: 6245, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: tr PID: 6245, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Chronological Activities

Analysis Process: dash PID: 6246, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cut PID: 6246, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Chronological Activities

Analysis Process: dash PID: 6247, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cat PID: 6247, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.85XLiWjmjp
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Chronological Activities

Analysis Process: dash PID: 6248, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: head PID: 6248, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Chronological Activities

Analysis Process: dash PID: 6249, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: tr PID: 6249, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Chronological Activities

Analysis Process: dash PID: 6250, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: cut PID: 6250, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Chronological Activities

Analysis Process: dash PID: 6251, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6251, Parent PID: 4331

General

Start time (UTC):	08:51:12
Start date (UTC):	17/05/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.85XLiWjmjp /tmp/tmp.J5hFGX77n9 /tmp/tmp.gJbrX1qCf0
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: fwupd PID: 6280, Parent PID: 1

General

Start time (UTC):	08:51:24
Start date (UTC):	17/05/2024
Path:	/usr/libexec/fwupd/fwupd
Arguments:	-
File size:	260616 bytes
MD5 hash:	9baeed1d7c56e92aea5277bdf8b4373f

Chronological Activities

Analysis Process: gpg PID: 6280, Parent PID: 1

General

Start time (UTC):	08:51:24
Start date (UTC):	17/05/2024
Path:	/usr/bin/gpg
Arguments:	/usr/bin/gpg --version
File size:	1066992 bytes
MD5 hash:	3c2e7402cc788b3a878a1d2bea56afbf

Chronological Activities

Analysis Process: fwupd PID: 6282, Parent PID: 1

General

Start time (UTC):	08:51:24
Start date (UTC):	17/05/2024
Path:	/usr/libexec/fwupd/fwupd
Arguments:	-
File size:	260616 bytes
MD5 hash:	9baeed1d7c56e92aea5277bdf8b4373f

Chronological Activities

Analysis Process: gpg PID: 6282, Parent PID: 1

General

Start time (UTC):	08:51:24
Start date (UTC):	17/05/2024
Path:	/usr/bin/gpg
Arguments:	gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 24 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 26 --import -- -&27
File size:	1066992 bytes
MD5 hash:	3c2e7402cc788b3a878a1d2bea56afbf

Chronological Activities

Analysis Process: fwupd PID: 6284, Parent PID: 1

General

Start time (UTC):	08:51:25
Start date (UTC):	17/05/2024
Path:	/usr/libexec/fwupd/fwupd
Arguments:	-
File size:	260616 bytes
MD5 hash:	9baeed1d7c56e92aea5277bdf8b4373f

Chronological Activities

Analysis Process: gpg PID: 6284, Parent PID: 1

General

Start time (UTC):	08:51:25
Start date (UTC):	17/05/2024
Path:	/usr/bin/gpg
Arguments:	gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 24 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 26 --import -- -&27
File size:	1066992 bytes
MD5 hash:	3c2e7402cc788b3a878a1d2bea56afbf

Chronological Activities

Analysis Process: fwupd PID: 6286, Parent PID: 1

General

Start time (UTC):	08:51:25
Start date (UTC):	17/05/2024
Path:	/usr/libexec/fwupd/fwupd
Arguments:	-
File size:	260616 bytes
MD5 hash:	9baeed1d7c56e92aea5277bdf8b4373f

Chronological Activities

Analysis Process: gpg PID: 6286, Parent PID: 1

General

Start time (UTC):	08:51:25
Start date (UTC):	17/05/2024
Path:	/usr/bin/gpg
Arguments:	gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 23 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 25 --verify -- -&26 -&28
File size:	1066992 bytes
MD5 hash:	3c2e7402cc788b3a878a1d2bea56afbf

Chronological Activities

Analysis Process: fwupd PID: 6288, Parent PID: 1

General

Start time (UTC):	08:51:25
Start date (UTC):	17/05/2024
Path:	/usr/libexec/fwupd/fwupd
Arguments:	-
File size:	260616 bytes
MD5 hash:	9baeed1d7c56e92aea5277bdf8b4373f

Chronological Activities

Analysis Process: gpg PID: 6288, Parent PID: 1

General

Start time (UTC):	08:51:25
Start date (UTC):	17/05/2024
Path:	/usr/bin/gpg
Arguments:	gpg --enable-special-filenames --batch --no-sk-comments --homedir /var/lib/fwupd/gnupg --status-fd 23 --no-tty --charset utf8 --enable-progress-filter --exit-on-status-write-error --logger-fd 25 --verify -- -&26 -&28
File size:	1066992 bytes
MD5 hash:	3c2e7402cc788b3a878a1d2bea56afbf

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report G2k1zBLxQT.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/var/lib/fwupd/gnupg/.#lk0x0000555848f78b80.galassia.6282

/var/lib/fwupd/gnupg/.#lk0x0000558759f3db80.galassia.6288

/var/lib/fwupd/gnupg/.#lk0x000056031a3c1b80.galassia.6284

/var/lib/fwupd/gnupg/.#lk0x00005648efbfcb80.galassia.6286

/var/lib/fwupd/gnupg/pubring.kbx.tmp

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

HTTPS Connections

System Behavior

Analysis Process: G2k1zBLxQT.elf PID: 6198, Parent PID: 6117

General

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6200, Parent PID: 6198

General

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6202, Parent PID: 6200

General

Chronological Activities

Analysis Process: G2k1zBLxQT.elf PID: 6204, Parent PID: 6202

General

Linux Analysis Report
G2k1zBLxQT.elf