Edit tour

Linux Analysis Report
a-r.m-6.ISIS.elf

Overview

General Information

Sample name:	a-r.m-6.ISIS.elf
Analysis ID:	1555360
MD5:	5e47686bec1c0c11ff3352d66552edf1
SHA1:	ef7c26f1a0562f915fed9d5a15bf0c0093039402
SHA256:	315d24584e74088b5d651e260d75e871d99c5507ff693ab3a22fb99fd0d3e50e
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1555360
Start date and time:	2024-11-13 19:27:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	a-r.m-6.ISIS.elf
Detection:	MAL
Classification:	mal84.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: a-r.m-6.ISIS.elf

Runtime Messages

Command:	/tmp/a-r.m-6.ISIS.elf
PID:	6241
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

a-r.m-6.ISIS.elf (PID: 6241, Parent: 6162, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/a-r.m-6.ISIS.elf

a-r.m-6.ISIS.elf New Fork (PID: 6243, Parent: 6241)

a-r.m-6.ISIS.elf New Fork (PID: 6245, Parent: 6243)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
a-r.m-6.ISIS.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-13T19:27:56.650508+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42034	185.78.76.132	839	TCP
2024-11-13T19:27:57.536253+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42036	185.78.76.132	839	TCP
2024-11-13T19:27:58.412240+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42038	185.78.76.132	839	TCP
2024-11-13T19:27:59.551927+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42040	185.78.76.132	839	TCP
2024-11-13T19:28:00.688543+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42042	185.78.76.132	839	TCP
2024-11-13T19:28:01.654884+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42044	185.78.76.132	839	TCP
2024-11-13T19:28:02.554931+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42046	185.78.76.132	839	TCP
2024-11-13T19:28:03.449823+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42048	185.78.76.132	839	TCP
2024-11-13T19:28:04.318940+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42050	185.78.76.132	839	TCP
2024-11-13T19:28:05.195848+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42052	185.78.76.132	839	TCP
2024-11-13T19:28:06.093825+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42054	185.78.76.132	839	TCP
2024-11-13T19:28:07.202650+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42056	185.78.76.132	839	TCP
2024-11-13T19:28:08.081565+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42058	185.78.76.132	839	TCP
2024-11-13T19:28:08.953462+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42060	185.78.76.132	839	TCP
2024-11-13T19:28:09.868411+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42062	185.78.76.132	839	TCP
2024-11-13T19:28:11.534815+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42064	185.78.76.132	839	TCP
2024-11-13T19:28:12.567858+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42066	185.78.76.132	839	TCP
2024-11-13T19:28:13.481646+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42068	185.78.76.132	839	TCP
2024-11-13T19:28:14.406495+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42070	185.78.76.132	839	TCP
2024-11-13T19:28:15.298153+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42072	185.78.76.132	839	TCP
2024-11-13T19:28:16.168074+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42074	185.78.76.132	839	TCP
2024-11-13T19:28:17.102077+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42076	185.78.76.132	839	TCP
2024-11-13T19:28:17.976051+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42078	185.78.76.132	839	TCP
2024-11-13T19:28:18.876285+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42080	185.78.76.132	839	TCP
2024-11-13T19:28:19.750931+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42082	185.78.76.132	839	TCP
2024-11-13T19:28:20.621829+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42084	185.78.76.132	839	TCP
2024-11-13T19:28:21.485236+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42086	185.78.76.132	839	TCP
2024-11-13T19:28:22.578902+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42088	185.78.76.132	839	TCP
2024-11-13T19:28:23.612813+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42090	185.78.76.132	839	TCP
2024-11-13T19:28:24.531221+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42092	185.78.76.132	839	TCP
2024-11-13T19:28:25.397076+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42094	185.78.76.132	839	TCP
2024-11-13T19:28:26.442366+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42096	185.78.76.132	839	TCP
2024-11-13T19:28:27.331678+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42098	185.78.76.132	839	TCP
2024-11-13T19:28:28.248662+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42100	185.78.76.132	839	TCP
2024-11-13T19:28:29.118321+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42102	185.78.76.132	839	TCP
2024-11-13T19:28:30.621332+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42104	185.78.76.132	839	TCP
2024-11-13T19:28:31.626590+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42106	185.78.76.132	839	TCP
2024-11-13T19:28:32.675123+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42108	185.78.76.132	839	TCP
2024-11-13T19:28:33.563055+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42110	185.78.76.132	839	TCP
2024-11-13T19:28:34.531513+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42112	185.78.76.132	839	TCP
2024-11-13T19:28:35.526940+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42114	185.78.76.132	839	TCP
2024-11-13T19:28:36.415102+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42116	185.78.76.132	839	TCP
2024-11-13T19:28:37.505738+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42118	185.78.76.132	839	TCP
2024-11-13T19:28:38.570769+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42120	185.78.76.132	839	TCP
2024-11-13T19:28:39.626135+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42122	185.78.76.132	839	TCP
2024-11-13T19:28:40.504115+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42124	185.78.76.132	839	TCP
2024-11-13T19:28:41.510250+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42126	185.78.76.132	839	TCP
2024-11-13T19:28:42.394028+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42128	185.78.76.132	839	TCP
2024-11-13T19:28:44.280716+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42130	185.78.76.132	839	TCP
2024-11-13T19:28:45.195635+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42132	185.78.76.132	839	TCP
2024-11-13T19:28:46.331849+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42134	185.78.76.132	839	TCP
2024-11-13T19:28:47.204752+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42136	185.78.76.132	839	TCP
2024-11-13T19:28:48.089750+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42138	185.78.76.132	839	TCP
2024-11-13T19:28:49.081873+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42140	185.78.76.132	839	TCP
2024-11-13T19:28:50.012073+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42142	185.78.76.132	839	TCP
2024-11-13T19:28:50.958129+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42144	185.78.76.132	839	TCP
2024-11-13T19:28:51.889120+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42146	185.78.76.132	839	TCP
2024-11-13T19:28:52.792965+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42148	185.78.76.132	839	TCP
2024-11-13T19:28:53.729626+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42150	185.78.76.132	839	TCP
2024-11-13T19:28:54.592411+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42152	185.78.76.132	839	TCP
2024-11-13T19:28:55.489119+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42154	185.78.76.132	839	TCP
2024-11-13T19:28:56.377680+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42156	185.78.76.132	839	TCP
2024-11-13T19:28:57.265534+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42158	185.78.76.132	839	TCP
2024-11-13T19:28:58.409845+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42160	185.78.76.132	839	TCP
2024-11-13T19:28:59.282832+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42162	185.78.76.132	839	TCP
2024-11-13T19:29:00.303883+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42164	185.78.76.132	839	TCP
2024-11-13T19:29:01.222083+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42166	185.78.76.132	839	TCP
2024-11-13T19:29:02.264602+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42168	185.78.76.132	839	TCP
2024-11-13T19:29:03.278862+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42170	185.78.76.132	839	TCP
2024-11-13T19:29:04.162311+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42172	185.78.76.132	839	TCP
2024-11-13T19:29:05.262040+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42174	185.78.76.132	839	TCP
2024-11-13T19:29:06.150433+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42176	185.78.76.132	839	TCP
2024-11-13T19:29:07.207959+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42178	185.78.76.132	839	TCP
2024-11-13T19:29:08.105168+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42180	185.78.76.132	839	TCP
2024-11-13T19:29:08.985773+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42182	185.78.76.132	839	TCP
2024-11-13T19:29:09.850990+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42184	185.78.76.132	839	TCP
2024-11-13T19:29:10.863766+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42186	185.78.76.132	839	TCP
2024-11-13T19:29:13.079043+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42188	185.78.76.132	839	TCP
2024-11-13T19:29:13.947725+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42190	185.78.76.132	839	TCP
2024-11-13T19:29:14.863940+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42192	185.78.76.132	839	TCP
2024-11-13T19:29:15.988941+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42194	185.78.76.132	839	TCP
2024-11-13T19:29:16.958778+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42196	185.78.76.132	839	TCP
2024-11-13T19:29:18.076369+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42198	185.78.76.132	839	TCP
2024-11-13T19:29:19.181437+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42200	185.78.76.132	839	TCP
2024-11-13T19:29:20.317721+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42202	185.78.76.132	839	TCP
2024-11-13T19:29:21.253879+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42204	185.78.76.132	839	TCP
2024-11-13T19:29:22.425076+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42206	185.78.76.132	839	TCP
2024-11-13T19:29:23.330514+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42208	185.78.76.132	839	TCP
2024-11-13T19:29:24.258983+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42210	185.78.76.132	839	TCP
2024-11-13T19:29:25.124062+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42212	185.78.76.132	839	TCP
2024-11-13T19:29:26.020374+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42214	185.78.76.132	839	TCP
2024-11-13T19:29:27.203746+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42216	185.78.76.132	839	TCP
2024-11-13T19:29:28.086675+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42218	185.78.76.132	839	TCP
2024-11-13T19:29:29.240566+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42220	185.78.76.132	839	TCP
2024-11-13T19:29:30.169795+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42222	185.78.76.132	839	TCP
2024-11-13T19:29:31.213822+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42224	185.78.76.132	839	TCP
2024-11-13T19:29:32.077735+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42226	185.78.76.132	839	TCP
2024-11-13T19:29:33.155593+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42228	185.78.76.132	839	TCP
2024-11-13T19:29:34.079360+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42230	185.78.76.132	839	TCP
2024-11-13T19:29:35.088401+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42232	185.78.76.132	839	TCP
2024-11-13T19:29:36.131603+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42234	185.78.76.132	839	TCP
2024-11-13T19:29:37.409078+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42236	185.78.76.132	839	TCP
2024-11-13T19:29:38.527026+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42238	185.78.76.132	839	TCP
2024-11-13T19:29:39.634497+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42240	185.78.76.132	839	TCP
2024-11-13T19:29:40.566607+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42242	185.78.76.132	839	TCP
2024-11-13T19:29:41.433199+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42244	185.78.76.132	839	TCP
2024-11-13T19:29:42.334776+0100	2846527	1	A Network Trojan was detected	192.168.2.23	42246	185.78.76.132	839	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: a-r.m-6.ISIS.elf

Avira: detected

Found malware configuration

Source: a-r.m-6.ISIS.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.78.76.132:839"}

Multi AV Scanner detection for submitted file

Source: a-r.m-6.ISIS.elf

ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/a-r.m-6.ISIS.elf (PID: 6241)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42042 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42046 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42034 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42050 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42056 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42058 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42090 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42060 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42072 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42052 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42040 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42048 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42054 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42108 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42112 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42094 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42118 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42062 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42106 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42132 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42114 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42144 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42096 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42120 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42098 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42104 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42044 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42138 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42130 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42168 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42068 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42154 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42176 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42066 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42082 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42080 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42038 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42178 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42086 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42070 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42110 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42156 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42184 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42140 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42122 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42092 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42190 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42146 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42194 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42136 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42164 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42158 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42218 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42172 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42182 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42160 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42148 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42088 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42200 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42180 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42220 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42076 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42234 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42206 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42102 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42210 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42100 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42134 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42236 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42116 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42142 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42188 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42246 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42230 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42212 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42186 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42208 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42036 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42192 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42214 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42170 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42224 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42240 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42084 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42198 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42202 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42204 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42226 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42126 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42128 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42232 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42174 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42162 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42196 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42124 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42064 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42244 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42238 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42152 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42166 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42222 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42216 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42074 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42228 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42078 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42150 -> 185.78.76.132:839
Source: Network traffic	Suricata IDS: 2846527 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:42242 -> 185.78.76.132:839

Source: global traffic

TCP traffic: 192.168.2.23:42034 -> 185.78.76.132:839

Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132
Source: unknown	TCP traffic detected without corresponding DNS query: 185.78.76.132

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Source: classification engine

Classification label: mal84.spre.troj.linELF@0/0@0/0

Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/bzero.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: a-r.m-6.ISIS.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /tmp/a-r.m-6.ISIS.elf (PID: 6241)

Queries kernel information via 'uname':

Jump to behavior

Source: a-r.m-6.ISIS.elf, 6241.1.000055a4f0ac3000.000055a4f0bf1000.rw-.sdmp, a-r.m-6.ISIS.elf, 6243.1.000055a4f0ac3000.000055a4f0bf1000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: a-r.m-6.ISIS.elf, 6241.1.00007ffe0d45c000.00007ffe0d47d000.rw-.sdmp, a-r.m-6.ISIS.elf, 6243.1.00007ffe0d45c000.00007ffe0d47d000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/a-r.m-6.ISIS.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/a-r.m-6.ISIS.elf
Source: a-r.m-6.ISIS.elf, 6241.1.000055a4f0ac3000.000055a4f0bf1000.rw-.sdmp, a-r.m-6.ISIS.elf, 6243.1.000055a4f0ac3000.000055a4f0bf1000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: a-r.m-6.ISIS.elf, 6241.1.00007ffe0d45c000.00007ffe0d47d000.rw-.sdmp, a-r.m-6.ISIS.elf, 6243.1.00007ffe0d45c000.00007ffe0d47d000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: a-r.m-6.ISIS.elf, type: SAMPLE

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: a-r.m-6.ISIS.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.78.76.132:839"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
a-r.m-6.ISIS.elf	66%	ReversingLabs	Linux.Trojan.Gafgyt
a-r.m-6.ISIS.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.78.76.132:839	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.78.76.132	unknown	Poland	262287	MaxihostLTDABR	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.78.76.132	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	s-h.4-.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	a-r.m-6.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	x-3.2-.ISIS.elf	Get hash	malicious	Gafgyt	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	Mozi.m.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.mpsl.elf	Get hash	malicious	Unknown	Browse
91.189.91.42	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse
	Mozi.m.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse
	dlr.m68k.elf	Get hash	malicious	Unknown	Browse
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	Mozi.m.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
CANONICAL-ASGB	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.125.190.26
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	91.189.91.42
	Mozi.m.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
INIT7CH	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	0xh0roxxnavebusyoo.arm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	0xh0roxxnavebusyoo.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	Mozi.m.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.ppc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	dlr.m68k.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ub8ehJSePAfc9FYqZIT6.i686.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
MaxihostLTDABR	m-6.8-k.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	m-i.p-s.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	s-h.4-.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-7.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-5.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-4.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	a-r.m-6.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132
	x-3.2-.ISIS.elf	Get hash	malicious	Gafgyt	Browse	185.78.76.132

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.943467426167639
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	a-r.m-6.ISIS.elf
File size:	127'529 bytes
MD5:	5e47686bec1c0c11ff3352d66552edf1
SHA1:	ef7c26f1a0562f915fed9d5a15bf0c0093039402
SHA256:	315d24584e74088b5d651e260d75e871d99c5507ff693ab3a22fb99fd0d3e50e
SHA512:	bf0de9c121793b4c9267b8cb7ea7fddfa9568e78f247146eac868b22f1e0371728536905a883d00d5e84f890207a9e7cdecdd500f6b3537fd662d1f46cf8fc16
SSDEEP:	3072:odiqauNU2VS2BZQdpApDdy/wG6kiA5+ZmTQOIsXAqE:0iqauNU2EpApDsZ+ZmTQOICAqE
TLSH:	8AC31905E8A18767C2D217BAB79E425D33332B7493CB33255938AFB81BC1B991E79131
File Content Preview:	.ELF..............(.........4....\|......4. ...(........p.V...........................................V...V...............`...`...`.......i..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81b0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	97484
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80b4	0xb4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80d0	0xd0	0x132b4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1b384	0x13384	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1b398	0x13398	0x2334	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1d6cc	0x156cc	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1d6e4	0x156e4	0x10	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x26000	0x16000	0x4	0x0	0x3	WA	0	0	4
.init_array	INIT_ARRAY	0x26004	0x16004	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x26008	0x16008	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2600c	0x1600c	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x26010	0x16010	0x78	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x26088	0x16088	0x290	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x26318	0x16318	0x6668	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x16318	0xbf8	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x16f10	0xe0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x16ff0	0x4b0	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x174a0	0x8c	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1752c	0x655	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x17b84	0x58	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x17bdc	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x17bec	0xdd	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1808c	0x49d0	0x10	0x0		23	640	4
.strtab	STRTAB	0x0	0x1ca5c	0x27cd	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x156e4	0x1d6e4	0x1d6e4	0x10	0x10	2.4056	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x156f4	0x156f4	6.0851	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x16000	0x26000	0x26000	0x318	0x6980	3.7900	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1b384	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1b398	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1d6cc	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1d6e4	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x26000	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x26004	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x26008	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2600c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x26010	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x26088	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x26318	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
$a	.symtab	0x80b4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1b384	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80c0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1b390	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x810c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x846c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x92f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x95cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x99e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa82c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb7f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb9c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbb8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcf0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf58c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf71c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10038	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1004c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10174	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1021c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1027c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x103f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10470	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1054c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10600	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1069c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x107a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11044	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11940	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11aec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ccc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ce4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11eb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12068	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x120a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x120d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1211c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1218c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1231c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1349c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1355c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13600	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1384c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13930	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1396c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13be4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ddc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x143b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14404	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14518	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14584	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14954	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14994	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14acc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14bb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14cac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1536c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1571c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ca4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x166fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16940	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17318	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1735c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1740c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17538	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x176d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ba4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18684	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x186b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1874c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18788	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18844	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ff0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1982c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ce0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19d78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a168	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a274	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a414	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a6dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a7f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a938	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b1f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b330	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26008	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x819c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26004	0	NOTYPE	<unknown>	DEFAULT	8
$d	.symtab	0x2608c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x81e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26090	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x82bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8468	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9104	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x92f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x95c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x99e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa810	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b84c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa980	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb17c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb7f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb9b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xbb7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xce34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdecc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf710	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xff08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x260bc	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x260c4	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10660	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10694	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1075c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26100	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x260cc	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x1c624	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10f40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x111f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1123c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11788	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26208	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x11bb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11cc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11e08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11eb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1205c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1209c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x120d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12150	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1220c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12244	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2620c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x131a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x131f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26224	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x133c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13540	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2623c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x262d4	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x136dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13770	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13928	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d250	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13b24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13bc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x262e8	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x13c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13db8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14390	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14400	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x144b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14574	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14818	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26300	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x1493c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x149b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d2cc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c560	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x14fc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15364	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15628	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16600	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d300	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x166e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x167a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16914	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16c70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17404	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x174e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17690	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x177c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18554	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18b24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18eec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1979c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19824	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1987c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19c98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19d60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a49c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a69c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a740	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26310	0	NOTYPE	<unknown>	DEFAULT	12
$t	.symtab	0x80d0	0	NOTYPE	<unknown>	DEFAULT	2
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.1.3506	.symtab	0x1d2cc	24	OBJECT	<unknown>	DEFAULT	4
C.108.5499	.symtab	0x1b84c	8	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x11968	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x11984	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x26350	16384	OBJECT	<unknown>	DEFAULT	13
SendHTTPHex	.symtab	0xb7f4	460	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa82c	344	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d10	1116	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x10444	44	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x26010	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x260bc	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1c024	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x26310	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1d3cc	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x260c4	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1c324	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x26000	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x26000	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x260bc	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x26310	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x260c4	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_b	.symtab	0x260c0	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x26314	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x260c8	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x104fc	28	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x1031c	108	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x16b4c	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x11ccc	24	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x14fac	28	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x102b0	108	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x12340	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x12364	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x1231c	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x14448	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x14518	108	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x11d14	256	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x10444	44	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x13200	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x13930	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x17f90	76	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x101b4	52	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x149d0	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x10470	52	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x14bb4	248	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x152f0	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x15324	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x14fc8	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x12068	56	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x2c560	4	OBJECT	<unknown>	HIDDEN	13
__GI_exit	.symtab	0x13b2c	184	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x15494	436	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x102b0	108	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x16940	524	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x16620	220	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x16b4c	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x166fc	188	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x16c78	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x15648	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x100f0	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x117b8	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x183f4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x18418	336	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x17fe8	88	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x117f0	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x16b4c	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1021c	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x14a38	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x14a4c	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x14acc	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x11fe4	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0x12000	104	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x177d0	672	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x19dc4	760	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x1a0f0	120	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x14994	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x100ac	20	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x14a04	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x120a0	56	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x1027c	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x149bc	20	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x2c564	4	OBJECT	<unknown>	HIDDEN	13
__GI_htonl	.symtab	0x11ec4	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x11eb4	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x11fbc	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x176d8	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x11fa0	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x11f14	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x18c74	644	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x18914	540	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x1384c	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x103f0	84	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x11e14	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x104a4	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x10248	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1a1c0	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x171b0	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x119d0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1a230	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x17588	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1740c	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x118a0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x14858	104	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x18270	64	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x14ae0	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x14b14	52	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x11ef4	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x11ee4	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1004c	96	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x14d7c	172	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1a0bc	52	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x12248	28	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x13340	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x136e4	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1735c	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x101e8	52	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x14ec0	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x1211c	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x14a60	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x10174	64	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x12154	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x1218c	64	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x103bc	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x121cc	68	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x13600	228	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x148c0	136	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x12264	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x14b7c	56	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x13be4	172	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x12210	56	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x10518	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x13774	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x1a168	88	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1a6dc	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x11bdc	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x175ac	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x119b0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x119b0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x11bb8	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x17318	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1a240	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x11940	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x18788	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x11aec	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x17698	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x17538	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x174ec	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x119f0	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x11ce4	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x172a0	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x13950	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x13ddc	1496	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x11e38	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x100c0	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x104cc	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x1a6a8	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1054c	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x14960	52	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x10124	28	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1536c	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x153e4	176	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x153c0	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x10388	52	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2600c	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x2600c	0	OBJECT	<unknown>	DEFAULT	10
__adddf3	.symtab	0x1a944	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1b2a0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1b2a0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1b284	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1b330	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1a944	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1b2b8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1b300	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1b318	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1b2e8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1b2d0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1afe4	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1ad54	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1a938	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1a940	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1aca0	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1ac78	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1a7f4	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1a920	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1acf4	96	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x1ac54	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xff24	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x10020	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1ace0	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x17fdc	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr1	.symtab	0x17fe0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr2	.symtab	0x17fe4	4	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x2c558	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x262e8	24	OBJECT	<unknown>	DEFAULT	12
__bss_end__	.symtab	0x2c980	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x26318	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x26318	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x144c4	84	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x19ce0	152	FUNC	<unknown>	HIDDEN	2
__cmpdf2	.symtab	0x1b200	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x260c0	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x26314	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x260c8	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x2c568	4	OBJECT	<unknown>	HIDDEN	13
__data_start	.symtab	0x26088	0	NOTYPE	<unknown>	DEFAULT	12
__decode_dotted	.symtab	0x18ef8	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1a360	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x14958	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1494c	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x10038	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1afe4	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1a7f4	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x18ff0	2024	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x810c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x26008	0	OBJECT	<unknown>	DEFAULT	9
__dso_handle	.symtab	0x26088	0	OBJECT	<unknown>	HIDDEN	12
__encode_dotted	.symtab	0x1a748	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1a274	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1a414	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x2c980	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2c550	4	OBJECT	<unknown>	DEFAULT	13
__eqdf2	.symtab	0x1b200	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x104fc	28	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1d6f4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1d6e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2c548	4	OBJECT	<unknown>	HIDDEN	13
__extendsfdf2	.symtab	0x1aca0	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x1031c	108	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x16b4c	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x2600c	0	NOTYPE	<unknown>	HIDDEN	9
__fini_array_start	.symtab	0x26008	0	NOTYPE	<unknown>	HIDDEN	9
__fixunsdfsi	.symtab	0x1b330	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1acf4	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1ac78	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1ace0	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1ac54	36	FUNC	<unknown>	HIDDEN	2
__frame_dummy_init_array_entry	.symtab	0x26004	0	OBJECT	<unknown>	DEFAULT	8
__gedf2	.symtab	0x1b1f0	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x19d78	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x182b0	324	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x14994	40	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x11ccc	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x1b1f0	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x14fac	28	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x26008	0	NOTYPE	<unknown>	HIDDEN	8
__init_array_start	.symtab	0x26004	0	NOTYPE	<unknown>	HIDDEN	8
__ledf2	.symtab	0x1b1f8	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x10470	52	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x12068	56	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x102b0	108	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x100f0	52	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1a1c0	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x14b14	52	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1004c	96	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x101e8	52	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x1211c	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x10174	64	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x12154	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x1218c	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x148c0	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2c54c	4	OBJECT	<unknown>	DEFAULT	13
__libc_waitpid	.symtab	0x10124	28	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x10388	52	FUNC	<unknown>	DEFAULT	2
__local_nameserver	.symtab	0x1d3ac	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x1b1f8	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x12dd0	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x12388	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2620c	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x2c5ec	888	OBJECT	<unknown>	DEFAULT	13
__malloc_trim	.symtab	0x12d20	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x1ad54	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x2c974	4	OBJECT	<unknown>	HIDDEN	13
__nameservers	.symtab	0x2c978	4	OBJECT	<unknown>	HIDDEN	13
__nedf2	.symtab	0x1b200	132	FUNC	<unknown>	HIDDEN	2
__open_etc_hosts	.symtab	0x1a474	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x19884	1116	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x2c554	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x26004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x26004	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__progname	.symtab	0x26304	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x26308	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x1440c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x14404	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x14404	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x14404	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x14404	8	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x1a4a4	516	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x2c96c	4	OBJECT	<unknown>	HIDDEN	13
__resolv_attempts	.symtab	0x2630f	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x2c570	24	OBJECT	<unknown>	DEFAULT	13
__resolv_timeout	.symtab	0x2630e	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x2c55c	4	OBJECT	<unknown>	HIDDEN	13
__searchdomain	.symtab	0x2c970	4	OBJECT	<unknown>	HIDDEN	13
__searchdomains	.symtab	0x2c97c	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x12340	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x12364	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x1231c	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x2610c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x18568	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x15668	180	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x185c0	196	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x15a24	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x10668	52	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4636	.symtab	0x1c624	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x18684	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1874c	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x186b4	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x15b64	208	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x10770	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x26110	4	OBJECT	<unknown>	DEFAULT	12
__subdf3	.symtab	0x1a940	788	FUNC	<unknown>	HIDDEN	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x14b48	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x14448	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x14518	108	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x14584	724	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x26300	4	OBJECT	<unknown>	HIDDEN	12
__udivsi3	.symtab	0xff24	252	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x11d14	256	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x1810c	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x18040	204	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x181b8	184	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2c358	10	OBJECT	<unknown>	DEFAULT	13
_bss_end__	.symtab	0x2c980	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80d1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80d5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80d9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80dd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x80e1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x80e5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x80e9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x80ed	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x107a0	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2c594	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_handler	.symtab	0x2c5bc	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_spec	.symtab	0x26208	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x17f58	56	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2c964	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x2c968	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x26318	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2c980	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x2c560	4	OBJECT	<unknown>	DEFAULT	13
_exit	.symtab	0x10444	44	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1b384	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2a358	8192	OBJECT	<unknown>	DEFAULT	13
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x107f4	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x15e2c	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x2c564	4	OBJECT	<unknown>	DEFAULT	13
_init	.symtab	0x80b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x15c34	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x16d20	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x10f60	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x11248	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x11000	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x11044	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x111f4	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1441c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x14414	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2c5e4	8	OBJECT	<unknown>	HIDDEN	13
_start	.symtab	0x81b0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1571c	776	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x10600	104	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x26114	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x260cc	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x167b8	392	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2a354	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x260e4	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x2a350	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x26118	240	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0x1069c	212	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x260fc	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x1396c	448	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x15ca4	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1c6f4	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x15cd0	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x10878	1768	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x13200	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x10140	52	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
aeabi_unwind_cpp_pr1.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x13930	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x13930	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x119a0	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2c544	4	OBJECT	<unknown>	DEFAULT	13
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x17f90	76	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x12264	184	FUNC	<unknown>	DEFAULT	2
buf.2975	.symtab	0x2c368	16	OBJECT	<unknown>	DEFAULT	13
buf.5444	.symtab	0x2c378	440	OBJECT	<unknown>	DEFAULT	13
bzero	.symtab	0x119e0	12	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x260b4	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x17a70	308	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x101b4	52	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x149d0	52	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x10470	52	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x14bb4	248	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x26090	4	OBJECT	<unknown>	DEFAULT	12
completed.4959	.symtab	0x26318	1	OBJECT	<unknown>	DEFAULT	13
connect	.symtab	0x12068	56	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x95cc	628	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x99e8	340	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x260b0	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x2608c	0	NOTYPE	<unknown>	DEFAULT	12
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2c550	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x2c560	4	OBJECT	<unknown>	DEFAULT	13
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x13b2c	184	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1d300	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x15494	436	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x102b0	108	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x14cac	208	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x846c	212	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x14e28	152	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x16940	524	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x16620	220	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x16b4c	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x166fc	188	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x16c78	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1d2e8	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x15648	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x100f0	52	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x117b8	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x12f84	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x183f4	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x183f4	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x18418	336	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x17fe8	88	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0xa16c	1728	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x117f0	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xce14	36	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91d4	104	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8540	700	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0xce38	212	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x8408	100	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x16620	220	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x16b4c	300	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x1021c	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x14a38	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x14a4c	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x14acc	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x11fe4	28	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0x12000	104	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x177d0	672	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x19dc4	760	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x1a0f0	120	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x14994	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x100ac	20	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x14a04	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x120a0	56	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x120d8	68	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0x1027c	52	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x149bc	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x2633c	4	OBJECT	<unknown>	DEFAULT	13
h_errno	.symtab	0x2c564	4	OBJECT	<unknown>	DEFAULT	13
hoste.5443	.symtab	0x2c530	20	OBJECT	<unknown>	DEFAULT	13
htonl	.symtab	0x11ec4	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x11eb4	16	FUNC	<unknown>	DEFAULT	2
i.4588	.symtab	0x260b8	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0x11bdc	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x11fbc	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x176d8	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x11fa0	28	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x11f14	140	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x18c74	644	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x18b30	324	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x18914	540	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x18844	208	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xf58c	400	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81ec	216	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x1349c	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x1384c	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x103f0	84	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x11e14	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x104a4	40	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x10248	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5501	.symtab	0x2630c	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.5500	.symtab	0x2c56c	4	OBJECT	<unknown>	DEFAULT	13
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bzero.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9840	424	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1a1c0	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x26348	6	OBJECT	<unknown>	DEFAULT	13
main	.symtab	0xf71c	2056	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x26338	4	OBJECT	<unknown>	DEFAULT	13
makeIPPacket	.symtab	0x9c10	256	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x923c	184	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xb05c	292	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x12400	2336	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x131c0	64	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x171b0	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x119d0	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x1a230	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x17588	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1740c	224	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x118a0	156	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x14858	104	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x18270	64	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x14ae0	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x26224	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x2623c	24	OBJECT	<unknown>	DEFAULT	12
nanosleep	.symtab	0x14b14	52	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1358	.symtab	0x2c364	4	OBJECT	<unknown>	DEFAULT	13
nprocessors_onln	.symtab	0x13c90	332	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x11ef4	32	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x11ee4	16	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x26340	8	OBJECT	<unknown>	DEFAULT	13
object.4967	.symtab	0x2631c	24	OBJECT	<unknown>	DEFAULT	13
open	.symtab	0x1004c	96	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x14d7c	172	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x2c58c	4	OBJECT	<unknown>	DEFAULT	13

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-13T19:27:56.650508+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42034	185.78.76.132	839	TCP
2024-11-13T19:27:57.536253+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42036	185.78.76.132	839	TCP
2024-11-13T19:27:58.412240+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42038	185.78.76.132	839	TCP
2024-11-13T19:27:59.551927+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42040	185.78.76.132	839	TCP
2024-11-13T19:28:00.688543+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42042	185.78.76.132	839	TCP
2024-11-13T19:28:01.654884+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42044	185.78.76.132	839	TCP
2024-11-13T19:28:02.554931+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42046	185.78.76.132	839	TCP
2024-11-13T19:28:03.449823+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42048	185.78.76.132	839	TCP
2024-11-13T19:28:04.318940+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42050	185.78.76.132	839	TCP
2024-11-13T19:28:05.195848+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42052	185.78.76.132	839	TCP
2024-11-13T19:28:06.093825+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42054	185.78.76.132	839	TCP
2024-11-13T19:28:07.202650+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42056	185.78.76.132	839	TCP
2024-11-13T19:28:08.081565+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42058	185.78.76.132	839	TCP
2024-11-13T19:28:08.953462+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42060	185.78.76.132	839	TCP
2024-11-13T19:28:09.868411+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42062	185.78.76.132	839	TCP
2024-11-13T19:28:11.534815+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42064	185.78.76.132	839	TCP
2024-11-13T19:28:12.567858+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42066	185.78.76.132	839	TCP
2024-11-13T19:28:13.481646+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42068	185.78.76.132	839	TCP
2024-11-13T19:28:14.406495+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42070	185.78.76.132	839	TCP
2024-11-13T19:28:15.298153+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42072	185.78.76.132	839	TCP
2024-11-13T19:28:16.168074+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42074	185.78.76.132	839	TCP
2024-11-13T19:28:17.102077+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42076	185.78.76.132	839	TCP
2024-11-13T19:28:17.976051+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42078	185.78.76.132	839	TCP
2024-11-13T19:28:18.876285+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42080	185.78.76.132	839	TCP
2024-11-13T19:28:19.750931+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42082	185.78.76.132	839	TCP
2024-11-13T19:28:20.621829+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42084	185.78.76.132	839	TCP
2024-11-13T19:28:21.485236+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42086	185.78.76.132	839	TCP
2024-11-13T19:28:22.578902+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42088	185.78.76.132	839	TCP
2024-11-13T19:28:23.612813+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42090	185.78.76.132	839	TCP
2024-11-13T19:28:24.531221+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42092	185.78.76.132	839	TCP
2024-11-13T19:28:25.397076+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42094	185.78.76.132	839	TCP
2024-11-13T19:28:26.442366+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42096	185.78.76.132	839	TCP
2024-11-13T19:28:27.331678+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42098	185.78.76.132	839	TCP
2024-11-13T19:28:28.248662+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42100	185.78.76.132	839	TCP
2024-11-13T19:28:29.118321+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42102	185.78.76.132	839	TCP
2024-11-13T19:28:30.621332+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42104	185.78.76.132	839	TCP
2024-11-13T19:28:31.626590+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42106	185.78.76.132	839	TCP
2024-11-13T19:28:32.675123+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42108	185.78.76.132	839	TCP
2024-11-13T19:28:33.563055+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42110	185.78.76.132	839	TCP
2024-11-13T19:28:34.531513+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42112	185.78.76.132	839	TCP
2024-11-13T19:28:35.526940+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42114	185.78.76.132	839	TCP
2024-11-13T19:28:36.415102+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42116	185.78.76.132	839	TCP
2024-11-13T19:28:37.505738+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42118	185.78.76.132	839	TCP
2024-11-13T19:28:38.570769+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42120	185.78.76.132	839	TCP
2024-11-13T19:28:39.626135+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42122	185.78.76.132	839	TCP
2024-11-13T19:28:40.504115+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42124	185.78.76.132	839	TCP
2024-11-13T19:28:41.510250+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42126	185.78.76.132	839	TCP
2024-11-13T19:28:42.394028+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42128	185.78.76.132	839	TCP
2024-11-13T19:28:44.280716+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42130	185.78.76.132	839	TCP
2024-11-13T19:28:45.195635+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42132	185.78.76.132	839	TCP
2024-11-13T19:28:46.331849+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42134	185.78.76.132	839	TCP
2024-11-13T19:28:47.204752+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42136	185.78.76.132	839	TCP
2024-11-13T19:28:48.089750+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42138	185.78.76.132	839	TCP
2024-11-13T19:28:49.081873+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42140	185.78.76.132	839	TCP
2024-11-13T19:28:50.012073+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42142	185.78.76.132	839	TCP
2024-11-13T19:28:50.958129+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42144	185.78.76.132	839	TCP
2024-11-13T19:28:51.889120+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42146	185.78.76.132	839	TCP
2024-11-13T19:28:52.792965+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42148	185.78.76.132	839	TCP
2024-11-13T19:28:53.729626+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42150	185.78.76.132	839	TCP
2024-11-13T19:28:54.592411+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42152	185.78.76.132	839	TCP
2024-11-13T19:28:55.489119+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42154	185.78.76.132	839	TCP
2024-11-13T19:28:56.377680+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42156	185.78.76.132	839	TCP
2024-11-13T19:28:57.265534+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42158	185.78.76.132	839	TCP
2024-11-13T19:28:58.409845+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42160	185.78.76.132	839	TCP
2024-11-13T19:28:59.282832+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42162	185.78.76.132	839	TCP
2024-11-13T19:29:00.303883+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42164	185.78.76.132	839	TCP
2024-11-13T19:29:01.222083+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42166	185.78.76.132	839	TCP
2024-11-13T19:29:02.264602+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42168	185.78.76.132	839	TCP
2024-11-13T19:29:03.278862+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42170	185.78.76.132	839	TCP
2024-11-13T19:29:04.162311+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42172	185.78.76.132	839	TCP
2024-11-13T19:29:05.262040+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42174	185.78.76.132	839	TCP
2024-11-13T19:29:06.150433+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42176	185.78.76.132	839	TCP
2024-11-13T19:29:07.207959+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42178	185.78.76.132	839	TCP
2024-11-13T19:29:08.105168+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42180	185.78.76.132	839	TCP
2024-11-13T19:29:08.985773+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42182	185.78.76.132	839	TCP
2024-11-13T19:29:09.850990+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42184	185.78.76.132	839	TCP
2024-11-13T19:29:10.863766+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42186	185.78.76.132	839	TCP
2024-11-13T19:29:13.079043+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42188	185.78.76.132	839	TCP
2024-11-13T19:29:13.947725+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42190	185.78.76.132	839	TCP
2024-11-13T19:29:14.863940+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42192	185.78.76.132	839	TCP
2024-11-13T19:29:15.988941+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42194	185.78.76.132	839	TCP
2024-11-13T19:29:16.958778+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42196	185.78.76.132	839	TCP
2024-11-13T19:29:18.076369+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42198	185.78.76.132	839	TCP
2024-11-13T19:29:19.181437+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42200	185.78.76.132	839	TCP
2024-11-13T19:29:20.317721+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42202	185.78.76.132	839	TCP
2024-11-13T19:29:21.253879+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42204	185.78.76.132	839	TCP
2024-11-13T19:29:22.425076+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42206	185.78.76.132	839	TCP
2024-11-13T19:29:23.330514+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42208	185.78.76.132	839	TCP
2024-11-13T19:29:24.258983+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42210	185.78.76.132	839	TCP
2024-11-13T19:29:25.124062+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42212	185.78.76.132	839	TCP
2024-11-13T19:29:26.020374+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42214	185.78.76.132	839	TCP
2024-11-13T19:29:27.203746+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42216	185.78.76.132	839	TCP
2024-11-13T19:29:28.086675+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42218	185.78.76.132	839	TCP
2024-11-13T19:29:29.240566+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42220	185.78.76.132	839	TCP
2024-11-13T19:29:30.169795+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42222	185.78.76.132	839	TCP
2024-11-13T19:29:31.213822+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42224	185.78.76.132	839	TCP
2024-11-13T19:29:32.077735+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42226	185.78.76.132	839	TCP
2024-11-13T19:29:33.155593+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42228	185.78.76.132	839	TCP
2024-11-13T19:29:34.079360+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42230	185.78.76.132	839	TCP
2024-11-13T19:29:35.088401+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42232	185.78.76.132	839	TCP
2024-11-13T19:29:36.131603+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42234	185.78.76.132	839	TCP
2024-11-13T19:29:37.409078+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42236	185.78.76.132	839	TCP
2024-11-13T19:29:38.527026+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42238	185.78.76.132	839	TCP
2024-11-13T19:29:39.634497+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42240	185.78.76.132	839	TCP
2024-11-13T19:29:40.566607+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42242	185.78.76.132	839	TCP
2024-11-13T19:29:41.433199+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42244	185.78.76.132	839	TCP
2024-11-13T19:29:42.334776+0100	2846527	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	42246	185.78.76.132	839	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 13, 2024 19:27:56.644148111 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:56.649151087 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:56.649209023 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:56.650507927 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:56.655353069 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:57.398304939 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:57.399130106 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:57.529761076 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:57.530127048 CET	42034	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:57.531033993 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:57.535037994 CET	839	42034	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:57.536025047 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:57.536123991 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:57.536252975 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:57.541467905 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:58.274533033 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:58.274866104 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:58.401418924 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:58.401644945 CET	42036	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:58.406095982 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:58.406614065 CET	839	42036	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:58.411202908 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:58.411254883 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:58.412240028 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:58.417129993 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:59.324139118 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:59.324388027 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:59.416960001 CET	42836	443	192.168.2.23	91.189.91.43
Nov 13, 2024 19:27:59.545762062 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:59.546009064 CET	42038	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:59.546696901 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:59.550879002 CET	839	42038	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:59.551800013 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:27:59.551862001 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:59.551927090 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:27:59.556725979 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:00.466300964 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:00.466485977 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:00.681647062 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:00.681832075 CET	42040	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:00.682621002 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:00.687741995 CET	839	42040	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:00.688436985 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:00.688488960 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:00.688543081 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:00.693576097 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:00.952630043 CET	42516	80	192.168.2.23	109.202.202.202
Nov 13, 2024 19:28:01.648591995 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:01.648850918 CET	42042	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:01.649579048 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:01.654658079 CET	839	42042	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:01.654695988 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:01.654758930 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:01.654884100 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:01.661022902 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:02.410383940 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:02.410689116 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:02.547914982 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:02.548120022 CET	42044	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:02.548878908 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:02.554191113 CET	839	42044	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:02.554805994 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:02.554869890 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:02.554930925 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:02.561034918 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:03.307845116 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:03.307986021 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:03.443614960 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:03.443947077 CET	42046	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:03.444730043 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:03.448822021 CET	839	42046	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:03.449640989 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:03.449785948 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:03.449822903 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:03.455379963 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:04.178000927 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:04.178145885 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:04.313245058 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:04.313431025 CET	42048	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:04.313905954 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:04.318497896 CET	839	42048	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:04.318841934 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:04.318896055 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:04.318939924 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:04.324187040 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.069075108 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.069292068 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:05.190036058 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.190159082 CET	42050	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:05.190614939 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:05.195102930 CET	839	42050	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.195755005 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.195801020 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:05.195847988 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:05.200778008 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.936126947 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:05.936392069 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:06.086316109 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:06.086534977 CET	42052	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:06.087129116 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:06.092716932 CET	839	42052	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:06.093727112 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:06.093770027 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:06.093825102 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:06.098980904 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:06.982654095 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:06.982914925 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:07.196546078 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:07.196755886 CET	42054	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:07.197594881 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:07.201911926 CET	839	42054	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:07.202534914 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:07.202586889 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:07.202650070 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:07.207456112 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:07.927911997 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:07.928097963 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.074919939 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.075129032 CET	42056	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.076256990 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.080220938 CET	839	42056	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.081444979 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.081502914 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.081564903 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.087393045 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.817471981 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.817703009 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.947200060 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.947463036 CET	42058	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.948497057 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.952423096 CET	839	42058	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.953327894 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:08.953387022 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.953461885 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:08.958544016 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:09.714293957 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:09.714504957 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:09.861695051 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:09.861917019 CET	42060	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:09.863038063 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:09.867007971 CET	839	42060	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:09.868211031 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:09.868284941 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:09.868411064 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:09.873351097 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.527358055 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.527379990 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.527391911 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.527556896 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.527581930 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.527703047 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.527754068 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.527780056 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.528290033 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.528341055 CET	42062	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.528743982 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.532738924 CET	839	42062	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.534532070 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:11.534723043 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.534815073 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:11.539774895 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:12.372832060 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:12.373169899 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:12.561379910 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:12.561810017 CET	42064	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:12.562437057 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:12.567632914 CET	839	42064	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:12.567673922 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:12.567815065 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:12.567857981 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:12.573139906 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:13.312627077 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:13.312848091 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:13.475121021 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:13.475394964 CET	42066	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:13.476486921 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:13.480389118 CET	839	42066	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:13.481460094 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:13.481543064 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:13.481646061 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:13.486958981 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:14.248963118 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:14.249150038 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:14.398926973 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:14.399375916 CET	42068	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:14.400880098 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:14.405142069 CET	839	42068	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:14.406229019 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:14.406326056 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:14.406495094 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:14.411681890 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:15.160015106 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:15.160280943 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:15.286772013 CET	43928	443	192.168.2.23	91.189.91.42
Nov 13, 2024 19:28:15.291589022 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:15.291948080 CET	42070	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:15.293054104 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:15.297216892 CET	839	42070	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:15.297960997 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:15.298039913 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:15.298152924 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:15.303004980 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.034353971 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.034645081 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:16.162184000 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.162452936 CET	42072	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:16.163093090 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:16.167448044 CET	839	42072	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.167932034 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.168008089 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:16.168073893 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:16.173343897 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.921602964 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:16.921906948 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.093647003 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.093904018 CET	42074	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.094762087 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.100831032 CET	839	42074	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.101973057 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.102025986 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.102077007 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.108390093 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.840054035 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.840528965 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.968064070 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.968530893 CET	42076	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.969748974 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.974639893 CET	839	42076	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.975873947 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:17.976049900 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.976051092 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:17.981930971 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:18.731621027 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:18.731898069 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:18.869692087 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:18.870122910 CET	42078	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:18.871061087 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:18.875082970 CET	839	42078	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:18.876157999 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:18.876219988 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:18.876285076 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:18.881989956 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:19.615207911 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:19.615331888 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:19.744594097 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:19.744911909 CET	42080	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:19.745707035 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:19.749876022 CET	839	42080	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:19.750752926 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:19.750822067 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:19.750931025 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:19.755822897 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:20.487997055 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:20.488111973 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:20.615906954 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:20.616046906 CET	42082	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:20.616911888 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:20.620848894 CET	839	42082	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:20.621700048 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:20.621751070 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:20.621829033 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:20.626689911 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:21.351010084 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:21.351197958 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:21.478607893 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:21.478960037 CET	42084	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:21.480142117 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:21.483809948 CET	839	42084	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:21.485034943 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:21.485106945 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:21.485235929 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:21.490089893 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:22.352705956 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:22.352833033 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:22.572868109 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:22.573057890 CET	42086	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:22.573926926 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:22.577902079 CET	839	42086	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:22.578766108 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:22.578819990 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:22.578902006 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:22.583854914 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:23.424829006 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:23.424957991 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:23.606240034 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:23.606560946 CET	42088	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:23.607626915 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:23.611571074 CET	839	42088	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:23.612586975 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:23.612667084 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:23.612812996 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:23.617646933 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:24.371627092 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:24.371743917 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:24.525280952 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:24.525635958 CET	42090	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:24.526220083 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:24.530728102 CET	839	42090	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:24.531131029 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:24.531169891 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:24.531220913 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:24.536030054 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:25.263669968 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:25.264012098 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:25.391222954 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:25.391380072 CET	42092	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:25.392064095 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:25.396279097 CET	839	42092	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:25.396884918 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:25.396964073 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:25.397075891 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:25.401875973 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:25.525367975 CET	42836	443	192.168.2.23	91.189.91.43
Nov 13, 2024 19:28:26.247337103 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:26.247585058 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:26.436314106 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:26.436590910 CET	42094	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:26.437350035 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:26.441463947 CET	839	42094	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:26.442181110 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:26.442250967 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:26.442365885 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:26.447077036 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:27.189143896 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:27.189325094 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:27.325303078 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:27.325649023 CET	42096	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:27.326702118 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:27.330666065 CET	839	42096	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:27.331556082 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:27.331643105 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:27.331677914 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:27.336464882 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.089998007 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.090142965 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:28.242300034 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.242525101 CET	42098	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:28.243072987 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:28.247665882 CET	839	42098	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.248503923 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.248594999 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:28.248661995 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:28.254589081 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.984421015 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:28.984575987 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:29.112176895 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:29.112432003 CET	42100	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:29.113275051 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:29.117531061 CET	839	42100	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:29.118130922 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:29.118211031 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:29.118320942 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:29.123373985 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:30.000679970 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:30.000804901 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:30.614938974 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:30.615170002 CET	42102	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:30.615922928 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:30.620374918 CET	839	42102	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:30.621124983 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:30.621206999 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:30.621331930 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:30.626369953 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:31.448364019 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:31.448523998 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:31.620384932 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:31.620677948 CET	42104	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:31.621484041 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:31.625629902 CET	839	42104	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:31.626394033 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:31.626477957 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:31.626590014 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:31.631788969 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:31.668302059 CET	42516	80	192.168.2.23	109.202.202.202
Nov 13, 2024 19:28:32.465246916 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:32.465517044 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:32.668862104 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:32.669095039 CET	42106	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:32.669879913 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:32.674079895 CET	839	42106	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:32.674937010 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:32.675014973 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:32.675122976 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:32.680069923 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:33.407404900 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:33.409312963 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:33.556652069 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:33.557786942 CET	42108	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:33.557786942 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:33.562829018 CET	839	42108	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:33.562839985 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:33.562927961 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:33.563055038 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:33.567977905 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:34.353131056 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:34.353291035 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:34.525544882 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:34.525921106 CET	42110	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:34.526545048 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:34.530985117 CET	839	42110	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:34.531404018 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:34.531512976 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:34.531512976 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:34.536468029 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:35.347606897 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:35.347733974 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:35.520764112 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:35.521393061 CET	42112	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:35.521874905 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:35.526248932 CET	839	42112	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:35.526765108 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:35.526829004 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:35.526940107 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:35.531800032 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:36.272805929 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:36.273101091 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:36.408844948 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:36.409257889 CET	42114	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:36.410053015 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:36.414139032 CET	839	42114	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:36.414908886 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:36.414968967 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:36.415102005 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:36.419964075 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:37.326013088 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:37.326189041 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:37.499144077 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:37.499380112 CET	42116	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:37.500053883 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:37.504255056 CET	839	42116	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:37.505628109 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:37.505687952 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:37.505738020 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:37.510967970 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:38.360755920 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:38.360898018 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:38.563163042 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:38.563363075 CET	42118	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:38.564016104 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:38.569969893 CET	839	42118	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:38.570646048 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:38.570724964 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:38.570769072 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:38.575762987 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:39.442333937 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:39.442492962 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:39.614638090 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:39.614952087 CET	42120	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:39.615447998 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:39.624296904 CET	839	42120	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:39.625991106 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:39.626077890 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:39.626135111 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:39.631661892 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:40.367681980 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:40.367904902 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:40.498513937 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:40.498663902 CET	42122	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:40.499135017 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:40.503914118 CET	839	42122	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:40.504009962 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:40.504059076 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:40.504115105 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:40.509748936 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:41.339788914 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:41.339957952 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:41.504441023 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:41.504641056 CET	42124	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:41.505208015 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:41.509618044 CET	839	42124	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:41.510128975 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:41.510200977 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:41.510250092 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:41.515222073 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:42.256254911 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:42.256393909 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:42.387762070 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:42.387949944 CET	42126	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:42.388773918 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:42.393501997 CET	839	42126	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:42.393812895 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:42.393934011 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:42.394027948 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:42.399369955 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:43.131526947 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:43.131685019 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:43.261792898 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:43.261954069 CET	42128	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:43.262801886 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:43.267088890 CET	839	42128	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:43.267793894 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:43.267874002 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:44.274538040 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:44.280426025 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:44.280545950 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:44.280715942 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:44.286058903 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:45.064362049 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:45.064645052 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:45.189273119 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:45.189589024 CET	42130	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:45.190566063 CET	42132	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:45.194509983 CET	839	42130	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:45.195462942 CET	839	42132	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:45.195528984 CET	42132	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:45.195635080 CET	42132	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:45.202182055 CET	839	42132	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:46.128151894 CET	839	42132	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:46.128360033 CET	42132	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:46.325083971 CET	839	42132	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:46.325431108 CET	42132	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:46.326639891 CET	42134	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:46.330885887 CET	839	42132	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:46.331638098 CET	839	42134	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:46.331734896 CET	42134	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:46.331849098 CET	42134	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:46.337137938 CET	839	42134	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.102624893 CET	839	42134	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.102925062 CET	42134	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:47.197844028 CET	839	42134	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.198050022 CET	42134	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:47.199592113 CET	42136	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:47.202982903 CET	839	42134	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.204610109 CET	839	42136	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.204665899 CET	42136	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:47.204751968 CET	42136	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:47.211679935 CET	839	42136	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.946352005 CET	839	42136	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:47.946544886 CET	42136	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:48.082889080 CET	839	42136	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:48.083123922 CET	42136	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:48.084436893 CET	42138	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:48.088243961 CET	839	42136	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:48.089560032 CET	839	42138	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:48.089636087 CET	42138	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:48.089750051 CET	42138	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:48.094850063 CET	839	42138	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:48.914797068 CET	839	42138	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:48.914944887 CET	42138	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:49.075544119 CET	839	42138	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:49.075690031 CET	42138	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:49.076422930 CET	42140	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:49.081382990 CET	839	42138	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:49.081754923 CET	839	42140	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:49.081820965 CET	42140	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:49.081872940 CET	42140	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:49.088365078 CET	839	42140	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:49.852864981 CET	839	42140	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:49.852978945 CET	42140	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.005569935 CET	839	42140	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.005726099 CET	42140	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.006429911 CET	42142	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.010883093 CET	839	42140	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.011966944 CET	839	42142	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.012020111 CET	42142	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.012073040 CET	42142	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.017193079 CET	839	42142	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.794203997 CET	839	42142	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.794363022 CET	42142	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.951848030 CET	839	42142	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.952054024 CET	42142	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.953067064 CET	42144	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.956981897 CET	839	42142	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.957945108 CET	839	42144	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:50.958013058 CET	42144	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.958128929 CET	42144	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:50.964508057 CET	839	42144	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:51.734383106 CET	839	42144	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:51.734791994 CET	42144	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:51.880980015 CET	839	42144	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:51.881337881 CET	42144	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:51.882483959 CET	42146	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:51.887861967 CET	839	42144	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:51.888921022 CET	839	42146	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:51.889007092 CET	42146	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:51.889120102 CET	42146	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:51.894383907 CET	839	42146	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:52.619386911 CET	839	42146	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:52.619693995 CET	42146	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:52.746938944 CET	839	42146	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:52.747184038 CET	42146	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:52.748156071 CET	42148	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:52.792670965 CET	839	42146	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:52.792685032 CET	839	42148	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:52.792857885 CET	42148	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:52.792964935 CET	42148	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:52.799948931 CET	839	42148	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:53.569477081 CET	839	42148	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:53.569791079 CET	42148	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:53.722961903 CET	839	42148	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:53.723337889 CET	42148	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:53.724148989 CET	42150	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:53.728861094 CET	839	42148	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:53.729506969 CET	839	42150	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:53.729588032 CET	42150	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:53.729625940 CET	42150	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:53.735450029 CET	839	42150	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:54.459306002 CET	839	42150	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:54.459590912 CET	42150	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:54.586492062 CET	839	42150	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:54.586632013 CET	42150	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:54.587336063 CET	42152	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:54.591511011 CET	839	42150	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:54.592287064 CET	839	42152	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:54.592356920 CET	42152	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:54.592411041 CET	42152	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:54.597311974 CET	839	42152	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:55.343699932 CET	839	42152	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:55.343862057 CET	42152	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:55.483077049 CET	839	42152	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:55.483237028 CET	42152	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:55.484129906 CET	42154	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:55.488214016 CET	839	42152	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:55.488984108 CET	839	42154	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:55.489072084 CET	42154	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:55.489119053 CET	42154	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:55.494117022 CET	839	42154	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:56.234724998 CET	839	42154	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:56.234900951 CET	42154	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:56.240946054 CET	43928	443	192.168.2.23	91.189.91.42
Nov 13, 2024 19:28:56.371195078 CET	839	42154	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:56.371396065 CET	42154	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:56.372569084 CET	42156	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:56.376461029 CET	839	42154	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:56.377491951 CET	839	42156	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:56.377557039 CET	42156	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:56.377680063 CET	42156	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:56.382513046 CET	839	42156	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:57.125587940 CET	839	42156	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:57.125809908 CET	42156	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:57.259517908 CET	839	42156	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:57.259706020 CET	42156	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:57.260493994 CET	42158	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:57.264640093 CET	839	42156	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:57.265419960 CET	839	42158	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:57.265486002 CET	42158	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:57.265533924 CET	42158	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:57.270443916 CET	839	42158	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:58.187284946 CET	839	42158	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:58.187433004 CET	42158	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:58.403177977 CET	839	42158	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:58.403461933 CET	42158	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:58.404613972 CET	42160	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:58.408598900 CET	839	42158	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:58.409641981 CET	839	42160	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:58.409735918 CET	42160	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:58.409845114 CET	42160	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:58.415532112 CET	839	42160	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:59.142050028 CET	839	42160	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:59.142221928 CET	42160	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:59.276580095 CET	839	42160	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:59.276845932 CET	42160	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:59.277595997 CET	42162	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:59.282615900 CET	839	42160	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:59.282628059 CET	839	42162	185.78.76.132	192.168.2.23
Nov 13, 2024 19:28:59.282708883 CET	42162	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:59.282831907 CET	42162	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:28:59.288496017 CET	839	42162	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:00.099136114 CET	839	42162	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:00.099323988 CET	42162	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:00.297444105 CET	839	42162	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:00.297610998 CET	42162	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:00.298686028 CET	42164	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:00.302678108 CET	839	42162	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:00.303760052 CET	839	42164	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:00.303826094 CET	42164	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:00.303883076 CET	42164	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:00.309429884 CET	839	42164	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:01.078953028 CET	839	42164	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:01.079335928 CET	42164	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:01.215547085 CET	839	42164	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:01.215769053 CET	42164	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:01.216662884 CET	42166	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:01.220869064 CET	839	42164	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:01.221785069 CET	839	42166	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:01.221919060 CET	42166	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:01.222083092 CET	42166	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:01.227174997 CET	839	42166	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:02.080544949 CET	839	42166	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:02.080719948 CET	42166	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:02.257637024 CET	839	42166	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:02.257839918 CET	42166	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:02.259063005 CET	42168	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:02.263402939 CET	839	42166	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:02.264405966 CET	839	42168	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:02.264473915 CET	42168	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:02.264601946 CET	42168	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:02.269845009 CET	839	42168	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:03.132791996 CET	839	42168	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:03.132966042 CET	42168	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:03.271693945 CET	839	42168	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:03.271920919 CET	42168	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:03.273339987 CET	42170	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:03.277070045 CET	839	42168	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:03.278656006 CET	839	42170	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:03.278733015 CET	42170	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:03.278862000 CET	42170	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:03.284236908 CET	839	42170	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:04.023984909 CET	839	42170	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:04.024168968 CET	42170	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:04.156162977 CET	839	42170	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:04.156297922 CET	42170	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:04.157140970 CET	42172	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:04.161637068 CET	839	42170	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:04.162204027 CET	839	42172	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:04.162261009 CET	42172	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:04.162311077 CET	42172	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:04.167613983 CET	839	42172	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:05.063580036 CET	839	42172	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:05.063842058 CET	42172	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:05.255441904 CET	839	42172	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:05.255891085 CET	42172	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:05.256901979 CET	42174	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:05.261173010 CET	839	42172	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:05.261841059 CET	839	42174	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:05.261913061 CET	42174	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:05.262039900 CET	42174	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:05.267365932 CET	839	42174	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:06.017271996 CET	839	42174	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:06.017412901 CET	42174	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:06.144279003 CET	839	42174	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:06.144511938 CET	42174	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:06.145344019 CET	42176	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:06.149601936 CET	839	42174	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:06.150322914 CET	839	42176	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:06.150386095 CET	42176	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:06.150433064 CET	42176	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:06.155335903 CET	839	42176	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.013641119 CET	839	42176	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.013912916 CET	42176	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:07.201644897 CET	839	42176	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.202006102 CET	42176	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:07.202955008 CET	42178	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:07.206926107 CET	839	42176	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.207839012 CET	839	42178	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.207915068 CET	42178	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:07.207958937 CET	42178	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:07.213265896 CET	839	42178	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.949230909 CET	839	42178	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:07.949613094 CET	42178	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.096925020 CET	839	42178	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.097126007 CET	42178	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.098150015 CET	42180	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.102823973 CET	839	42178	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.104967117 CET	839	42180	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.105036020 CET	42180	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.105168104 CET	42180	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.110471010 CET	839	42180	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.837539911 CET	839	42180	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.837780952 CET	42180	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.977768898 CET	839	42180	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.977993011 CET	42180	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.979218006 CET	42182	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.983563900 CET	839	42180	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.985563993 CET	839	42182	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:08.985729933 CET	42182	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.985773087 CET	42182	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:08.991276026 CET	839	42182	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:09.716675997 CET	839	42182	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:09.716975927 CET	42182	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:09.844471931 CET	839	42182	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:09.844863892 CET	42182	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:09.845690012 CET	42184	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:09.849926949 CET	839	42182	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:09.850790024 CET	839	42184	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:09.850887060 CET	42184	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:09.850990057 CET	42184	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:09.856085062 CET	839	42184	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:10.667752981 CET	839	42184	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:10.667942047 CET	42184	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:10.855717897 CET	839	42184	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:10.856100082 CET	42184	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:10.857465982 CET	42186	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:10.861325979 CET	839	42184	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:10.863534927 CET	839	42186	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:10.863645077 CET	42186	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:10.863765955 CET	42186	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:10.869713068 CET	839	42186	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:12.847764969 CET	839	42186	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:12.848073006 CET	42186	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.072935104 CET	839	42186	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.073251963 CET	42186	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.073955059 CET	42188	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.078336954 CET	839	42186	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.078895092 CET	839	42188	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.078986883 CET	42188	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.079042912 CET	42188	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.086539984 CET	839	42188	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.813276052 CET	839	42188	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.813611984 CET	42188	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.941175938 CET	839	42188	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.941472054 CET	42188	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.942403078 CET	42190	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.946599007 CET	839	42188	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.947590113 CET	839	42190	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:13.947659969 CET	42190	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.947725058 CET	42190	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:13.952621937 CET	839	42190	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:14.718806982 CET	839	42190	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:14.719152927 CET	42190	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:14.857880116 CET	839	42190	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:14.858077049 CET	42190	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:14.858838081 CET	42192	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:14.863377094 CET	839	42190	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:14.863827944 CET	839	42192	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:14.863888979 CET	42192	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:14.863940001 CET	42192	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:14.869874954 CET	839	42192	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:15.763850927 CET	839	42192	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:15.764113903 CET	42192	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:15.982220888 CET	839	42192	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:15.982419014 CET	42192	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:15.983524084 CET	42194	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:15.987247944 CET	839	42192	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:15.988827944 CET	839	42194	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:15.988878965 CET	42194	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:15.988940954 CET	42194	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:15.993784904 CET	839	42194	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:16.767441988 CET	839	42194	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:16.767579079 CET	42194	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:16.952487946 CET	839	42194	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:16.953562975 CET	42194	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:16.953687906 CET	42196	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:16.958570957 CET	839	42194	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:16.958584070 CET	839	42196	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:16.958667040 CET	42196	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:16.958777905 CET	42196	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:16.963562965 CET	839	42196	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:17.846591949 CET	839	42196	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:17.846713066 CET	42196	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:18.070307970 CET	839	42196	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:18.070472956 CET	42196	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:18.071259022 CET	42198	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:18.075448990 CET	839	42196	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:18.076260090 CET	839	42198	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:18.076309919 CET	42198	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:18.076369047 CET	42198	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:18.081531048 CET	839	42198	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:18.977834940 CET	839	42198	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:18.978110075 CET	42198	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:19.174751043 CET	839	42198	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:19.174999952 CET	42198	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:19.176166058 CET	42200	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:19.179991007 CET	839	42198	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:19.181210995 CET	839	42200	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:19.181314945 CET	42200	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:19.181437016 CET	42200	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:19.186263084 CET	839	42200	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:20.098170996 CET	839	42200	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:20.098383904 CET	42200	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:20.311088085 CET	839	42200	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:20.311466932 CET	42200	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:20.312611103 CET	42202	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:20.316443920 CET	839	42200	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:20.317533970 CET	839	42202	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:20.317612886 CET	42202	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:20.317720890 CET	42202	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:20.322690010 CET	839	42202	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:21.097119093 CET	839	42202	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:21.097273111 CET	42202	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:21.244944096 CET	839	42202	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:21.245323896 CET	42202	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:21.246242046 CET	42204	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:21.253664017 CET	839	42202	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:21.253679037 CET	839	42204	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:21.253753901 CET	42204	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:21.253879070 CET	42204	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:21.262192965 CET	839	42204	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:22.194717884 CET	839	42204	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:22.194875002 CET	42204	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:22.418750048 CET	839	42204	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:22.418936014 CET	42204	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:22.420082092 CET	42206	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:22.424639940 CET	839	42204	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:22.424962997 CET	839	42206	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:22.425021887 CET	42206	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:22.425076008 CET	42206	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:22.429886103 CET	839	42206	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:23.173321962 CET	839	42206	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:23.173629045 CET	42206	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:23.323478937 CET	839	42206	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:23.323827028 CET	42206	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:23.325095892 CET	42208	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:23.328938007 CET	839	42206	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:23.330327988 CET	839	42208	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:23.330404043 CET	42208	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:23.330513954 CET	42208	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:23.336438894 CET	839	42208	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.106563091 CET	839	42208	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.106734037 CET	42208	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:24.251804113 CET	839	42208	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.252125978 CET	42208	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:24.253824949 CET	42210	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:24.257064104 CET	839	42208	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.258800030 CET	839	42210	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.258872986 CET	42210	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:24.258982897 CET	42210	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:24.263963938 CET	839	42210	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.987848997 CET	839	42210	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:24.988008976 CET	42210	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:25.116825104 CET	839	42210	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:25.117104053 CET	42210	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:25.117686033 CET	42212	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:25.123487949 CET	839	42210	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:25.123918056 CET	839	42212	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:25.123972893 CET	42212	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:25.124062061 CET	42212	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:25.130410910 CET	839	42212	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:25.877973080 CET	839	42212	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:25.878218889 CET	42212	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:26.013998985 CET	839	42212	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:26.014286041 CET	42212	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:26.015224934 CET	42214	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:26.019263983 CET	839	42212	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:26.020169020 CET	839	42214	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:26.020241022 CET	42214	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:26.020374060 CET	42214	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:26.025610924 CET	839	42214	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:26.969908953 CET	839	42214	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:26.970272064 CET	42214	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:27.197362900 CET	839	42214	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:27.197653055 CET	42214	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:27.198524952 CET	42216	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:27.202893019 CET	839	42214	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:27.203619957 CET	839	42216	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:27.203681946 CET	42216	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:27.203746080 CET	42216	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:27.208626986 CET	839	42216	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:27.948668003 CET	839	42216	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:27.948784113 CET	42216	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:28.080024004 CET	839	42216	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:28.080282927 CET	42216	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:28.081376076 CET	42218	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:28.085645914 CET	839	42216	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:28.086493015 CET	839	42218	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:28.086585999 CET	42218	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:28.086674929 CET	42218	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:28.091871977 CET	839	42218	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:29.019428968 CET	839	42218	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:29.019601107 CET	42218	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:29.231547117 CET	839	42218	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:29.231739044 CET	42218	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:29.232969046 CET	42220	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:29.237406015 CET	839	42218	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:29.240427971 CET	839	42220	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:29.240497112 CET	42220	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:29.240566015 CET	42220	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:29.246834993 CET	839	42220	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:30.017003059 CET	839	42220	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:30.017143011 CET	42220	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:30.163373947 CET	839	42220	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:30.163589001 CET	42220	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:30.164614916 CET	42222	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:30.168654919 CET	839	42220	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:30.169683933 CET	839	42222	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:30.169737101 CET	42222	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:30.169795036 CET	42222	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:30.174623013 CET	839	42222	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.066032887 CET	839	42222	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.066308022 CET	42222	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:31.206808090 CET	839	42222	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.207247972 CET	42222	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:31.208538055 CET	42224	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:31.212603092 CET	839	42222	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.213596106 CET	839	42224	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.213709116 CET	42224	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:31.213821888 CET	42224	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:31.219777107 CET	839	42224	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.943913937 CET	839	42224	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:31.944189072 CET	42224	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:32.071436882 CET	839	42224	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:32.071770906 CET	42224	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:32.072647095 CET	42226	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:32.076738119 CET	839	42224	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:32.077528954 CET	839	42226	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:32.077622890 CET	42226	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:32.077734947 CET	42226	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:32.083528042 CET	839	42226	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:32.949311972 CET	839	42226	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:32.949493885 CET	42226	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:33.148886919 CET	839	42226	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:33.149112940 CET	42226	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:33.150177002 CET	42228	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:33.154381037 CET	839	42226	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:33.155355930 CET	839	42228	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:33.155467033 CET	42228	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:33.155592918 CET	42228	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:33.160505056 CET	839	42228	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:33.910818100 CET	839	42228	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:33.911067963 CET	42228	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:34.070628881 CET	839	42228	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:34.070955038 CET	42228	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:34.071836948 CET	42230	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:34.079092026 CET	839	42228	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:34.079109907 CET	839	42230	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:34.079219103 CET	42230	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:34.079360008 CET	42230	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:34.086990118 CET	839	42230	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:34.906289101 CET	839	42230	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:34.906477928 CET	42230	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:35.081779957 CET	839	42230	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:35.082010984 CET	42230	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:35.082974911 CET	42232	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:35.087085962 CET	839	42230	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:35.088283062 CET	839	42232	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:35.088332891 CET	42232	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:35.088401079 CET	42232	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:35.093384981 CET	839	42232	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:36.125163078 CET	839	42232	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:36.125487089 CET	42232	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:36.126543999 CET	42234	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:36.130752087 CET	839	42232	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:36.131386042 CET	839	42234	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:36.131455898 CET	42234	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:36.131603003 CET	42234	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:36.136852980 CET	839	42234	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:36.923559904 CET	839	42234	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:36.923697948 CET	42234	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:37.402662992 CET	839	42234	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:37.402944088 CET	42234	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:37.403768063 CET	42236	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:37.408063889 CET	839	42234	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:37.408957005 CET	839	42236	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:37.409018993 CET	42236	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:37.409077883 CET	42236	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:37.415013075 CET	839	42236	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:38.307790995 CET	839	42236	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:38.308003902 CET	42236	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:38.520406008 CET	839	42236	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:38.520766973 CET	42236	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:38.521681070 CET	42238	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:38.526483059 CET	839	42236	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:38.526801109 CET	839	42238	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:38.526887894 CET	42238	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:38.527025938 CET	42238	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:38.532160997 CET	839	42238	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:39.430254936 CET	839	42238	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:39.430610895 CET	42238	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:39.627892971 CET	839	42238	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:39.628273010 CET	42238	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:39.629010916 CET	42240	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:39.633555889 CET	839	42238	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:39.634315014 CET	839	42240	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:39.634408951 CET	42240	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:39.634496927 CET	42240	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:39.640973091 CET	839	42240	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:40.412334919 CET	839	42240	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:40.412544966 CET	42240	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:40.559382915 CET	839	42240	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:40.559775114 CET	42240	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:40.560718060 CET	42242	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:40.564929008 CET	839	42240	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:40.566392899 CET	839	42242	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:40.566517115 CET	42242	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:40.566606998 CET	42242	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:40.572148085 CET	839	42242	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:41.297548056 CET	839	42242	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:41.297889948 CET	42242	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:41.426134109 CET	839	42242	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:41.426598072 CET	42242	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:41.427756071 CET	42244	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:41.431858063 CET	839	42242	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:41.432982922 CET	839	42244	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:41.433072090 CET	42244	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:41.433198929 CET	42244	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:41.438066006 CET	839	42244	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:42.190701008 CET	839	42244	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:42.190834045 CET	42244	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:42.328691006 CET	839	42244	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:42.328986883 CET	42244	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:42.329775095 CET	42246	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:42.334467888 CET	839	42244	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:42.334655046 CET	839	42246	185.78.76.132	192.168.2.23
Nov 13, 2024 19:29:42.334712982 CET	42246	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:42.334775925 CET	42246	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:29:42.340219021 CET	839	42246	185.78.76.132	192.168.2.23
Nov 13, 2024 19:30:42.145741940 CET	839	42246	185.78.76.132	192.168.2.23
Nov 13, 2024 19:30:42.146069050 CET	42246	839	192.168.2.23	185.78.76.132
Nov 13, 2024 19:30:42.273782969 CET	839	42246	185.78.76.132	192.168.2.23
Nov 13, 2024 19:30:42.274036884 CET	42246	839	192.168.2.23	185.78.76.132

System Behavior

Analysis Process: a-r.m-6.ISIS.elf PID: 6241, Parent PID: 6162

General

Start time (UTC):	18:27:55
Start date (UTC):	13/11/2024
Path:	/tmp/a-r.m-6.ISIS.elf
Arguments:	/tmp/a-r.m-6.ISIS.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: a-r.m-6.ISIS.elf PID: 6243, Parent PID: 6241

General

Start time (UTC):	18:27:55
Start date (UTC):	13/11/2024
Path:	/tmp/a-r.m-6.ISIS.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: a-r.m-6.ISIS.elf PID: 6245, Parent PID: 6243

General

Start time (UTC):	18:27:55
Start date (UTC):	13/11/2024
Path:	/tmp/a-r.m-6.ISIS.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report a-r.m-6.ISIS.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: a-r.m-6.ISIS.elf PID: 6241, Parent PID: 6162

General

Chronological Activities

Analysis Process: a-r.m-6.ISIS.elf PID: 6243, Parent PID: 6241

General

Chronological Activities

Analysis Process: a-r.m-6.ISIS.elf PID: 6245, Parent PID: 6243

General

Chronological Activities

Linux Analysis Report
a-r.m-6.ISIS.elf