Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
mips.xxx.elf

Overview

General Information

Sample name:	mips.xxx.elf
Analysis ID:	1573487
MD5:	1703d90197e3b1b63af72be9d5cd6a2a
SHA1:	e7387ee6540102b990d6e5d2654976a5498bc8a1
SHA256:	dda99de4531968c47c047e03233f35071cecd94320ff46e967d074934f634669
Tags:	elfMiraiuser-lontze7
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

×

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573487
Start date and time:	2024-12-12 06:44:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mips.xxx.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@0/0

Warnings

VT rate limit hit for: 185.177.25.107:606

Runtime Messages

Command:	/tmp/mips.xxx.elf
PID:	6269
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

mips.xxx.elf (PID: 6269, Parent: 6188, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/mips.xxx.elf

mips.xxx.elf New Fork (PID: 6271, Parent: 6269)

mips.xxx.elf New Fork (PID: 6273, Parent: 6271)

dash New Fork (PID: 6282, Parent: 4331)

rm (PID: 6282, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.4QVhHlJXd8 /tmp/tmp.DHwedfqBHu /tmp/tmp.HYwc7AQWjf

dash New Fork (PID: 6283, Parent: 4331)

rm (PID: 6283, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.4QVhHlJXd8 /tmp/tmp.DHwedfqBHu /tmp/tmp.HYwc7AQWjf

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
mips.xxx.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
mips.xxx.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
mips.xxx.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x19ae0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19af4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19be4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6269.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6269.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x19ae0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19af4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19be4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6271.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6271.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x19ae0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19af4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19be4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19bf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mips.xxx.elf PID: 6269	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: mips.xxx.elf PID: 6269	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12de:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1306:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1342:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1356:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x136a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x137e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1392:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1432:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1446:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mips.xxx.elf PID: 6271	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: mips.xxx.elf PID: 6271	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x13d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1411:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1425:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1439:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x144d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1461:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1475:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1489:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x149d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1501:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1515:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1529:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x153d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-12T06:45:57.369143+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57048	185.177.25.107	606	TCP
2024-12-12T06:45:59.500622+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57050	185.177.25.107	606	TCP
2024-12-12T06:46:01.612605+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57052	185.177.25.107	606	TCP
2024-12-12T06:46:03.736961+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57054	185.177.25.107	606	TCP
2024-12-12T06:46:05.862858+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57056	185.177.25.107	606	TCP
2024-12-12T06:46:07.986084+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57058	185.177.25.107	606	TCP
2024-12-12T06:46:10.111506+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57060	185.177.25.107	606	TCP
2024-12-12T06:46:12.242384+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57062	185.177.25.107	606	TCP
2024-12-12T06:46:14.362779+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57064	185.177.25.107	606	TCP
2024-12-12T06:46:16.489174+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57066	185.177.25.107	606	TCP
2024-12-12T06:46:18.613366+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57068	185.177.25.107	606	TCP
2024-12-12T06:46:20.738418+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57070	185.177.25.107	606	TCP
2024-12-12T06:46:22.863262+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57072	185.177.25.107	606	TCP
2024-12-12T06:46:24.987212+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57074	185.177.25.107	606	TCP
2024-12-12T06:46:27.112001+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57076	185.177.25.107	606	TCP
2024-12-12T06:46:29.239264+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57078	185.177.25.107	606	TCP
2024-12-12T06:46:31.363461+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57080	185.177.25.107	606	TCP
2024-12-12T06:46:33.471231+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57082	185.177.25.107	606	TCP
2024-12-12T06:46:35.604674+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57084	185.177.25.107	606	TCP
2024-12-12T06:46:37.738028+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57086	185.177.25.107	606	TCP
2024-12-12T06:46:39.863870+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57088	185.177.25.107	606	TCP
2024-12-12T06:46:41.971744+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57090	185.177.25.107	606	TCP
2024-12-12T06:46:44.098368+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57092	185.177.25.107	606	TCP
2024-12-12T06:46:46.222838+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57094	185.177.25.107	606	TCP
2024-12-12T06:46:48.348357+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57096	185.177.25.107	606	TCP
2024-12-12T06:46:50.471077+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57098	185.177.25.107	606	TCP
2024-12-12T06:46:52.613237+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57100	185.177.25.107	606	TCP
2024-12-12T06:46:54.737012+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57102	185.177.25.107	606	TCP
2024-12-12T06:46:56.864364+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57104	185.177.25.107	606	TCP
2024-12-12T06:46:59.004182+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57106	185.177.25.107	606	TCP
2024-12-12T06:47:01.160511+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57108	185.177.25.107	606	TCP
2024-12-12T06:47:03.283668+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57110	185.177.25.107	606	TCP
2024-12-12T06:47:05.409822+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57112	185.177.25.107	606	TCP
2024-12-12T06:47:07.603573+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57114	185.177.25.107	606	TCP
2024-12-12T06:47:09.722119+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57116	185.177.25.107	606	TCP
2024-12-12T06:47:11.863151+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57118	185.177.25.107	606	TCP
2024-12-12T06:47:13.988616+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57120	185.177.25.107	606	TCP
2024-12-12T06:47:16.112872+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57122	185.177.25.107	606	TCP
2024-12-12T06:47:18.270865+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57124	185.177.25.107	606	TCP
2024-12-12T06:47:20.393791+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57126	185.177.25.107	606	TCP
2024-12-12T06:47:22.505196+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57128	185.177.25.107	606	TCP
2024-12-12T06:47:24.630994+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57130	185.177.25.107	606	TCP
2024-12-12T06:47:26.755935+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57132	185.177.25.107	606	TCP
2024-12-12T06:47:28.880077+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57134	185.177.25.107	606	TCP
2024-12-12T06:47:31.004684+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57136	185.177.25.107	606	TCP
2024-12-12T06:47:33.129226+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57138	185.177.25.107	606	TCP
2024-12-12T06:47:35.253976+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57140	185.177.25.107	606	TCP
2024-12-12T06:47:37.378815+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57142	185.177.25.107	606	TCP
2024-12-12T06:47:39.505679+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57144	185.177.25.107	606	TCP
2024-12-12T06:47:41.631234+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57146	185.177.25.107	606	TCP
2024-12-12T06:47:43.771420+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57148	185.177.25.107	606	TCP
2024-12-12T06:47:45.895447+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57150	185.177.25.107	606	TCP
2024-12-12T06:47:48.021344+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57152	185.177.25.107	606	TCP
2024-12-12T06:47:50.145320+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57154	185.177.25.107	606	TCP
2024-12-12T06:47:52.270926+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57156	185.177.25.107	606	TCP
2024-12-12T06:47:54.398920+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57158	185.177.25.107	606	TCP
2024-12-12T06:47:56.504311+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57160	185.177.25.107	606	TCP
2024-12-12T06:47:58.633003+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57162	185.177.25.107	606	TCP
2024-12-12T06:48:00.773025+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57164	185.177.25.107	606	TCP
2024-12-12T06:48:02.911154+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57166	185.177.25.107	606	TCP
2024-12-12T06:48:05.036500+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57168	185.177.25.107	606	TCP
2024-12-12T06:48:07.160614+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57170	185.177.25.107	606	TCP
2024-12-12T06:48:09.287385+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57172	185.177.25.107	606	TCP
2024-12-12T06:48:11.411443+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57174	185.177.25.107	606	TCP
2024-12-12T06:48:13.537015+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57176	185.177.25.107	606	TCP
2024-12-12T06:48:15.662386+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57178	185.177.25.107	606	TCP
2024-12-12T06:48:17.787277+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57180	185.177.25.107	606	TCP
2024-12-12T06:48:19.912604+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57182	185.177.25.107	606	TCP
2024-12-12T06:48:22.036819+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57184	185.177.25.107	606	TCP
2024-12-12T06:48:24.147248+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57186	185.177.25.107	606	TCP
2024-12-12T06:48:26.272546+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57188	185.177.25.107	606	TCP
2024-12-12T06:48:28.410948+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57190	185.177.25.107	606	TCP
2024-12-12T06:48:30.538531+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57192	185.177.25.107	606	TCP
2024-12-12T06:48:32.645367+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57194	185.177.25.107	606	TCP
2024-12-12T06:48:34.771789+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57196	185.177.25.107	606	TCP
2024-12-12T06:48:36.881480+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57198	185.177.25.107	606	TCP
2024-12-12T06:48:39.005321+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57200	185.177.25.107	606	TCP
2024-12-12T06:48:41.115526+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57202	185.177.25.107	606	TCP
2024-12-12T06:48:43.240988+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57204	185.177.25.107	606	TCP
2024-12-12T06:48:45.365383+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57206	185.177.25.107	606	TCP
2024-12-12T06:48:47.490183+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57208	185.177.25.107	606	TCP
2024-12-12T06:48:49.620042+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57210	185.177.25.107	606	TCP
2024-12-12T06:48:51.744006+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57212	185.177.25.107	606	TCP
2024-12-12T06:48:53.869006+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57214	185.177.25.107	606	TCP
2024-12-12T06:48:55.995220+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57216	185.177.25.107	606	TCP
2024-12-12T06:48:58.118761+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57218	185.177.25.107	606	TCP
2024-12-12T06:49:00.243705+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57220	185.177.25.107	606	TCP
2024-12-12T06:49:02.369725+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57222	185.177.25.107	606	TCP
2024-12-12T06:49:04.497628+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57224	185.177.25.107	606	TCP
2024-12-12T06:49:06.621791+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57226	185.177.25.107	606	TCP
2024-12-12T06:49:08.743688+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57228	185.177.25.107	606	TCP
2024-12-12T06:49:10.869882+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57230	185.177.25.107	606	TCP
2024-12-12T06:49:12.994942+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57232	185.177.25.107	606	TCP
2024-12-12T06:49:15.103653+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57234	185.177.25.107	606	TCP
2024-12-12T06:49:17.247510+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57236	185.177.25.107	606	TCP
2024-12-12T06:49:19.386246+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57238	185.177.25.107	606	TCP
2024-12-12T06:49:21.526891+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57240	185.177.25.107	606	TCP
2024-12-12T06:49:23.651173+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57242	185.177.25.107	606	TCP
2024-12-12T06:49:25.776193+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57244	185.177.25.107	606	TCP
2024-12-12T06:49:27.901899+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57246	185.177.25.107	606	TCP
2024-12-12T06:49:30.027791+0100	2846526	1	A Network Trojan was detected	192.168.2.23	57248	185.177.25.107	606	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mips.xxx.elf

Avira: detected

Found malware configuration

Source: mips.xxx.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.177.25.107:606"}

Multi AV Scanner detection for submitted file

Source: mips.xxx.elf

Virustotal: Detection: 57%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/mips.xxx.elf (PID: 6269)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57056 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57052 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57050 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57054 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57048 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57062 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57064 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57094 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57072 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57074 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57080 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57098 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57114 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57082 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57122 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57100 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57092 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57128 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57058 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57120 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57138 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57214 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57130 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57230 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57166 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57142 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57068 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57196 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57096 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57106 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57168 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57198 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57174 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57086 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57192 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57148 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57220 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57136 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57126 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57060 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57226 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57118 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57164 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57152 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57186 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57238 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57102 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57104 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57210 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57244 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57178 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57158 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57184 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57070 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57108 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57170 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57182 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57084 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57078 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57242 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57218 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57110 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57224 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57248 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57116 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57160 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57202 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57132 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57200 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57228 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57112 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57154 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57124 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57150 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57188 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57204 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57206 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57234 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57176 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57076 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57134 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57172 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57066 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57212 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57216 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57236 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57144 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57088 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57140 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57162 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57240 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57180 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57190 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57208 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57090 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57246 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57146 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57222 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57156 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57194 -> 185.177.25.107:606
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:57232 -> 185.177.25.107:606

Source: global traffic

TCP traffic: 192.168.2.23:57048 -> 185.177.25.107:606

Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107
Source: unknown	TCP traffic detected without corresponding DNS query: 185.177.25.107

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39254
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39254 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: mips.xxx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6269.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6271.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mips.xxx.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mips.xxx.elf PID: 6271, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: mips.xxx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6269.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6271.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mips.xxx.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mips.xxx.elf PID: 6271, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@0/0

Source: /usr/bin/dash (PID: 6282)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.4QVhHlJXd8 /tmp/tmp.DHwedfqBHu /tmp/tmp.HYwc7AQWjf			Jump to behavior
Source: /usr/bin/dash (PID: 6283)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.4QVhHlJXd8 /tmp/tmp.DHwedfqBHu /tmp/tmp.HYwc7AQWjf			Jump to behavior

Source: /tmp/mips.xxx.elf (PID: 6269)

Queries kernel information via 'uname':

Jump to behavior

Source: mips.xxx.elf, 6269.1.0000564e81b1e000.0000564e81ba5000.rw-.sdmp, mips.xxx.elf, 6271.1.0000564e81b1e000.0000564e81ba5000.rw-.sdmp	Binary or memory string: NV!/etc/qemu-binfmt/mips
Source: mips.xxx.elf, 6269.1.00007ffeb1ee3000.00007ffeb1f04000.rw-.sdmp	Binary or memory string: NV/tmp/qemu-open.X2pZhe\
Source: mips.xxx.elf, 6269.1.00007ffeb1ee3000.00007ffeb1f04000.rw-.sdmp, mips.xxx.elf, 6271.1.00007ffeb1ee3000.00007ffeb1f04000.rw-.sdmp	Binary or memory string: :x86_64/usr/bin/qemu-mips/tmp/mips.xxx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mips.xxx.elf
Source: mips.xxx.elf, 6269.1.0000564e81b1e000.0000564e81ba5000.rw-.sdmp, mips.xxx.elf, 6271.1.0000564e81b1e000.0000564e81ba5000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: mips.xxx.elf, 6269.1.00007ffeb1ee3000.00007ffeb1f04000.rw-.sdmp, mips.xxx.elf, 6271.1.00007ffeb1ee3000.00007ffeb1f04000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: mips.xxx.elf, 6269.1.00007ffeb1ee3000.00007ffeb1f04000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.X2pZhe

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: mips.xxx.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: mips.xxx.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6271.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mips.xxx.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mips.xxx.elf PID: 6271, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: mips.xxx.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: mips.xxx.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6271.1.00007f9c48400000.00007f9c4841d000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mips.xxx.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mips.xxx.elf PID: 6271, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.177.25.107:606"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mips.xxx.elf	58%	Virustotal		Browse
mips.xxx.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
185.177.25.107:606	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.177.25.107:606	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
34.249.145.219	unknown	United States		16509	AMAZON-02US	false
185.177.25.107	unknown	Turkey		18013	ASLINE-AS-APASLINELIMITEDHK	true
109.202.202.202	unknown	Switzerland		13030	INIT7CH	false
91.189.91.42	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.249.145.219	main_arm5.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	roze.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sora.i686.elf	Get hash	malicious	Mirai	Browse
	most-x86_64.elf	Get hash	malicious	Mirai	Browse
	Demon.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	udp.elf	Get hash	malicious	Unknown	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	dlr.spc.elf	Get hash	malicious	Unknown	Browse
185.177.25.107	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.42	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	sshd.elf	Get hash	malicious	Unknown	Browse
	fruit.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	sshd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	fruit.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	91.189.91.42
INIT7CH	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	fruit.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	sshd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	fruit.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	109.202.202.202
ASLINE-AS-APASLINELIMITEDHK	m68k.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	ppc.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	arm6.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	mpsl.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
	fruit.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.177.25.107
AMAZON-02US	SHIPPING DOCUMENTS_PDF.exe	Get hash	malicious	FormBook	Browse	18.139.62.226
	jew.ppc.elf	Get hash	malicious	Unknown	Browse	18.226.64.181
	jew.mips.elf	Get hash	malicious	Unknown	Browse	52.52.10.186
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	54.195.68.141
	jew.arm6.elf	Get hash	malicious	Unknown	Browse	34.247.205.175
	https://newdocumentsproposal.webflow.io/	Get hash	malicious	Captcha Phish, HTMLPhisher	Browse	13.227.9.227
	x86_64.elf	Get hash	malicious	Mirai	Browse	100.20.19.195
	i686.elf	Get hash	malicious	Mirai	Browse	18.240.63.133
	x86.elf	Get hash	malicious	Mirai	Browse	18.196.227.86
	main_arm5.elf	Get hash	malicious	Mirai	Browse	34.249.145.219

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.X2pZhe (deleted)

Process:	/tmp/mips.xxx.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.337680874595937
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mips.xxx.elf
File size:	152'382 bytes
MD5:	1703d90197e3b1b63af72be9d5cd6a2a
SHA1:	e7387ee6540102b990d6e5d2654976a5498bc8a1
SHA256:	dda99de4531968c47c047e03233f35071cecd94320ff46e967d074934f634669
SHA512:	d2c574e1438869570f4c9b22c092bae054de9aade23e126353e546b4147ac45bebd9c0fca7e5df90f33aa10430f40658a679272f4bbd1fbbcb42a75bc6a5770a
SSDEEP:	3072:w2ykw74kHJDcLpIGusHLusLrmNBymgYmPQ:FqHVcFxLusLrmNBymXmPQ
TLSH:	28E3C73E7A12EBBEE569863107F75FB087A522D227919341F26CCB181E7124D1C8FB90
File Content Preview:	.ELF.....................@.....4.........4. ...(....p........@...@...........................@...@...........................B...B........z................T.B.T.B.T................dt.Q.................................................CCp<...'.B....!'......

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002d0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	128492
Section Header Size:	40
Number of Section Headers:	23
Header String Table Index:	20

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000d4	0xd4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000ec	0xec	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400180	0x180	0x191f0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x419370	0x19370	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x4193d0	0x193d0	0x2c40	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x42c010	0x1c010	0x44	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x42c054	0x1c054	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x42c054	0x1c054	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42c05c	0x1c05c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x42c064	0x1c064	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x42c068	0x1c068	0x20	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x42c090	0x1c090	0x2f0	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x42c380	0x1c380	0x510	0x4	0x10000003	WAp	0	0	16
.sdata	PROGBITS	0x42c890	0x1c890	0x4	0x0	0x10000003	WAp	0	0	4
.sbss	NOBITS	0x42c894	0x1c894	0x4c	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x42c8e0	0x1c894	0x7148	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x1c894	0xbd0	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xbd0	0x1d464	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x1d464	0x20e0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x1f544	0xa7	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1f984	0x32d0	0x10	0x0		22	327	4
.strtab	STRTAB	0x0	0x22c54	0x26ea	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Prog Interpreter	Section Mappings
<unknown>	0xd4	0x4000d4	0x4000d4	0x18	0x18	0.9000	0x4	R	0x4		.reginfo
LOAD	0x0	0x400000	0x400000	0x1c010	0x1c010	5.3019	0x5	R E	0x10000		.reginfo .init .text .fini .rodata
LOAD	0x1c010	0x42c010	0x42c010	0x884	0x7a18	4.5775	0x6	RW	0x10000		.eh_frame .tbss .ctors .dtors .jcr .data.rel.ro .data .got .sdata .sbss .bss
TLS	0x1c054	0x42c054	0x42c054	0x0	0x8	0.0000	0x4	R	0x4		.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Version Info Name	Version Info File Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
			.symtab	0x4000d4	0	SECTION	<unknown>	DEFAULT	1
			.symtab	0x4000ec	0	SECTION	<unknown>	DEFAULT	2
			.symtab	0x400180	0	SECTION	<unknown>	DEFAULT	3
			.symtab	0x419370	0	SECTION	<unknown>	DEFAULT	4
			.symtab	0x4193d0	0	SECTION	<unknown>	DEFAULT	5
			.symtab	0x42c010	0	SECTION	<unknown>	DEFAULT	6
			.symtab	0x42c054	0	SECTION	<unknown>	DEFAULT	7
			.symtab	0x42c054	0	SECTION	<unknown>	DEFAULT	8
			.symtab	0x42c05c	0	SECTION	<unknown>	DEFAULT	9
			.symtab	0x42c064	0	SECTION	<unknown>	DEFAULT	10
			.symtab	0x42c068	0	SECTION	<unknown>	DEFAULT	11
			.symtab	0x42c090	0	SECTION	<unknown>	DEFAULT	12
			.symtab	0x42c380	0	SECTION	<unknown>	DEFAULT	13
			.symtab	0x42c890	0	SECTION	<unknown>	DEFAULT	14
			.symtab	0x42c894	0	SECTION	<unknown>	DEFAULT	15
			.symtab	0x42c8e0	0	SECTION	<unknown>	DEFAULT	16
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
			.symtab	0xbd0	0	SECTION	<unknown>	DEFAULT	18
			.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
C.1.5091			.symtab	0x41ae70	24	OBJECT	<unknown>	DEFAULT	5
C.108.5618			.symtab	0x42c068	8	OBJECT	<unknown>	DEFAULT	11
C.141.5930			.symtab	0x42c070	24	OBJECT	<unknown>	DEFAULT	11
C.3.5380			.symtab	0x41ae4c	12	OBJECT	<unknown>	DEFAULT	5
C.3.6092			.symtab	0x41af80	12	OBJECT	<unknown>	DEFAULT	5
C.3.6114			.symtab	0x41aeb8	12	OBJECT	<unknown>	DEFAULT	5
C.3.6172			.symtab	0x41ae90	12	OBJECT	<unknown>	DEFAULT	5
C.4.6115			.symtab	0x41aeac	12	OBJECT	<unknown>	DEFAULT	5
C.5.6123			.symtab	0x41aea0	12	OBJECT	<unknown>	DEFAULT	5
C.6.5518			.symtab	0x41ae40	12	OBJECT	<unknown>	DEFAULT	5
FRAMESZ			.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF			.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ			.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Q			.symtab	0x42c918	16384	OBJECT	<unknown>	DEFAULT	16
RAOFF			.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Sakura_Bot.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD			.symtab	0x4047ac	524	FUNC	<unknown>	DEFAULT	3
SendSTDHEX			.symtab	0x403904	548	FUNC	<unknown>	DEFAULT	3
SendSTD_HEX			.symtab	0x404bd0	596	FUNC	<unknown>	DEFAULT	3
SendUDP			.symtab	0x402948	1704	FUNC	<unknown>	DEFAULT	3
V0OFF			.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit			.symtab	0x40a210	76	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_			.symtab	0x42c380	0	OBJECT	<unknown>	DEFAULT	13
_Jv_RegisterClasses			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__			.symtab	0x42c058	0	OBJECT	<unknown>	DEFAULT	8
__CTOR_LIST__			.symtab	0x42c054	0	OBJECT	<unknown>	DEFAULT	8
__C_ctype_b			.symtab	0x42c0e0	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data			.symtab	0x41a3f0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower			.symtab	0x42c370	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data			.symtab	0x41bd10	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper			.symtab	0x42c0f0	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data			.symtab	0x41a6f0	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__			.symtab	0x42c060	0	OBJECT	<unknown>	DEFAULT	9
__DTOR_LIST__			.symtab	0x42c05c	0	OBJECT	<unknown>	DEFAULT	9
__EH_FRAME_BEGIN__			.symtab	0x42c010	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__			.symtab	0x42c050	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b			.symtab	0x42c0e0	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower			.symtab	0x42c370	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper			.symtab	0x42c0f0	4	OBJECT	<unknown>	HIDDEN	12
__GI___close			.symtab	0x40e29c	176	FUNC	<unknown>	HIDDEN	3
__GI___close_nocancel			.symtab	0x40e274	40	FUNC	<unknown>	HIDDEN	3
__GI___ctype_b			.symtab	0x42c0e4	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower			.symtab	0x42c374	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper			.symtab	0x42c0f4	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location			.symtab	0x40a650	28	FUNC	<unknown>	HIDDEN	3
__GI___fcntl_nocancel			.symtab	0x40a090	108	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked			.symtab	0x411460	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r			.symtab	0x417530	68	FUNC	<unknown>	HIDDEN	3
__GI___libc_close			.symtab	0x40e29c	176	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl			.symtab	0x40a0fc	268	FUNC	<unknown>	HIDDEN	3
__GI___libc_open			.symtab	0x40e38c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_read			.symtab	0x40e58c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_waitpid			.symtab	0x40e68c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_write			.symtab	0x40e48c	192	FUNC	<unknown>	HIDDEN	3
__GI___open			.symtab	0x40e38c	192	FUNC	<unknown>	HIDDEN	3
__GI___open_nocancel			.symtab	0x40e364	40	FUNC	<unknown>	HIDDEN	3
__GI___read			.symtab	0x40e58c	192	FUNC	<unknown>	HIDDEN	3
__GI___read_nocancel			.symtab	0x40e564	40	FUNC	<unknown>	HIDDEN	3
__GI___register_atfork			.symtab	0x40dd00	452	FUNC	<unknown>	HIDDEN	3
__GI___sigaddset			.symtab	0x40b4f8	44	FUNC	<unknown>	HIDDEN	3
__GI___sigdelset			.symtab	0x40b524	48	FUNC	<unknown>	HIDDEN	3
__GI___sigismember			.symtab	0x40b4d0	40	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini			.symtab	0x40e900	204	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init			.symtab	0x40ea54	120	FUNC	<unknown>	HIDDEN	3
__GI___waitpid			.symtab	0x40e68c	192	FUNC	<unknown>	HIDDEN	3
__GI___write			.symtab	0x40e48c	192	FUNC	<unknown>	HIDDEN	3
__GI___write_nocancel			.symtab	0x40e464	40	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r			.symtab	0x417580	380	FUNC	<unknown>	HIDDEN	3
__GI__exit			.symtab	0x40a210	76	FUNC	<unknown>	HIDDEN	3
__GI_abort			.symtab	0x40c6e0	408	FUNC	<unknown>	HIDDEN	3
__GI_atoi			.symtab	0x40d000	28	FUNC	<unknown>	HIDDEN	3
__GI_brk			.symtab	0x412dc0	80	FUNC	<unknown>	HIDDEN	3
__GI_chdir			.symtab	0x40a2a0	56	FUNC	<unknown>	HIDDEN	3
__GI_close			.symtab	0x40e29c	176	FUNC	<unknown>	HIDDEN	3
__GI_closedir			.symtab	0x40f470	292	FUNC	<unknown>	HIDDEN	3
__GI_config_close			.symtab	0x40fe64	132	FUNC	<unknown>	HIDDEN	3
__GI_config_open			.symtab	0x40fee8	116	FUNC	<unknown>	HIDDEN	3
__GI_config_read			.symtab	0x40f9a0	1220	FUNC	<unknown>	HIDDEN	3
__GI_connect			.symtab	0x40adcc	220	FUNC	<unknown>	HIDDEN	3
__GI_exit			.symtab	0x40d230	240	FUNC	<unknown>	HIDDEN	3
__GI_fclose			.symtab	0x40ff60	804	FUNC	<unknown>	HIDDEN	3
__GI_fcntl			.symtab	0x40a0fc	268	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked			.symtab	0x4110a8	940	FUNC	<unknown>	HIDDEN	3
__GI_fgetc			.symtab	0x410b60	372	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked			.symtab	0x411460	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets			.symtab	0x410ce0	320	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked			.symtab	0x4115f0	276	FUNC	<unknown>	HIDDEN	3
__GI_fopen			.symtab	0x410290	28	FUNC	<unknown>	HIDDEN	3
__GI_fork			.symtab	0x40d8d0	988	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked			.symtab	0x4172a0	124	FUNC	<unknown>	HIDDEN	3
__GI_fseek			.symtab	0x418f40	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64			.symtab	0x418f90	500	FUNC	<unknown>	HIDDEN	3
__GI_fstat			.symtab	0x412e90	136	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked			.symtab	0x417320	268	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked			.symtab	0x411460	388	FUNC	<unknown>	HIDDEN	3
__GI_getdtablesize			.symtab	0x40f0c0	72	FUNC	<unknown>	HIDDEN	3
__GI_getegid			.symtab	0x40f110	16	FUNC	<unknown>	HIDDEN	3
__GI_geteuid			.symtab	0x40f120	16	FUNC	<unknown>	HIDDEN	3
__GI_getgid			.symtab	0x40f130	16	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname			.symtab	0x40ad00	28	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname2			.symtab	0x40ad20	104	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname2_r			.symtab	0x411fd0	948	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r			.symtab	0x415520	968	FUNC	<unknown>	HIDDEN	3
__GI_gethostname			.symtab	0x415950	192	FUNC	<unknown>	HIDDEN	3
__GI_getpagesize			.symtab	0x40f140	48	FUNC	<unknown>	HIDDEN	3
__GI_getpid			.symtab	0x40ded0	84	FUNC	<unknown>	HIDDEN	3
__GI_getrlimit			.symtab	0x40f170	60	FUNC	<unknown>	HIDDEN	3
__GI_getsockname			.symtab	0x40aeb0	60	FUNC	<unknown>	HIDDEN	3
__GI_getuid			.symtab	0x40f1b0	16	FUNC	<unknown>	HIDDEN	3
__GI_htonl			.symtab	0x40abd0	8	FUNC	<unknown>	HIDDEN	3
__GI_htons			.symtab	0x40abd8	8	FUNC	<unknown>	HIDDEN	3
__GI_inet_addr			.symtab	0x40acb0	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton			.symtab	0x411ed0	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa			.symtab	0x40ac8c	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r			.symtab	0x40abe0	172	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop			.symtab	0x413d7c	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton			.symtab	0x413908	696	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r			.symtab	0x40cdbc	300	FUNC	<unknown>	HIDDEN	3
__GI_ioctl			.symtab	0x40a2e0	248	FUNC	<unknown>	HIDDEN	3
__GI_isatty			.symtab	0x411de0	60	FUNC	<unknown>	HIDDEN	3
__GI_isspace			.symtab	0x40a5e0	44	FUNC	<unknown>	HIDDEN	3
__GI_kill			.symtab	0x40a3e0	56	FUNC	<unknown>	HIDDEN	3
__GI_lseek64			.symtab	0x415c00	140	FUNC	<unknown>	HIDDEN	3
__GI_memchr			.symtab	0x418b70	260	FUNC	<unknown>	HIDDEN	3
__GI_memcpy			.symtab	0x40a670	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove			.symtab	0x411710	824	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy			.symtab	0x413650	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr			.symtab	0x418c80	260	FUNC	<unknown>	HIDDEN	3
__GI_memset			.symtab	0x40a7b0	144	FUNC	<unknown>	HIDDEN	3
__GI_mmap			.symtab	0x40ef40	112	FUNC	<unknown>	HIDDEN	3
__GI_mremap			.symtab	0x412f20	96	FUNC	<unknown>	HIDDEN	3
__GI_munmap			.symtab	0x40f1c0	60	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep			.symtab	0x40f23c	200	FUNC	<unknown>	HIDDEN	3
__GI_ntohl			.symtab	0x40abc0	8	FUNC	<unknown>	HIDDEN	3
__GI_ntohs			.symtab	0x40abc8	8	FUNC	<unknown>	HIDDEN	3
__GI_open			.symtab	0x40e38c	192	FUNC	<unknown>	HIDDEN	3
__GI_opendir			.symtab	0x40f6b4	240	FUNC	<unknown>	HIDDEN	3
__GI_poll			.symtab	0x415a4c	220	FUNC	<unknown>	HIDDEN	3
__GI_raise			.symtab	0x40df30	264	FUNC	<unknown>	HIDDEN	3
__GI_random			.symtab	0x40c8a0	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r			.symtab	0x40cb80	172	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr			.symtab	0x4136a0	192	FUNC	<unknown>	HIDDEN	3
__GI_read			.symtab	0x40e58c	192	FUNC	<unknown>	HIDDEN	3
__GI_readdir64			.symtab	0x40f890	272	FUNC	<unknown>	HIDDEN	3
__GI_recv			.symtab	0x40af8c	240	FUNC	<unknown>	HIDDEN	3
__GI_sbrk			.symtab	0x40f310	164	FUNC	<unknown>	HIDDEN	3
__GI_select			.symtab	0x40a480	260	FUNC	<unknown>	HIDDEN	3
__GI_send			.symtab	0x40b0bc	240	FUNC	<unknown>	HIDDEN	3
__GI_sendto			.symtab	0x40b220	280	FUNC	<unknown>	HIDDEN	3
__GI_setsid			.symtab	0x40a590	60	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt			.symtab	0x40b340	96	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r			.symtab	0x40cee8	272	FUNC	<unknown>	HIDDEN	3
__GI_sigaction			.symtab	0x40efb0	28	FUNC	<unknown>	HIDDEN	3
__GI_signal			.symtab	0x40b3e0	228	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask			.symtab	0x40f3c0	176	FUNC	<unknown>	HIDDEN	3
__GI_sleep			.symtab	0x40e040	404	FUNC	<unknown>	HIDDEN	3
__GI_socket			.symtab	0x40b3a0	60	FUNC	<unknown>	HIDDEN	3
__GI_sprintf			.symtab	0x415c90	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r			.symtab	0x40cc2c	400	FUNC	<unknown>	HIDDEN	3
__GI_stat			.symtab	0x415b30	136	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp			.symtab	0x418d90	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr			.symtab	0x40a840	248	FUNC	<unknown>	HIDDEN	3
__GI_strchrnul			.symtab	0x411a50	248	FUNC	<unknown>	HIDDEN	3
__GI_strcmp			.symtab	0x40a940	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll			.symtab	0x40a940	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy			.symtab	0x40a970	36	FUNC	<unknown>	HIDDEN	3
__GI_strcspn			.symtab	0x411b50	144	FUNC	<unknown>	HIDDEN	3
__GI_strdup			.symtab	0x417700	140	FUNC	<unknown>	HIDDEN	3
__GI_strlen			.symtab	0x40a9a0	184	FUNC	<unknown>	HIDDEN	3
__GI_strncpy			.symtab	0x413760	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen			.symtab	0x417430	248	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk			.symtab	0x411da0	64	FUNC	<unknown>	HIDDEN	3
__GI_strrchr			.symtab	0x411be0	160	FUNC	<unknown>	HIDDEN	3
__GI_strspn			.symtab	0x411c80	72	FUNC	<unknown>	HIDDEN	3
__GI_strstr			.symtab	0x40aa60	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok			.symtab	0x40aba0	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r			.symtab	0x411cd0	208	FUNC	<unknown>	HIDDEN	3
__GI_strtol			.symtab	0x40d020	28	FUNC	<unknown>	HIDDEN	3
__GI_sysconf			.symtab	0x40d51c	792	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr			.symtab	0x411e20	176	FUNC	<unknown>	HIDDEN	3
__GI_time			.symtab	0x40a5d0	16	FUNC	<unknown>	HIDDEN	3
__GI_toupper			.symtab	0x40a610	60	FUNC	<unknown>	HIDDEN	3
__GI_uname			.symtab	0x415bc0	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf			.symtab	0x415ce0	248	FUNC	<unknown>	HIDDEN	3
__GI_waitpid			.symtab	0x40e68c	192	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb			.symtab	0x417d40	108	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs			.symtab	0x417df0	192	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs			.symtab	0x417db0	64	FUNC	<unknown>	HIDDEN	3
__GI_write			.symtab	0x40e48c	192	FUNC	<unknown>	HIDDEN	3
__JCR_END__			.symtab	0x42c064	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__			.symtab	0x42c064	0	OBJECT	<unknown>	DEFAULT	10
__app_fini			.symtab	0x43108c	4	OBJECT	<unknown>	HIDDEN	16
__atexit_lock			.symtab	0x42c200	24	OBJECT	<unknown>	DEFAULT	12
__bss_start			.symtab	0x42c894	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd			.symtab	0x40e9cc	136	FUNC	<unknown>	DEFAULT	3
__close			.symtab	0x40e29c	176	FUNC	<unknown>	DEFAULT	3
__close_nameservers			.symtab	0x4153d0	220	FUNC	<unknown>	HIDDEN	3
__close_nocancel			.symtab	0x40e274	40	FUNC	<unknown>	DEFAULT	3
__ctype_b			.symtab	0x42c0e4	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower			.symtab	0x42c374	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper			.symtab	0x42c0f4	4	OBJECT	<unknown>	DEFAULT	12
__curbrk			.symtab	0x433600	4	OBJECT	<unknown>	HIDDEN	16
__data_start			.symtab	0x42c0a0	0	OBJECT	<unknown>	DEFAULT	12
__decode_dotted			.symtab	0x4140d0	400	FUNC	<unknown>	HIDDEN	3
__decode_header			.symtab	0x4178b0	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info			.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup			.symtab	0x414260	2608	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux			.symtab	0x419300	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux			.symtab	0x400180	0	FUNC	<unknown>	DEFAULT	3
__dso_handle			.symtab	0x42c890	0	OBJECT	<unknown>	HIDDEN	14
__encode_dotted			.symtab	0x418e00	316	FUNC	<unknown>	HIDDEN	3
__encode_header			.symtab	0x417790	276	FUNC	<unknown>	HIDDEN	3
__encode_question			.symtab	0x4179a0	172	FUNC	<unknown>	HIDDEN	3
__environ			.symtab	0x431084	4	OBJECT	<unknown>	DEFAULT	16
__errno_location			.symtab	0x40a650	28	FUNC	<unknown>	DEFAULT	3
__errno_location.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup			.symtab	0x430b20	4	OBJECT	<unknown>	HIDDEN	16
__fcntl_nocancel			.symtab	0x40a090	108	FUNC	<unknown>	DEFAULT	3
__fgetc_unlocked			.symtab	0x411460	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end			.symtab	0x42c054	0	NOTYPE	<unknown>	HIDDEN	7
__fini_array_start			.symtab	0x42c054	0	NOTYPE	<unknown>	HIDDEN	7
__fork			.symtab	0x40d8d0	988	FUNC	<unknown>	DEFAULT	3
__fork_generation_pointer			.symtab	0x42c89c	4	OBJECT	<unknown>	HIDDEN	15
__fork_handlers			.symtab	0x42c8a0	4	OBJECT	<unknown>	HIDDEN	15
__fork_lock			.symtab	0x430b30	4	OBJECT	<unknown>	HIDDEN	16
__get_hosts_byname_r			.symtab	0x4154b0	104	FUNC	<unknown>	HIDDEN	3
__getdents64			.symtab	0x413160	436	FUNC	<unknown>	HIDDEN	3
__getpagesize			.symtab	0x40f140	48	FUNC	<unknown>	DEFAULT	3
__getpid			.symtab	0x40ded0	84	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r			.symtab	0x417530	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location			.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end			.symtab	0x42c054	0	NOTYPE	<unknown>	HIDDEN	7
__init_array_start			.symtab	0x42c054	0	NOTYPE	<unknown>	HIDDEN	7
__libc_close			.symtab	0x40e29c	176	FUNC	<unknown>	DEFAULT	3
__libc_connect			.symtab	0x40adcc	220	FUNC	<unknown>	DEFAULT	3
__libc_disable_asynccancel			.symtab	0x40e750	136	FUNC	<unknown>	HIDDEN	3
__libc_enable_asynccancel			.symtab	0x40e7d8	220	FUNC	<unknown>	HIDDEN	3
__libc_errno			.symtab	0x0	4	TLS	<unknown>	HIDDEN	7
__libc_fcntl			.symtab	0x40a0fc	268	FUNC	<unknown>	DEFAULT	3
__libc_fork			.symtab	0x40d8d0	988	FUNC	<unknown>	DEFAULT	3
__libc_h_errno			.symtab	0x4	4	TLS	<unknown>	HIDDEN	7
__libc_nanosleep			.symtab	0x40f23c	200	FUNC	<unknown>	DEFAULT	3
__libc_open			.symtab	0x40e38c	192	FUNC	<unknown>	DEFAULT	3
__libc_read			.symtab	0x40e58c	192	FUNC	<unknown>	DEFAULT	3
__libc_recv			.symtab	0x40af8c	240	FUNC	<unknown>	DEFAULT	3
__libc_select			.symtab	0x40a480	260	FUNC	<unknown>	DEFAULT	3
__libc_send			.symtab	0x40b0bc	240	FUNC	<unknown>	DEFAULT	3
__libc_sendto			.symtab	0x40b220	280	FUNC	<unknown>	DEFAULT	3
__libc_setup_tls			.symtab	0x412a48	660	FUNC	<unknown>	DEFAULT	3
__libc_sigaction			.symtab	0x40efb0	28	FUNC	<unknown>	DEFAULT	3
__libc_stack_end			.symtab	0x431080	4	OBJECT	<unknown>	DEFAULT	16
__libc_waitpid			.symtab	0x40e68c	192	FUNC	<unknown>	DEFAULT	3
__libc_write			.symtab	0x40e48c	192	FUNC	<unknown>	DEFAULT	3
__linkin_atfork			.symtab	0x40dcb0	80	FUNC	<unknown>	HIDDEN	3
__lll_lock_wait_private			.symtab	0x40e1e0	120	FUNC	<unknown>	HIDDEN	3
__local_nameserver			.symtab	0x41af70	16	OBJECT	<unknown>	HIDDEN	5
__malloc_consolidate			.symtab	0x40c1e4	520	FUNC	<unknown>	HIDDEN	3
__malloc_largebin_index			.symtab	0x40b560	140	FUNC	<unknown>	DEFAULT	3
__malloc_lock			.symtab	0x42c100	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state			.symtab	0x433660	888	OBJECT	<unknown>	DEFAULT	16
__malloc_trim			.symtab	0x40c0c0	292	FUNC	<unknown>	DEFAULT	3
__nameserver			.symtab	0x42c8d4	4	OBJECT	<unknown>	HIDDEN	15
__nameservers			.symtab	0x42c8d8	4	OBJECT	<unknown>	HIDDEN	15
__nptl_deallocate_tsd			.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads			.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open			.symtab	0x40e38c	192	FUNC	<unknown>	DEFAULT	3
__open_etc_hosts			.symtab	0x417a50	32	FUNC	<unknown>	HIDDEN	3
__open_nameservers			.symtab	0x414d60	1636	FUNC	<unknown>	HIDDEN	3
__open_nocancel			.symtab	0x40e364	40	FUNC	<unknown>	DEFAULT	3
__pagesize			.symtab	0x431088	4	OBJECT	<unknown>	DEFAULT	16
__preinit_array_end			.symtab	0x42c054	0	NOTYPE	<unknown>	HIDDEN	7
__preinit_array_start			.symtab	0x42c054	0	NOTYPE	<unknown>	HIDDEN	7
__progname			.symtab	0x42c224	4	OBJECT	<unknown>	DEFAULT	12
__progname_full			.symtab	0x42c228	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal			.symtab	0x412cdc	28	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_init			.symtab	0x40e8c8	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock			.symtab	0x40e8c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock			.symtab	0x40e8c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock			.symtab	0x40e8c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0			.symtab	0x40e8c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_unwind			.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__read			.symtab	0x40e58c	192	FUNC	<unknown>	DEFAULT	3
__read_etc_hosts_r			.symtab	0x417a70	720	FUNC	<unknown>	HIDDEN	3
__read_nocancel			.symtab	0x40e564	40	FUNC	<unknown>	DEFAULT	3
__register_atfork			.symtab	0x40dd00	452	FUNC	<unknown>	DEFAULT	3
__register_frame_info			.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__res_sync			.symtab	0x42c8cc	4	OBJECT	<unknown>	HIDDEN	15
__resolv_attempts			.symtab	0x42c351	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock			.symtab	0x433620	24	OBJECT	<unknown>	DEFAULT	16
__resolv_timeout			.symtab	0x42c350	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini			.symtab	0x431090	4	OBJECT	<unknown>	HIDDEN	16
__searchdomain			.symtab	0x42c8d0	4	OBJECT	<unknown>	HIDDEN	15
__searchdomains			.symtab	0x42c8dc	4	OBJECT	<unknown>	HIDDEN	15
__sigaddset			.symtab	0x40b4f8	44	FUNC	<unknown>	DEFAULT	3
__sigdelset			.symtab	0x40b524	48	FUNC	<unknown>	DEFAULT	3
__sigismember			.symtab	0x40b4d0	40	FUNC	<unknown>	DEFAULT	3
__sigjmp_save			.symtab	0x4158f0	96	FUNC	<unknown>	HIDDEN	3
__sigsetjmp			.symtab	0x40eff0	36	FUNC	<unknown>	DEFAULT	3
__sigsetjmp_aux			.symtab	0x412e10	128	FUNC	<unknown>	DEFAULT	3
__start			.symtab	0x4002d0	100	FUNC	<unknown>	DEFAULT	3
__stdin			.symtab	0x42c24c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ			.symtab	0x413320	144	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE			.symtab	0x4133b0	344	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position			.symtab	0x419190	256	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite			.symtab	0x417eb0	472	FUNC	<unknown>	HIDDEN	3
__stdio_rfill			.symtab	0x413510	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek			.symtab	0x419290	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o			.symtab	0x413570	220	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o			.symtab	0x418090	304	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit			.symtab	0x4109a0	100	FUNC	<unknown>	HIDDEN	3
__stdout			.symtab	0x42c250	4	OBJECT	<unknown>	DEFAULT	12
__sys_connect			.symtab	0x40ad90	60	FUNC	<unknown>	DEFAULT	3
__sys_recv			.symtab	0x40af50	60	FUNC	<unknown>	DEFAULT	3
__sys_send			.symtab	0x40b080	60	FUNC	<unknown>	DEFAULT	3
__sys_sendto			.symtab	0x40b1b0	112	FUNC	<unknown>	DEFAULT	3
__syscall_error			.symtab	0x40f020	92	FUNC	<unknown>	DEFAULT	3
__syscall_fcntl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep			.symtab	0x40f200	60	FUNC	<unknown>	DEFAULT	3
__syscall_poll			.symtab	0x415a10	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction			.symtab	0x40f080	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select			.symtab	0x40a420	96	FUNC	<unknown>	DEFAULT	3
__tls_get_addr			.symtab	0x412a28	32	FUNC	<unknown>	DEFAULT	3
__uClibc_fini			.symtab	0x40e900	204	FUNC	<unknown>	DEFAULT	3
__uClibc_init			.symtab	0x40ea54	120	FUNC	<unknown>	DEFAULT	3
__uClibc_main			.symtab	0x40eacc	1132	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname			.symtab	0x42c220	4	OBJECT	<unknown>	HIDDEN	12
__waitpid			.symtab	0x40e68c	192	FUNC	<unknown>	DEFAULT	3
__waitpid_nocancel			.symtab	0x40e664	40	FUNC	<unknown>	DEFAULT	3
__write			.symtab	0x40e48c	192	FUNC	<unknown>	DEFAULT	3
__write_nocancel			.symtab	0x40e464	40	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r			.symtab	0x417580	380	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv			.symtab	0x413078	220	FUNC	<unknown>	HIDDEN	3
__xstat64_conv			.symtab	0x412f80	248	FUNC	<unknown>	HIDDEN	3
_adjust_pos.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec			.symtab	0x433640	10	OBJECT	<unknown>	DEFAULT	16
_charpad			.symtab	0x415de0	156	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo			.symtab	0x4339d8	40	OBJECT	<unknown>	HIDDEN	16
_custom_printf_handler			.symtab	0x433a00	40	OBJECT	<unknown>	HIDDEN	16
_custom_printf_spec			.symtab	0x42c360	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init			.symtab	0x412d00	40	FUNC	<unknown>	DEFAULT	3
_dl_init_static_tls			.symtab	0x42c330	4	OBJECT	<unknown>	DEFAULT	12
_dl_nothread_init_static_tls			.symtab	0x412d28	148	FUNC	<unknown>	HIDDEN	3
_dl_phdr			.symtab	0x42c8c4	4	OBJECT	<unknown>	DEFAULT	15
_dl_phnum			.symtab	0x42c8c8	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_dtv_gaps			.symtab	0x42c8b8	1	OBJECT	<unknown>	DEFAULT	15
_dl_tls_dtv_slotinfo_list			.symtab	0x42c8b4	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_generation			.symtab	0x42c8bc	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_max_dtv_idx			.symtab	0x42c8ac	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_setup			.symtab	0x4129c4	100	FUNC	<unknown>	DEFAULT	3
_dl_tls_static_align			.symtab	0x42c8a8	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_nelem			.symtab	0x42c8c0	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_size			.symtab	0x42c8b0	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_used			.symtab	0x42c8a4	4	OBJECT	<unknown>	DEFAULT	15
_edata			.symtab	0x42c894	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end			.symtab	0x433a28	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit			.symtab	0x40a210	76	FUNC	<unknown>	DEFAULT	3
_exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss			.symtab	0x42c894	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata			.symtab	0x42c090	0	NOTYPE	<unknown>	DEFAULT	12
_fini			.symtab	0x419370	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers			.symtab	0x4310c0	8192	OBJECT	<unknown>	DEFAULT	16
_fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow			.symtab	0x415e7c	232	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr			.symtab	0x4182a0	2252	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext			.symtab	0x400180	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp			.symtab	0x434370	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp			.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_init			.symtab	0x4000ec	28	FUNC	<unknown>	DEFAULT	2
_load_inttype			.symtab	0x4181c0	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init			.symtab	0x416800	248	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec			.symtab	0x416c0c	1684	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs			.symtab	0x416900	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs			.symtab	0x416970	548	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size			.symtab	0x416ba0	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore			.symtab	0x40e8dc	36	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer			.symtab	0x40e8d0	12	FUNC	<unknown>	DEFAULT	3
_rfill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp			.symtab	0x40efd0	28	FUNC	<unknown>	DEFAULT	3
_sigintr			.symtab	0x433650	16	OBJECT	<unknown>	HIDDEN	16
_stdio.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen			.symtab	0x4102b0	1168	FUNC	<unknown>	HIDDEN	3
_stdio_init			.symtab	0x410740	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist			.symtab	0x42c254	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock			.symtab	0x4310a0	12	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_dec_use			.symtab	0x410e20	648	FUNC	<unknown>	HIDDEN	3
_stdio_openlist_del_count			.symtab	0x4310bc	4	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_del_lock			.symtab	0x4310ac	12	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_use_count			.symtab	0x4310b8	4	OBJECT	<unknown>	DEFAULT	16
_stdio_streams			.symtab	0x42c258	204	OBJECT	<unknown>	DEFAULT	12
_stdio_term			.symtab	0x4107f8	416	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking			.symtab	0x42c230	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l			.symtab	0x40d040	488	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype			.symtab	0x418250	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs			.symtab	0x41b0e0	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr			.symtab	0x410a10	332	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal			.symtab	0x415f64	2204	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort			.symtab	0x40c6e0	408	FUNC	<unknown>	DEFAULT	3
abort.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access			.symtab	0x40a260	60	FUNC	<unknown>	DEFAULT	3
access.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd			.symtab	0x406680	544	FUNC	<unknown>	DEFAULT	3
atcp			.symtab	0x405d6c	2324	FUNC	<unknown>	DEFAULT	3
atoi			.symtab	0x40d000	28	FUNC	<unknown>	DEFAULT	3
atol			.symtab	0x40d000	28	FUNC	<unknown>	DEFAULT	3
atol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp			.symtab	0x4054f0	2172	FUNC	<unknown>	DEFAULT	3
bcopy			.symtab	0x40ab60	32	FUNC	<unknown>	DEFAULT	3
bcopy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that			.symtab	0x430b10	4	OBJECT	<unknown>	DEFAULT	16
brk			.symtab	0x412dc0	80	FUNC	<unknown>	DEFAULT	3
brk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal			.symtab	0x40b3e0	228	FUNC	<unknown>	DEFAULT	3
buf.4497			.symtab	0x430930	16	OBJECT	<unknown>	DEFAULT	16
buf.6560			.symtab	0x430940	440	OBJECT	<unknown>	DEFAULT	16
bzero			.symtab	0x40ab80	28	FUNC	<unknown>	DEFAULT	3
bzero.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c			.symtab	0x42c0b4	4	OBJECT	<unknown>	DEFAULT	12
calloc			.symtab	0x412390	344	FUNC	<unknown>	DEFAULT	3
calloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir			.symtab	0x40a2a0	56	FUNC	<unknown>	DEFAULT	3
chdir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close			.symtab	0x40e29c	176	FUNC	<unknown>	DEFAULT	3
closedir			.symtab	0x40f470	292	FUNC	<unknown>	DEFAULT	3
closedir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer			.symtab	0x42c0c0	4	OBJECT	<unknown>	DEFAULT	12
completed.4786			.symtab	0x42c8e0	1	OBJECT	<unknown>	DEFAULT	16
connect			.symtab	0x40adcc	220	FUNC	<unknown>	DEFAULT	3
connect.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout			.symtab	0x401f10	828	FUNC	<unknown>	DEFAULT	3
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum			.symtab	0x4024e8	460	FUNC	<unknown>	DEFAULT	3
currentServer			.symtab	0x42c0b0	4	OBJECT	<unknown>	DEFAULT	12
data_start			.symtab	0x42c0a0	0	OBJECT	<unknown>	DEFAULT	12
decoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ			.symtab	0x431084	4	OBJECT	<unknown>	DEFAULT	16
errno			.symtab	0x0	4	TLS	<unknown>	DEFAULT	7
errno.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx			.symtab	0x41b050	126	OBJECT	<unknown>	DEFAULT	5
exit			.symtab	0x40d230	240	FUNC	<unknown>	DEFAULT	3
exit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table			.symtab	0x41bc88	72	OBJECT	<unknown>	DEFAULT	5
fclose			.symtab	0x40ff60	804	FUNC	<unknown>	DEFAULT	3
fclose.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl			.symtab	0x40a0fc	268	FUNC	<unknown>	DEFAULT	3
fd_to_DIR			.symtab	0x40f5a0	276	FUNC	<unknown>	DEFAULT	3
fdgets			.symtab	0x4006ec	292	FUNC	<unknown>	DEFAULT	3
fdopendir			.symtab	0x40f7a4	228	FUNC	<unknown>	DEFAULT	3
fflush_unlocked			.symtab	0x4110a8	940	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc			.symtab	0x410b60	372	FUNC	<unknown>	DEFAULT	3
fgetc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked			.symtab	0x411460	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets			.symtab	0x410ce0	320	FUNC	<unknown>	DEFAULT	3
fgets.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked			.symtab	0x4115f0	276	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt			.symtab	0x41bc70	20	OBJECT	<unknown>	DEFAULT	5
fopen			.symtab	0x410290	28	FUNC	<unknown>	DEFAULT	3
fopen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork			.symtab	0x40d8d0	988	FUNC	<unknown>	DEFAULT	3
fork.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool			.symtab	0x430b34	1348	OBJECT	<unknown>	DEFAULT	16
fputs_unlocked			.symtab	0x4172a0	124	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy			.symtab	0x40023c	0	FUNC	<unknown>	DEFAULT	3
free			.symtab	0x40c3ec	660	FUNC	<unknown>	DEFAULT	3
free.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek			.symtab	0x418f40	68	FUNC	<unknown>	DEFAULT	3
fseeko			.symtab	0x418f40	68	FUNC	<unknown>	DEFAULT	3
fseeko.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64			.symtab	0x418f90	500	FUNC	<unknown>	DEFAULT	3
fseeko64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat			.symtab	0x412e90	136	FUNC	<unknown>	DEFAULT	3
fstat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp			.symtab	0x402ff0	2324	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked			.symtab	0x417320	268	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch			.symtab	0x4068a0	56	FUNC	<unknown>	DEFAULT	3
getHost			.symtab	0x4019f8	160	FUNC	<unknown>	DEFAULT	3
getOurIP			.symtab	0x400810	896	FUNC	<unknown>	DEFAULT	3
getPortz			.symtab	0x4068d8	380	FUNC	<unknown>	DEFAULT	3
getRandomIP			.symtab	0x400640	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc			.symtab	0x410b60	372	FUNC	<unknown>	DEFAULT	3
getc_unlocked			.symtab	0x411460	388	FUNC	<unknown>	DEFAULT	3
getdents64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize			.symtab	0x40f0c0	72	FUNC	<unknown>	DEFAULT	3
getdtablesize.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid			.symtab	0x40f110	16	FUNC	<unknown>	DEFAULT	3
getegid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid			.symtab	0x40f120	16	FUNC	<unknown>	DEFAULT	3
geteuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid			.symtab	0x40f130	16	FUNC	<unknown>	DEFAULT	3
getgid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname			.symtab	0x40ad00	28	FUNC	<unknown>	DEFAULT	3
gethostbyname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2			.symtab	0x40ad20	104	FUNC	<unknown>	DEFAULT	3
gethostbyname2.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r			.symtab	0x411fd0	948	FUNC	<unknown>	DEFAULT	3
gethostbyname2_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r			.symtab	0x415520	968	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname			.symtab	0x415950	192	FUNC	<unknown>	DEFAULT	3
gethostname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize			.symtab	0x40f140	48	FUNC	<unknown>	DEFAULT	3
getpagesize.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid			.symtab	0x40ded0	84	FUNC	<unknown>	DEFAULT	3
getpid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit			.symtab	0x40f170	60	FUNC	<unknown>	DEFAULT	3
getrlimit.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname			.symtab	0x40aeb0	60	FUNC	<unknown>	DEFAULT	3
getsockname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt			.symtab	0x40aef0	96	FUNC	<unknown>	DEFAULT	3
getsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid			.symtab	0x40f1b0	16	FUNC	<unknown>	DEFAULT	3
getuid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP			.symtab	0x42c904	4	OBJECT	<unknown>	DEFAULT	16
h_errno			.symtab	0x4	4	TLS	<unknown>	DEFAULT	7
hlt			.symtab	0x40032c	0	NOTYPE	<unknown>	DEFAULT	3
hoste.6559			.symtab	0x430af8	20	OBJECT	<unknown>	DEFAULT	16
htonl			.symtab	0x40abd0	8	FUNC	<unknown>	DEFAULT	3
htons			.symtab	0x40abd8	8	FUNC	<unknown>	DEFAULT	3
i.4700			.symtab	0x42c0b8	4	OBJECT	<unknown>	DEFAULT	12
index			.symtab	0x40a840	248	FUNC	<unknown>	DEFAULT	3
inet_addr			.symtab	0x40acb0	72	FUNC	<unknown>	DEFAULT	3
inet_aton			.symtab	0x411ed0	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa			.symtab	0x40ac8c	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r			.symtab	0x40abe0	172	FUNC	<unknown>	DEFAULT	3
inet_ntop			.symtab	0x413d7c	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4			.symtab	0x413bc0	444	FUNC	<unknown>	DEFAULT	3
inet_pton			.symtab	0x413908	696	FUNC	<unknown>	DEFAULT	3
inet_pton4			.symtab	0x413820	232	FUNC	<unknown>	DEFAULT	3
initConnection			.symtab	0x409258	592	FUNC	<unknown>	DEFAULT	3
init_rand			.symtab	0x400340	300	FUNC	<unknown>	DEFAULT	3
init_static_tls			.symtab	0x412970	84	FUNC	<unknown>	DEFAULT	3
initfini.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate			.symtab	0x40c9fc	208	FUNC	<unknown>	DEFAULT	3
initstate_r			.symtab	0x40cdbc	300	FUNC	<unknown>	DEFAULT	3
ioctl			.symtab	0x40a2e0	248	FUNC	<unknown>	DEFAULT	3
ioctl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty			.symtab	0x411de0	60	FUNC	<unknown>	DEFAULT	3
isatty.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace			.symtab	0x40a5e0	44	FUNC	<unknown>	DEFAULT	3
isspace.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill			.symtab	0x40a3e0	56	FUNC	<unknown>	DEFAULT	3
kill.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.6617			.symtab	0x42c340	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.6616			.symtab	0x433610	4	OBJECT	<unknown>	DEFAULT	16
libc-cancellation.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork			.symtab	0x40224c	668	FUNC	<unknown>	DEFAULT	3
llseek.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64			.symtab	0x415c00	140	FUNC	<unknown>	DEFAULT	3
macAddress			.symtab	0x42c910	6	OBJECT	<unknown>	DEFAULT	16
main			.symtab	0x4094a8	3036	FUNC	<unknown>	DEFAULT	3
mainCommSock			.symtab	0x42c900	4	OBJECT	<unknown>	DEFAULT	16
makeIPPacket			.symtab	0x402810	312	FUNC	<unknown>	DEFAULT	3
makeRandomStr			.symtab	0x401a98	268	FUNC	<unknown>	DEFAULT	3
makevsepacket			.symtab	0x403ce4	348	FUNC	<unknown>	DEFAULT	3
malloc			.symtab	0x40b5ec	2764	FUNC	<unknown>	DEFAULT	3
malloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim			.symtab	0x40c680	84	FUNC	<unknown>	DEFAULT	3
memchr			.symtab	0x418b70	260	FUNC	<unknown>	DEFAULT	3
memchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy			.symtab	0x40a670	308	FUNC	<unknown>	DEFAULT	3
memmove			.symtab	0x411710	824	FUNC	<unknown>	DEFAULT	3
memmove.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy			.symtab	0x413650	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr			.symtab	0x418c80	260	FUNC	<unknown>	DEFAULT	3
memrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset			.symtab	0x40a7b0	144	FUNC	<unknown>	DEFAULT	3
mmap			.symtab	0x40ef40	112	FUNC	<unknown>	DEFAULT	3
mmap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap			.symtab	0x412f20	96	FUNC	<unknown>	DEFAULT	3
mremap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap			.symtab	0x40f1c0	60	FUNC	<unknown>	DEFAULT	3
munmap.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock			.symtab	0x42c120	24	OBJECT	<unknown>	DEFAULT	12
mylock			.symtab	0x42c140	24	OBJECT	<unknown>	DEFAULT	12
nanosleep			.symtab	0x40f23c	200	FUNC	<unknown>	DEFAULT	3
nanosleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1303			.symtab	0x430920	4	OBJECT	<unknown>	DEFAULT	16
nprocessors_onln			.symtab	0x40d320	508	FUNC	<unknown>	DEFAULT	3
ntohl			.symtab	0x40abc0	8	FUNC	<unknown>	DEFAULT	3
ntohl.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs			.symtab	0x40abc8	8	FUNC	<unknown>	DEFAULT	3
ntop.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids			.symtab	0x42c908	8	OBJECT	<unknown>	DEFAULT	16
object.4798			.symtab	0x42c8e4	24	OBJECT	<unknown>	DEFAULT	16
open			.symtab	0x40e38c	192	FUNC	<unknown>	DEFAULT	3
opendir			.symtab	0x40f6b4	240	FUNC	<unknown>	DEFAULT	3
opendir.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP			.symtab	0x42c894	4	OBJECT	<unknown>	DEFAULT	15
p.4784			.symtab	0x42c090	0	OBJECT	<unknown>	DEFAULT	12
parse_config.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids			.symtab	0x42c898	4	OBJECT	<unknown>	DEFAULT	15
poll			.symtab	0x415a4c	220	FUNC	<unknown>	DEFAULT	3
poll.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6318			.symtab	0x41afa0	12	OBJECT	<unknown>	DEFAULT	5
print			.symtab	0x4012ec	1460	FUNC	<unknown>	DEFAULT	3
printchar			.symtab	0x400d5c	184	FUNC	<unknown>	DEFAULT	3
printi			.symtab	0x401050	668	FUNC	<unknown>	DEFAULT	3
prints			.symtab	0x400e14	572	FUNC	<unknown>	DEFAULT	3
processCmd			.symtab	0x406a54	10244	FUNC	<unknown>	DEFAULT	3
program_invocation_name			.symtab	0x42c228	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name			.symtab	0x42c224	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.6326			.symtab	0x41afc0	20	OBJECT	<unknown>	DEFAULT	5
raise			.symtab	0x40df30	264	FUNC	<unknown>	DEFAULT	3
raise.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand			.symtab	0x40c880	28	FUNC	<unknown>	DEFAULT	3
rand.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc			.symtab	0x40046c	468	FUNC	<unknown>	DEFAULT	3
random			.symtab	0x40c8a0	164	FUNC	<unknown>	DEFAULT	3
random.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info			.symtab	0x41a9f0	40	OBJECT	<unknown>	DEFAULT	5
random_r			.symtab	0x40cb80	172	FUNC	<unknown>	DEFAULT	3
random_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl			.symtab	0x42c158	128	OBJECT	<unknown>	DEFAULT	12
rawmemchr			.symtab	0x4136a0	192	FUNC	<unknown>	DEFAULT	3
rawmemchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read			.symtab	0x40e58c	192	FUNC	<unknown>	DEFAULT	3
read_etc_hosts_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64			.symtab	0x40f890	272	FUNC	<unknown>	DEFAULT	3
readdir64.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc			.symtab	0x4124f0	1152	FUNC	<unknown>	DEFAULT	3
realloc.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv			.symtab	0x40af8c	240	FUNC	<unknown>	DEFAULT	3
recv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine			.symtab	0x401ba4	876	FUNC	<unknown>	DEFAULT	3
register-atfork.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_conf_mtime.6599			.symtab	0x433638	4	OBJECT	<unknown>	DEFAULT	16
rindex			.symtab	0x411be0	160	FUNC	<unknown>	DEFAULT	3
rtcp			.symtab	0x404e24	1740	FUNC	<unknown>	DEFAULT	3
sbrk			.symtab	0x40f310	164	FUNC	<unknown>	DEFAULT	3
sbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select			.symtab	0x40a480	260	FUNC	<unknown>	DEFAULT	3
select.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send			.symtab	0x40b0bc	240	FUNC	<unknown>	DEFAULT	3
send.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto			.symtab	0x40b220	280	FUNC	<unknown>	DEFAULT	3
sendto.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp_aux.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid			.symtab	0x40a590	60	FUNC	<unknown>	DEFAULT	3
setsid.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt			.symtab	0x40b340	96	FUNC	<unknown>	DEFAULT	3
setsockopt.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate			.symtab	0x40c944	184	FUNC	<unknown>	DEFAULT	3
setstate_r			.symtab	0x40cee8	272	FUNC	<unknown>	DEFAULT	3
sigaction			.symtab	0x40efb0	28	FUNC	<unknown>	DEFAULT	3
sigaction.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal			.symtab	0x40b3e0	228	FUNC	<unknown>	DEFAULT	3
signal.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask			.symtab	0x40f3c0	176	FUNC	<unknown>	DEFAULT	3
sigprocmask.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space			.symtab	0x414cf8	104	FUNC	<unknown>	DEFAULT	3
skip_nospace			.symtab	0x414c90	104	FUNC	<unknown>	DEFAULT	3
sleep			.symtab	0x40e040	404	FUNC	<unknown>	DEFAULT	3
sleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket			.symtab	0x40b3a0	60	FUNC	<unknown>	DEFAULT	3
socket.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect			.symtab	0x403b28	444	FUNC	<unknown>	DEFAULT	3
sockprintf			.symtab	0x4018a0	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.6325			.symtab	0x41afd4	16	OBJECT	<unknown>	DEFAULT	5
spec_base.6317			.symtab	0x41afac	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.6322			.symtab	0x41b030	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.6321			.symtab	0x41b048	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.6324			.symtab	0x41afe4	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.6323			.symtab	0x41aff4	9	OBJECT	<unknown>	DEFAULT	5
sprintf			.symtab	0x415c90	80	FUNC	<unknown>	DEFAULT	3
sprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand			.symtab	0x40cacc	172	FUNC	<unknown>	DEFAULT	3
srandom			.symtab	0x40cacc	172	FUNC	<unknown>	DEFAULT	3
srandom_r			.symtab	0x40cc2c	400	FUNC	<unknown>	DEFAULT	3
stat			.symtab	0x415b30	136	FUNC	<unknown>	DEFAULT	3
stat.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv			.symtab	0x4330c0	512	OBJECT	<unknown>	DEFAULT	16
static_map			.symtab	0x4335c8	52	OBJECT	<unknown>	DEFAULT	16
static_slotinfo			.symtab	0x4332c0	776	OBJECT	<unknown>	DEFAULT	16
stderr			.symtab	0x42c248	4	OBJECT	<unknown>	DEFAULT	12
stdhexflood			.symtab	0x4049b8	536	FUNC	<unknown>	DEFAULT	3
stdin			.symtab	0x42c240	4	OBJECT	<unknown>	DEFAULT	12
stdout			.symtab	0x42c244	4	OBJECT	<unknown>	DEFAULT	12
strcasecmp			.symtab	0x418d90	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr			.symtab	0x40a840	248	FUNC	<unknown>	DEFAULT	3
strchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul			.symtab	0x411a50	248	FUNC	<unknown>	DEFAULT	3
strchrnul.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp			.symtab	0x40a940	44	FUNC	<unknown>	DEFAULT	3
strcmp.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll			.symtab	0x40a940	44	FUNC	<unknown>	DEFAULT	3
strcpy			.symtab	0x40a970	36	FUNC	<unknown>	DEFAULT	3
strcpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn			.symtab	0x411b50	144	FUNC	<unknown>	DEFAULT	3
strcspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup			.symtab	0x417700	140	FUNC	<unknown>	DEFAULT	3
strdup.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r			.symtab	0x417580	380	FUNC	<unknown>	DEFAULT	3
strlen			.symtab	0x40a9a0	184	FUNC	<unknown>	DEFAULT	3
strlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy			.symtab	0x413760	188	FUNC	<unknown>	DEFAULT	3
strncpy.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen			.symtab	0x417430	248	FUNC	<unknown>	DEFAULT	3
strnlen.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk			.symtab	0x411da0	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr			.symtab	0x411be0	160	FUNC	<unknown>	DEFAULT	3
strrchr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn			.symtab	0x411c80	72	FUNC	<unknown>	DEFAULT	3
strspn.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr			.symtab	0x40aa60	256	FUNC	<unknown>	DEFAULT	3
strstr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok			.symtab	0x40aba0	32	FUNC	<unknown>	DEFAULT	3
strtok.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r			.symtab	0x411cd0	208	FUNC	<unknown>	DEFAULT	3
strtok_r.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol			.symtab	0x40d020	28	FUNC	<unknown>	DEFAULT	3
strtol.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf			.symtab	0x40d51c	792	FUNC	<unknown>	DEFAULT	3
sysconf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr			.symtab	0x411e20	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum			.symtab	0x4026b4	348	FUNC	<unknown>	DEFAULT	3
time			.symtab	0x40a5d0	16	FUNC	<unknown>	DEFAULT	3
time.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper			.symtab	0x40a610	60	FUNC	<unknown>	DEFAULT	3
toupper.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim			.symtab	0x400b90	460	FUNC	<unknown>	DEFAULT	3
type_codes			.symtab	0x41b000	24	OBJECT	<unknown>	DEFAULT	5
type_sizes			.symtab	0x41b018	12	OBJECT	<unknown>	DEFAULT	5
uname			.symtab	0x415bc0	60	FUNC	<unknown>	DEFAULT	3
uname.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1327			.symtab	0x41b0d0	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state			.symtab	0x42c1e0	20	OBJECT	<unknown>	DEFAULT	12
useragents			.symtab	0x42c0c4	28	OBJECT	<unknown>	DEFAULT	12
usleep			.symtab	0x40d840	144	FUNC	<unknown>	DEFAULT	3
usleep.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack			.symtab	0x403e40	2412	FUNC	<unknown>	DEFAULT	3
vsnprintf			.symtab	0x415ce0	248	FUNC	<unknown>	DEFAULT	3
vsnprintf.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid			.symtab	0x40e68c	192	FUNC	<unknown>	DEFAULT	3
wcrtomb			.symtab	0x417d40	108	FUNC	<unknown>	DEFAULT	3
wcrtomb.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs			.symtab	0x417df0	192	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs			.symtab	0x417db0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write			.symtab	0x40e48c	192	FUNC	<unknown>	DEFAULT	3
xdigits.4935			.symtab	0x41af04	17	OBJECT	<unknown>	DEFAULT	5
xstatconv.c			.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-12T06:45:57.369143+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57048	185.177.25.107	606	TCP
2024-12-12T06:45:59.500622+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57050	185.177.25.107	606	TCP
2024-12-12T06:46:01.612605+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57052	185.177.25.107	606	TCP
2024-12-12T06:46:03.736961+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57054	185.177.25.107	606	TCP
2024-12-12T06:46:05.862858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57056	185.177.25.107	606	TCP
2024-12-12T06:46:07.986084+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57058	185.177.25.107	606	TCP
2024-12-12T06:46:10.111506+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57060	185.177.25.107	606	TCP
2024-12-12T06:46:12.242384+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57062	185.177.25.107	606	TCP
2024-12-12T06:46:14.362779+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57064	185.177.25.107	606	TCP
2024-12-12T06:46:16.489174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57066	185.177.25.107	606	TCP
2024-12-12T06:46:18.613366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57068	185.177.25.107	606	TCP
2024-12-12T06:46:20.738418+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57070	185.177.25.107	606	TCP
2024-12-12T06:46:22.863262+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57072	185.177.25.107	606	TCP
2024-12-12T06:46:24.987212+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57074	185.177.25.107	606	TCP
2024-12-12T06:46:27.112001+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57076	185.177.25.107	606	TCP
2024-12-12T06:46:29.239264+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57078	185.177.25.107	606	TCP
2024-12-12T06:46:31.363461+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57080	185.177.25.107	606	TCP
2024-12-12T06:46:33.471231+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57082	185.177.25.107	606	TCP
2024-12-12T06:46:35.604674+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57084	185.177.25.107	606	TCP
2024-12-12T06:46:37.738028+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57086	185.177.25.107	606	TCP
2024-12-12T06:46:39.863870+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57088	185.177.25.107	606	TCP
2024-12-12T06:46:41.971744+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57090	185.177.25.107	606	TCP
2024-12-12T06:46:44.098368+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57092	185.177.25.107	606	TCP
2024-12-12T06:46:46.222838+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57094	185.177.25.107	606	TCP
2024-12-12T06:46:48.348357+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57096	185.177.25.107	606	TCP
2024-12-12T06:46:50.471077+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57098	185.177.25.107	606	TCP
2024-12-12T06:46:52.613237+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57100	185.177.25.107	606	TCP
2024-12-12T06:46:54.737012+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57102	185.177.25.107	606	TCP
2024-12-12T06:46:56.864364+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57104	185.177.25.107	606	TCP
2024-12-12T06:46:59.004182+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57106	185.177.25.107	606	TCP
2024-12-12T06:47:01.160511+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57108	185.177.25.107	606	TCP
2024-12-12T06:47:03.283668+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57110	185.177.25.107	606	TCP
2024-12-12T06:47:05.409822+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57112	185.177.25.107	606	TCP
2024-12-12T06:47:07.603573+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57114	185.177.25.107	606	TCP
2024-12-12T06:47:09.722119+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57116	185.177.25.107	606	TCP
2024-12-12T06:47:11.863151+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57118	185.177.25.107	606	TCP
2024-12-12T06:47:13.988616+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57120	185.177.25.107	606	TCP
2024-12-12T06:47:16.112872+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57122	185.177.25.107	606	TCP
2024-12-12T06:47:18.270865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57124	185.177.25.107	606	TCP
2024-12-12T06:47:20.393791+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57126	185.177.25.107	606	TCP
2024-12-12T06:47:22.505196+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57128	185.177.25.107	606	TCP
2024-12-12T06:47:24.630994+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57130	185.177.25.107	606	TCP
2024-12-12T06:47:26.755935+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57132	185.177.25.107	606	TCP
2024-12-12T06:47:28.880077+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57134	185.177.25.107	606	TCP
2024-12-12T06:47:31.004684+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57136	185.177.25.107	606	TCP
2024-12-12T06:47:33.129226+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57138	185.177.25.107	606	TCP
2024-12-12T06:47:35.253976+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57140	185.177.25.107	606	TCP
2024-12-12T06:47:37.378815+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57142	185.177.25.107	606	TCP
2024-12-12T06:47:39.505679+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57144	185.177.25.107	606	TCP
2024-12-12T06:47:41.631234+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57146	185.177.25.107	606	TCP
2024-12-12T06:47:43.771420+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57148	185.177.25.107	606	TCP
2024-12-12T06:47:45.895447+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57150	185.177.25.107	606	TCP
2024-12-12T06:47:48.021344+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57152	185.177.25.107	606	TCP
2024-12-12T06:47:50.145320+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57154	185.177.25.107	606	TCP
2024-12-12T06:47:52.270926+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57156	185.177.25.107	606	TCP
2024-12-12T06:47:54.398920+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57158	185.177.25.107	606	TCP
2024-12-12T06:47:56.504311+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57160	185.177.25.107	606	TCP
2024-12-12T06:47:58.633003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57162	185.177.25.107	606	TCP
2024-12-12T06:48:00.773025+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57164	185.177.25.107	606	TCP
2024-12-12T06:48:02.911154+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57166	185.177.25.107	606	TCP
2024-12-12T06:48:05.036500+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57168	185.177.25.107	606	TCP
2024-12-12T06:48:07.160614+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57170	185.177.25.107	606	TCP
2024-12-12T06:48:09.287385+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57172	185.177.25.107	606	TCP
2024-12-12T06:48:11.411443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57174	185.177.25.107	606	TCP
2024-12-12T06:48:13.537015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57176	185.177.25.107	606	TCP
2024-12-12T06:48:15.662386+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57178	185.177.25.107	606	TCP
2024-12-12T06:48:17.787277+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57180	185.177.25.107	606	TCP
2024-12-12T06:48:19.912604+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57182	185.177.25.107	606	TCP
2024-12-12T06:48:22.036819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57184	185.177.25.107	606	TCP
2024-12-12T06:48:24.147248+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57186	185.177.25.107	606	TCP
2024-12-12T06:48:26.272546+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57188	185.177.25.107	606	TCP
2024-12-12T06:48:28.410948+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57190	185.177.25.107	606	TCP
2024-12-12T06:48:30.538531+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57192	185.177.25.107	606	TCP
2024-12-12T06:48:32.645367+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57194	185.177.25.107	606	TCP
2024-12-12T06:48:34.771789+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57196	185.177.25.107	606	TCP
2024-12-12T06:48:36.881480+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57198	185.177.25.107	606	TCP
2024-12-12T06:48:39.005321+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57200	185.177.25.107	606	TCP
2024-12-12T06:48:41.115526+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57202	185.177.25.107	606	TCP
2024-12-12T06:48:43.240988+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57204	185.177.25.107	606	TCP
2024-12-12T06:48:45.365383+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57206	185.177.25.107	606	TCP
2024-12-12T06:48:47.490183+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57208	185.177.25.107	606	TCP
2024-12-12T06:48:49.620042+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57210	185.177.25.107	606	TCP
2024-12-12T06:48:51.744006+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57212	185.177.25.107	606	TCP
2024-12-12T06:48:53.869006+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57214	185.177.25.107	606	TCP
2024-12-12T06:48:55.995220+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57216	185.177.25.107	606	TCP
2024-12-12T06:48:58.118761+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57218	185.177.25.107	606	TCP
2024-12-12T06:49:00.243705+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57220	185.177.25.107	606	TCP
2024-12-12T06:49:02.369725+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57222	185.177.25.107	606	TCP
2024-12-12T06:49:04.497628+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57224	185.177.25.107	606	TCP
2024-12-12T06:49:06.621791+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57226	185.177.25.107	606	TCP
2024-12-12T06:49:08.743688+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57228	185.177.25.107	606	TCP
2024-12-12T06:49:10.869882+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57230	185.177.25.107	606	TCP
2024-12-12T06:49:12.994942+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57232	185.177.25.107	606	TCP
2024-12-12T06:49:15.103653+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57234	185.177.25.107	606	TCP
2024-12-12T06:49:17.247510+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57236	185.177.25.107	606	TCP
2024-12-12T06:49:19.386246+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57238	185.177.25.107	606	TCP
2024-12-12T06:49:21.526891+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57240	185.177.25.107	606	TCP
2024-12-12T06:49:23.651173+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57242	185.177.25.107	606	TCP
2024-12-12T06:49:25.776193+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57244	185.177.25.107	606	TCP
2024-12-12T06:49:27.901899+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57246	185.177.25.107	606	TCP
2024-12-12T06:49:30.027791+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	57248	185.177.25.107	606	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 06:45:57.246309042 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:57.365824938 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:45:57.366199017 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:57.369143009 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:57.488476992 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:45:59.379699945 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:45:59.380402088 CET	57048	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:59.380983114 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:59.499917030 CET	606	57048	185.177.25.107	192.168.2.23
Dec 12, 2024 06:45:59.500319004 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:45:59.500621080 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:59.500622034 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:45:59.620204926 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:01.491353989 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:01.491852999 CET	57050	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:01.493026972 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:01.611483097 CET	606	57050	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:01.612427950 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:01.612523079 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:01.612605095 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:01.732285976 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:03.616414070 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:03.616709948 CET	57052	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:03.617247105 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:03.736496925 CET	606	57052	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:03.736690044 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:03.736797094 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:03.736960888 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:03.856681108 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:04.506392002 CET	443	39254	34.249.145.219	192.168.2.23
Dec 12, 2024 06:46:04.506814003 CET	39254	443	192.168.2.23	34.249.145.219
Dec 12, 2024 06:46:04.626477003 CET	443	39254	34.249.145.219	192.168.2.23
Dec 12, 2024 06:46:05.741753101 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:05.742363930 CET	57054	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:05.743029118 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:05.861933947 CET	606	57054	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:05.862437963 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:05.862858057 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:05.862858057 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:05.982563972 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:07.845331907 CET	42516	80	192.168.2.23	109.202.202.202
Dec 12, 2024 06:46:07.864978075 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:07.865279913 CET	57056	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:07.866167068 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:07.984783888 CET	606	57056	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:07.985721111 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:07.985843897 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:07.986083984 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:08.106734991 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:09.990259886 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:09.990605116 CET	57058	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:09.991884947 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:10.110249043 CET	606	57058	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:10.111298084 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:10.111505985 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:10.111505985 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:10.231056929 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:12.116301060 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:12.116693020 CET	57060	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:12.122874022 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:12.236289978 CET	606	57060	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:12.242206097 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:12.242285967 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:12.242383957 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:12.361702919 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:13.988482952 CET	43928	443	192.168.2.23	91.189.91.42
Dec 12, 2024 06:46:14.239414930 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:14.239990950 CET	57062	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:14.243176937 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:14.359543085 CET	606	57062	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:14.362616062 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:14.362729073 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:14.362778902 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:14.482366085 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:16.366147995 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:16.366938114 CET	57064	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:16.368948936 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:16.486521959 CET	606	57064	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:16.488754988 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:16.489173889 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:16.489173889 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:16.608584881 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:18.491549969 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:18.492224932 CET	57066	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:18.493503094 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:18.611723900 CET	606	57066	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:18.612943888 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:18.613035917 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:18.613365889 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:18.732686996 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:20.616045952 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:20.616588116 CET	57068	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:20.617763042 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:20.736504078 CET	606	57068	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:20.737162113 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:20.738418102 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:20.738418102 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:20.857949018 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:22.740545988 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:22.740952015 CET	57070	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:22.742100954 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:22.861366987 CET	606	57070	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:22.862747908 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:22.863168001 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:22.863261938 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:22.983000040 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:24.866120100 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:24.866564035 CET	57072	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:24.867526054 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:24.986010075 CET	606	57072	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:24.986923933 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:24.987211943 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:24.987211943 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:25.107280970 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:26.990883112 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:26.991347075 CET	57074	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:26.992203951 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:27.111515045 CET	606	57074	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:27.111609936 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:27.112000942 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:27.112000942 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:27.231750011 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:29.117357016 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:29.118046045 CET	57076	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:29.119376898 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:29.237974882 CET	606	57076	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:29.238835096 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:29.239264011 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:29.239264011 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:29.359034061 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:31.241559029 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:31.242065907 CET	57078	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:31.243635893 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:31.362374067 CET	606	57078	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:31.363063097 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:31.363359928 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:31.363461018 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:31.483022928 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:33.349044085 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:33.349698067 CET	57080	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:33.351572037 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:33.469152927 CET	606	57080	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:33.470922947 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:33.471153021 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:33.471230984 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:33.590737104 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:35.480751991 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:35.481231928 CET	57082	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:35.482930899 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:35.602741003 CET	606	57082	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:35.604425907 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:35.604613066 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:35.604674101 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:35.724024057 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:37.615643978 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:37.615983009 CET	57084	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:37.617166042 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:37.736747026 CET	606	57084	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:37.737763882 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:37.737955093 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:37.738028049 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:37.857491970 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:39.741612911 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:39.742077112 CET	57086	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:39.743968964 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:39.861593008 CET	606	57086	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:39.863337040 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:39.863718987 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:39.863869905 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:39.983197927 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:41.849524021 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:41.850059032 CET	57088	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:41.851726055 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:41.969749928 CET	606	57088	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:41.971200943 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:41.971540928 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:41.971744061 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:42.091223001 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:43.976198912 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:43.976823092 CET	57090	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:43.978499889 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:44.096659899 CET	606	57090	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:44.098001003 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:44.098206997 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:44.098367929 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:44.218208075 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:46.101037979 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:46.101504087 CET	57092	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:46.102932930 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:46.221370935 CET	606	57092	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:46.222398043 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:46.222837925 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:46.222837925 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:46.342344046 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:48.226156950 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:48.226957083 CET	57094	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:48.228223085 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:48.346673012 CET	606	57094	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:48.347765923 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:48.348185062 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:48.348356962 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:48.468034983 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:50.350369930 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:50.350788116 CET	57096	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:50.351521015 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:50.470494986 CET	606	57096	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:50.470873117 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:50.470983982 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:50.471076965 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:50.590413094 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:52.491216898 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:52.491964102 CET	57098	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:52.493232965 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:52.611521006 CET	606	57098	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:52.612652063 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:52.613022089 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:52.613236904 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:52.732762098 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:54.615869999 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:54.616375923 CET	57100	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:54.617149115 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:54.735982895 CET	606	57100	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:54.736634970 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:54.736915112 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:54.737011909 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:54.856373072 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:54.942708969 CET	43928	443	192.168.2.23	91.189.91.42
Dec 12, 2024 06:46:56.741760969 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:56.742486954 CET	57102	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:56.744394064 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:56.861891031 CET	606	57102	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:56.863836050 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:56.864197969 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:56.864363909 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:56.983890057 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:58.881472111 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:58.882191896 CET	57104	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:58.883924961 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:59.001710892 CET	606	57104	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:59.003405094 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:46:59.003859997 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:59.004182100 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:46:59.124142885 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:01.039213896 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:01.039638042 CET	57106	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:01.040678978 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:01.159379005 CET	606	57106	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:01.160121918 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:01.160384893 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:01.160511017 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:01.279783964 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:03.162704945 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:03.162862062 CET	57108	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:03.163896084 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:03.282485962 CET	606	57108	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:03.283247948 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:03.283668041 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:03.283668041 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:03.403465986 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:05.288748026 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:05.289239883 CET	57110	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:05.290105104 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:05.408639908 CET	606	57110	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:05.409504890 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:05.409821987 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:05.409821987 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:05.529266119 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:07.482019901 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:07.482471943 CET	57112	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:07.483694077 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:07.602065086 CET	606	57112	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:07.603028059 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:07.603424072 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:07.603573084 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:07.723426104 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:09.600519896 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:09.601145983 CET	57114	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:09.602435112 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:09.720602036 CET	606	57114	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:09.721798897 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:09.722029924 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:09.722119093 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:09.841454029 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:11.742126942 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:11.742640972 CET	57116	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:11.743562937 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:11.862173080 CET	606	57116	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:11.862857103 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:11.863044024 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:11.863151073 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:11.982530117 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:13.866823912 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:13.867393970 CET	57118	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:13.868983984 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:13.986833096 CET	606	57118	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:13.988338947 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:13.988527060 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:13.988615990 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:14.109226942 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:15.992182970 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:15.992456913 CET	57120	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:15.992868900 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:16.112088919 CET	606	57120	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:16.112157106 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:16.112498045 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:16.112871885 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:16.232194901 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:18.148653030 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:18.149257898 CET	57122	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:18.150558949 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:18.269069910 CET	606	57122	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:18.270344973 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:18.270735025 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:18.270864964 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:18.390573025 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:20.272727966 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:20.273211002 CET	57124	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:20.273968935 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:20.393395901 CET	606	57124	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:20.393415928 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:20.393706083 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:20.393790960 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:20.513127089 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:22.382401943 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:22.383256912 CET	57126	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:22.385020018 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:22.502994061 CET	606	57126	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:22.504669905 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:22.505103111 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:22.505196095 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:22.624530077 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:24.509354115 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:24.510068893 CET	57128	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:24.510859966 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:24.629694939 CET	606	57128	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:24.630173922 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:24.630639076 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:24.630994081 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:24.750389099 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:26.633110046 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:26.633862972 CET	57130	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:26.635680914 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:26.753694057 CET	606	57130	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:26.755481958 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:26.755820036 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:26.755934954 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:26.875827074 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:28.757281065 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:28.757965088 CET	57132	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:28.759785891 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:28.877688885 CET	606	57132	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:28.879540920 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:28.879973888 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:28.880076885 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:28.999969959 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:30.883380890 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:30.883744955 CET	57134	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:30.884598017 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:31.003542900 CET	606	57134	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:31.004467964 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:31.004589081 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:31.004683971 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:31.124752998 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:33.007453918 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:33.007971048 CET	57136	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:33.009453058 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:33.127891064 CET	606	57136	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:33.128999949 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:33.129225969 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:33.129225969 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:33.262273073 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:35.132652998 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:35.133157969 CET	57138	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:35.134352922 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:35.252872944 CET	606	57138	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:35.253735065 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:35.253849030 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:35.253976107 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:35.374301910 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:37.256597042 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:37.257217884 CET	57140	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:37.258680105 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:37.376940966 CET	606	57140	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:37.378268957 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:37.378693104 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:37.378814936 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:37.498462915 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:39.383452892 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:39.384047031 CET	57142	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:39.385596991 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:39.503770113 CET	606	57142	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:39.505222082 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:39.505678892 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:39.505678892 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:39.625870943 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:41.508799076 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:41.509445906 CET	57144	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:41.511022091 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:41.629496098 CET	606	57144	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:41.630729914 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:41.631233931 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:41.631233931 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:41.751873016 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:43.649080038 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:43.649532080 CET	57146	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:43.650676966 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:43.770926952 CET	606	57146	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:43.770950079 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:43.771229982 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:43.771420002 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:43.890897036 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:45.772840023 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:45.773411036 CET	57148	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:45.775099039 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:45.894860029 CET	606	57148	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:45.895040989 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:45.895396948 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:45.895447016 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:46.015629053 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:47.899142027 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:47.899765968 CET	57150	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:47.901303053 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:48.019592047 CET	606	57150	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:48.020917892 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:48.021212101 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:48.021343946 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:48.140981913 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:50.023555994 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:50.024194002 CET	57152	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:50.025021076 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:50.143893957 CET	606	57152	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:50.144723892 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:50.145319939 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:50.145319939 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:50.265192986 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:52.148725033 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:52.149426937 CET	57154	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:52.150628090 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:52.269423962 CET	606	57154	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:52.270265102 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:52.270837069 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:52.270925999 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:52.390726089 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:54.274750948 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:54.275367022 CET	57156	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:54.276557922 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:54.396945000 CET	606	57156	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:54.398461103 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:54.398716927 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:54.398920059 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:54.518393993 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:56.382827997 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:56.383338928 CET	57158	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:56.384553909 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:56.503022909 CET	606	57158	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:56.503923893 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:56.504134893 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:56.504311085 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:56.623900890 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:58.510065079 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:58.510776997 CET	57160	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:58.512525082 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:58.630599976 CET	606	57160	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:58.632447004 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:47:58.633002043 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:58.633002996 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:47:58.753006935 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:00.650980949 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:00.651473045 CET	57162	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:00.652920008 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:00.771022081 CET	606	57162	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:00.772553921 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:00.773025036 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:00.773025036 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:00.892632008 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:02.790214062 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:02.790699005 CET	57164	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:02.791452885 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:02.910248995 CET	606	57164	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:02.910815954 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:02.911062002 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:02.911154032 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:03.030683994 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:04.915169001 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:04.915648937 CET	57166	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:04.916423082 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:05.035388947 CET	606	57166	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:05.036216974 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:05.036334038 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:05.036499977 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:05.155841112 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:07.039122105 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:07.039540052 CET	57168	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:07.040637016 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:07.159213066 CET	606	57168	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:07.160104036 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:07.160427094 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:07.160614014 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:07.279982090 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:09.166281939 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:09.166637897 CET	57170	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:09.167792082 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:09.286031961 CET	606	57170	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:09.287098885 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:09.287235022 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:09.287384987 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:09.406773090 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:11.289314985 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:11.289768934 CET	57172	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:11.291150093 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:11.409586906 CET	606	57172	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:11.411010981 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:11.411442995 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:11.411442995 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:11.531472921 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:13.416276932 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:13.416562080 CET	57174	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:13.417371988 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:13.536411047 CET	606	57174	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:13.536735058 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:13.536889076 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:13.537014961 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:13.656541109 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:15.540385962 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:15.540905952 CET	57176	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:15.542220116 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:15.660783052 CET	606	57176	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:15.662039995 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:15.662384987 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:15.662385941 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:15.782291889 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:17.665318012 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:17.665949106 CET	57178	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:17.667006969 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:17.786041021 CET	606	57178	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:17.786932945 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:17.787164927 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:17.787276983 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:17.907248020 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:19.791141033 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:19.791645050 CET	57180	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:19.792591095 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:19.911714077 CET	606	57180	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:19.912398100 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:19.912604094 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:19.912604094 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:20.032879114 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:21.915442944 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:21.915843964 CET	57182	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:21.916989088 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:22.035458088 CET	606	57182	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:22.036385059 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:22.036668062 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:22.036818981 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:22.156443119 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:24.024751902 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:24.025362015 CET	57184	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:24.027031898 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:24.145001888 CET	606	57184	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:24.146683931 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:24.147248030 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:24.147248030 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:24.266879082 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:26.149797916 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:26.150383949 CET	57186	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:26.152192116 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:26.270291090 CET	606	57186	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:26.271994114 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:26.272545099 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:26.272546053 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:26.392365932 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:28.288521051 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:28.289239883 CET	57188	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:28.290457964 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:28.409334898 CET	606	57188	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:28.410295010 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:28.410775900 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:28.410948038 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:28.530411959 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:30.416265011 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:30.416779041 CET	57190	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:30.418338060 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:30.536607981 CET	606	57190	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:30.537834883 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:30.538234949 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:30.538531065 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:30.658559084 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:32.524043083 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:32.524688959 CET	57192	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:32.525463104 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:32.644402027 CET	606	57192	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:32.645112038 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:32.645325899 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:32.645366907 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:32.765069962 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:34.650016069 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:34.650747061 CET	57194	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:34.651865959 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:34.770347118 CET	606	57194	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:34.771198988 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:34.771635056 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:34.771789074 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:34.891345024 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:36.759516001 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:36.760329962 CET	57196	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:36.761576891 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:36.880136967 CET	606	57196	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:36.880880117 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:36.881310940 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:36.881479979 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:37.000911951 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:38.884716988 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:38.884922028 CET	57198	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:38.885756016 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:39.004411936 CET	606	57198	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:39.005143881 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:39.005222082 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:39.005321026 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:39.124983072 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:40.993674040 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:40.993959904 CET	57200	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:40.994792938 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:41.114836931 CET	606	57200	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:41.115350962 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:41.115427971 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:41.115525961 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:41.234812975 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:43.120105028 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:43.120492935 CET	57202	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:43.121397972 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:43.239952087 CET	606	57202	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:43.240755081 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:43.240988016 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:43.240988016 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:43.360367060 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:45.244676113 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:45.245141983 CET	57204	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:45.245874882 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:45.364625931 CET	606	57204	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:45.365154028 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:45.365381956 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:45.365382910 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:45.485111952 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:47.368904114 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:47.369409084 CET	57206	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:47.370407104 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:47.489168882 CET	606	57206	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:47.489826918 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:47.490183115 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:47.490183115 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:47.609827995 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:49.498904943 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:49.499578953 CET	57208	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:49.500287056 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:49.619164944 CET	606	57208	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:49.619657993 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:49.619772911 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:49.620042086 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:49.739553928 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:51.622592926 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:51.623070002 CET	57210	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:51.624330044 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:51.742541075 CET	606	57210	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:51.743731022 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:51.743881941 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:51.744005919 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:51.863703966 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:53.748003006 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:53.748549938 CET	57212	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:53.749402046 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:53.868479967 CET	606	57212	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:53.868689060 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:53.869005919 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:53.869005919 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:53.988579035 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:55.873878956 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:55.874496937 CET	57214	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:55.875525951 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:55.993887901 CET	606	57214	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:55.994891882 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:55.995135069 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:55.995219946 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:56.114722013 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:57.998063087 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:57.998378992 CET	57216	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:57.999268055 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:58.117867947 CET	606	57216	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:58.118488073 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:48:58.118635893 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:58.118761063 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:48:58.238029957 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:00.122996092 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:00.123296976 CET	57218	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:00.124140978 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:00.242716074 CET	606	57218	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:00.243428946 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:00.243554115 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:00.243705034 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:00.363056898 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:02.248985052 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:02.249490976 CET	57220	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:02.250154018 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:02.369148970 CET	606	57220	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:02.369460106 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:02.369678020 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:02.369724989 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:02.489275932 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:04.374075890 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:04.374479055 CET	57222	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:04.377890110 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:04.493901014 CET	606	57222	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:04.497311115 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:04.497545004 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:04.497627974 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:04.617151976 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:06.500113964 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:06.500602007 CET	57224	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:06.501777887 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:06.620207071 CET	606	57224	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:06.621313095 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:06.621789932 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:06.621790886 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:06.741420031 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:08.623018980 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:08.623281956 CET	57226	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:08.624118090 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:08.742829084 CET	606	57226	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:08.743424892 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:08.743562937 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:08.743688107 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:08.863188028 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:10.749404907 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:10.749671936 CET	57228	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:10.750233889 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:10.869235039 CET	606	57228	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:10.869493961 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:10.869642973 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:10.869882107 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:10.989208937 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:12.873234034 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:12.873806000 CET	57230	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:12.874852896 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:12.993678093 CET	606	57230	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:12.994457006 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:12.994709969 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:12.994941950 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:13.114573002 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:14.981956005 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:14.982603073 CET	57232	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:14.983916998 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:15.102406025 CET	606	57232	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:15.103282928 CET	606	57234	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:15.103425980 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:15.103652954 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:15.223243952 CET	606	57234	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:17.124850988 CET	606	57234	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:17.125386000 CET	57234	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:17.126548052 CET	57236	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:17.247061014 CET	606	57234	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:17.247173071 CET	606	57236	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:17.247277975 CET	57236	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:17.247509956 CET	57236	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:17.366890907 CET	606	57236	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:19.265233040 CET	606	57236	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:19.265716076 CET	57236	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:19.266670942 CET	57238	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:19.385354042 CET	606	57236	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:19.385991096 CET	606	57238	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:19.386141062 CET	57238	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:19.386245966 CET	57238	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:19.505717039 CET	606	57238	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:21.405940056 CET	606	57238	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:21.406239986 CET	57238	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:21.407089949 CET	57240	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:21.525654078 CET	606	57238	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:21.526424885 CET	606	57240	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:21.526710033 CET	57240	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:21.526890993 CET	57240	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:21.646194935 CET	606	57240	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:23.530378103 CET	606	57240	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:23.530870914 CET	57240	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:23.531572104 CET	57242	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:23.650254965 CET	606	57240	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:23.650835037 CET	606	57242	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:23.650923014 CET	57242	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:23.651173115 CET	57242	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:23.770454884 CET	606	57242	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:25.654475927 CET	606	57242	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:25.655024052 CET	57242	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:25.655994892 CET	57244	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:25.774838924 CET	606	57242	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:25.775722027 CET	606	57244	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:25.775935888 CET	57244	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:25.776192904 CET	57244	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:25.896369934 CET	606	57244	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:27.779743910 CET	606	57244	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:27.780328035 CET	57244	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:27.781785965 CET	57246	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:27.900108099 CET	606	57244	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:27.901560068 CET	606	57246	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:27.901793957 CET	57246	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:27.901899099 CET	57246	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:28.021692991 CET	606	57246	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:29.905713081 CET	606	57246	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:29.906261921 CET	57246	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:29.907733917 CET	57248	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:30.026099920 CET	606	57246	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:30.027462959 CET	606	57248	185.177.25.107	192.168.2.23
Dec 12, 2024 06:49:30.027791023 CET	57248	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:30.027791023 CET	57248	606	192.168.2.23	185.177.25.107
Dec 12, 2024 06:49:30.148848057 CET	606	57248	185.177.25.107	192.168.2.23

System Behavior

Analysis Process: mips.xxx.elf PID: 6269, Parent PID: 6188

General

Start time (UTC):	05:45:55
Start date (UTC):	12/12/2024
Path:	/tmp/mips.xxx.elf
Arguments:	/tmp/mips.xxx.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.xxx.elf PID: 6271, Parent PID: 6269

General

Start time (UTC):	05:45:56
Start date (UTC):	12/12/2024
Path:	/tmp/mips.xxx.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.xxx.elf PID: 6273, Parent PID: 6271

General

Start time (UTC):	05:45:56
Start date (UTC):	12/12/2024
Path:	/tmp/mips.xxx.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: dash PID: 6282, Parent PID: 4331

General

Start time (UTC):	05:46:03
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6282, Parent PID: 4331

General

Start time (UTC):	05:46:03
Start date (UTC):	12/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.4QVhHlJXd8 /tmp/tmp.DHwedfqBHu /tmp/tmp.HYwc7AQWjf
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6283, Parent PID: 4331

General

Start time (UTC):	05:46:03
Start date (UTC):	12/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6283, Parent PID: 4331

General

Start time (UTC):	05:46:03
Start date (UTC):	12/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.4QVhHlJXd8 /tmp/tmp.DHwedfqBHu /tmp/tmp.HYwc7AQWjf
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities