Edit tour

Linux Analysis Report
mips.elf

Overview

General Information

Sample name:	mips.elf
Analysis ID:	1574403
MD5:	82386baa236b1d0ea72500f4c102a8c7
SHA1:	2fa53314548e2aa8b9ea981876ed0cf69324feeb
SHA256:	d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574403
Start date and time:	2024-12-13 10:41:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mips.elf
Detection:	MAL
Classification:	mal68.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: mips.elf

Runtime Messages

Command:	/tmp/mips.elf
PID:	5572
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	listening tun0
Standard Error:

Process Tree

system is lnxubuntu20

mips.elf (PID: 5572, Parent: 5490, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/mips.elf

mips.elf New Fork (PID: 5574, Parent: 5572)

mips.elf New Fork (PID: 5576, Parent: 5574)

mips.elf New Fork (PID: 5577, Parent: 5574)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
mips.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
mips.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1303c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1308c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13104:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13118:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1312c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13140:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13154:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13168:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1317c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13190:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
mips.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0x152fb:$x5: .mdebug.abi32 0x13924:$s6: NKQVGLKLE

Memory Dumps

Source	Rule	Description	Author	Strings
5577.1.00007f4184400000.00007f4184415000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1303c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1308c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13104:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13118:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1312c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13140:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13154:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13168:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1317c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13190:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5572.1.00007f4184400000.00007f4184415000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1303c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1308c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x130f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13104:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13118:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1312c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13140:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13154:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13168:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1317c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13190:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mips.elf PID: 5572	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x357c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x361c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x366c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mips.elf PID: 5577	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x713:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x727:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x73b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x74f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x763:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x777:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x78b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x79f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7b3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7db:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7ef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x803:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x817:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x83f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x853:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: mips.elf

ReversingLabs: Detection: 42%

Source: global traffic

TCP traffic: 192.168.2.14:35740 -> 45.90.96.167:1337

Source: /tmp/mips.elf (PID: 5572)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167

System Summary

Malicious sample detected (through community Yara rule)

Source: mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: mips.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5577.1.00007f4184400000.00007f4184415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5572.1.00007f4184400000.00007f4184415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mips.elf PID: 5572, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mips.elf PID: 5577, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_gre_ip
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_kill_all
Source: ELF static info symbol of initial sample	Name: attack_method_udprape
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse
Source: ELF static info symbol of initial sample	Name: attack_start

Source: mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: mips.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5577.1.00007f4184400000.00007f4184415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5572.1.00007f4184400000.00007f4184415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mips.elf PID: 5572, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mips.elf PID: 5577, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal68.troj.linELF@0/0@0/0

Source: /tmp/mips.elf (PID: 5572)

Queries kernel information via 'uname':

Jump to behavior

Source: mips.elf, 5572.1.000055c912cc4000.000055c912d4b000.rw-.sdmp, mips.elf, 5577.1.000055c912cc4000.000055c912d4b000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: mips.elf, 5572.1.000055c912cc4000.000055c912d4b000.rw-.sdmp, mips.elf, 5577.1.000055c912cc4000.000055c912d4b000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: mips.elf, 5572.1.00007ffc8c96a000.00007ffc8c98b000.rw-.sdmp, mips.elf, 5577.1.00007ffc8c96a000.00007ffc8c98b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: mips.elf, 5572.1.00007ffc8c96a000.00007ffc8c98b000.rw-.sdmp, mips.elf, 5577.1.00007ffc8c96a000.00007ffc8c98b000.rw-.sdmp	Binary or memory string: &x86_64/usr/bin/qemu-mips/tmp/mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mips.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match

File source: mips.elf, type: SAMPLE

Remote Access Functionality

Yara detected Mirai

Source: Yara match

File source: mips.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
mips.elf	42%	ReversingLabs	Linux.Trojan.LnxMirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.90.96.167	unknown	Germany		34549	MEER-ASmeerfarbigGmbHCoKGDE	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.90.96.167	ppc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm6.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MEER-ASmeerfarbigGmbHCoKGDE	ppc.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm5.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm7.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm6.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	m68k.elf	Get hash	malicious	Unknown	Browse	45.90.96.167
	mpsl.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	fWAr4zGUkY.exe	Get hash	malicious	Remcos, Amadey, Stealc	Browse	45.155.249.199
	https://adrianocarreira.com/team/index.html	Get hash	malicious	HTMLPhisher	Browse	94.247.42.112
	https://geaggda.r.af.d.sendibt2.com/tr/cl/G6qLHi_vqRpNEshmo4Rb0Zi9wTI57XqpRBN9j8dsPzzZwRPQslplmE2NZOV7I4ZyAW8Debk1WJB4vkNN2b2Ymh_xzh3GM7ikV7zFXqNBPGLT_3-ggJ1kozgt2qpczQVJPoanMp2q8VT-Vfp9XDwlA87cx4lPh-ekGo3OmOH1GVhSoreRLRYcOy9-QIzMTEB73P_5lDdW91eGd493vzrT7eGGNz_RQDN5h33uL34k84Zf-XFIybIb1ttQkKbxN5hvQd_5dlX_y4d0yT_KM2VzPr3A0fcsmlHZu3_JktQ8T932jDkv1PITN5Lgv1rTUwsHy3-BpdBMpPjZn3kWrt6TUwpuIJwGTU-yHnFelsoNQCHzwfnGZP4YdL92LyxYOt8PNTGCg27gEMxuIa0RBwD9j9pVGZtxKbGjc3Wo2UqALFneGqf_QC3sGHFr_7zyM0y4CuE2Onwf1-lzIFO6utDvVOq2umljYXy_lJZV4bSKfZeWpWNQ09UKU9JwcRjyD8ICoL-6FiKlYs8puAlM5G8Sk4AqjR-IPw41iIHOdzVbSiJs3a5cnBHhyeO7jx42M7S8htsYpmaO2bMVea40frXVlQ3e3kg	Get hash	malicious	HTMLPhisher	Browse	45.155.250.176
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Socks5Systemz, Stealc, Vidar	Browse	45.155.250.90

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.648757426535619
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mips.elf
File size:	105'753 bytes
MD5:	82386baa236b1d0ea72500f4c102a8c7
SHA1:	2fa53314548e2aa8b9ea981876ed0cf69324feeb
SHA256:	d3225b7b294776a0bf960886e082f00ce32a06985b30fbb94d288e66074f305d
SHA512:	031fa96b553ff58da2d22ef86ada9d93a95f711357ec22bc996fbc05c2ac560a3d4cd8936258ba1f4390e511128e17046beb70d7f55d07dc97cf01f251a5d909
SSDEEP:	1536:pjDM3NJj8kZb3fkGaO5EzBYymCrifXvXbM:pwJj8o+OSBBsfXI
TLSH:	64A3E71A7A168FADF28EC63107F78E35465526D12BD2D141E25CDB002F2638E6C5FFA8
File Content Preview:	.ELF.....................@.....4..S......4. ...(.............@...@....A0..A0..............A0.BA0.BA0......GP..............At.BAt.BAt................dt.Q............................<...'......!'.......................<...'..h...!........'9... .............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400290
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	86796
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000b4	0xb4	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400140	0x140	0x12dc0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x412f00	0x12f00	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x412f60	0x12f60	0x11d0	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x424130	0x14130	0x44	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x424174	0x14174	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x424174	0x14174	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42417c	0x1417c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x424184	0x14184	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x424190	0x14190	0x2b4	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x424450	0x14450	0x4c8	0x4	0x10000003	WAp	0	0	16
.sbss	NOBITS	0x424918	0x14918	0x38	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x424950	0x14918	0x3f30	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x14918	0x96c	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0x96c	0x15284	0x0	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x15284	0x85	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x15604	0x28d0	0x10	0x0		18	245	4
.strtab	STRTAB	0x0	0x17ed4	0x1e45	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x14130	0x14130	5.4947	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14130	0x424130	0x424130	0x7e8	0x4750	4.5838	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .sbss .bss
TLS	0x14174	0x424174	0x424174	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400140	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x412f00	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x412f60	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x424130	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x424174	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x424174	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x42417c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x424184	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x424190	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x424450	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x424918	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x424950	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x96c	0	SECTION	<unknown>	DEFAULT	15
C.1.5091	.symtab	0x413940	24	OBJECT	<unknown>	DEFAULT	4
C.3.5380	.symtab	0x413dac	12	OBJECT	<unknown>	DEFAULT	4
C.3.6114	.symtab	0x4140f8	12	OBJECT	<unknown>	DEFAULT	4
C.3.6172	.symtab	0x4140d0	12	OBJECT	<unknown>	DEFAULT	4
C.4.6115	.symtab	0x4140ec	12	OBJECT	<unknown>	DEFAULT	4
C.5.6123	.symtab	0x4140e0	12	OBJECT	<unknown>	DEFAULT	4
C.6.5518	.symtab	0x413da0	12	OBJECT	<unknown>	DEFAULT	4
FRAMESZ	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
KillerCheckFd	.symtab	0x407414	1016	FUNC	<unknown>	DEFAULT	2
LOCALSZ	.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCAL_ADDR	.symtab	0x424918	4	OBJECT	<unknown>	DEFAULT	12
Nodes	.symtab	0x424998	4	OBJECT	<unknown>	DEFAULT	13
RAOFF	.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
V0OFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit	.symtab	0x40f320	76	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x424450	0	OBJECT	<unknown>	DEFAULT	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x424178	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x424174	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x42433c	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x413dd0	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x424180	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x42417c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x424130	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x424170	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x42433c	4	OBJECT	<unknown>	HIDDEN	10
__GI___close	.symtab	0x40e5fc	176	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x40e5d4	40	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x424340	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x40a4d0	28	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x409880	108	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x4115e0	388	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x40e5fc	176	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x4098ec	268	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x40e6ec	192	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x40e8ec	192	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x40e7ec	192	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x40e6ec	192	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x40e6c4	40	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x40e8ec	192	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x40e8c4	40	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x40b498	44	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x40b4c4	48	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x40b470	40	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x40eb60	204	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x40ecb4	120	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x40e7ec	192	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x40e7c4	40	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x40f320	76	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x40cc60	408	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x40a9bc	220	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x40d580	28	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x40aaa0	60	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x412790	80	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x40e5fc	176	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x409ef0	292	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x410134	132	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x4101b8	116	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x40fc70	1220	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x40ab1c	220	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x40d7b0	240	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x410230	804	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x4098ec	268	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x411228	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x410ce0	372	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x4115e0	388	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x410e60	320	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x411770	276	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x410560	28	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x40de50	988	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x40f370	136	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x4115e0	388	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x40f510	72	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x40f560	16	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x409a00	16	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x40f570	16	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x40f580	48	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x40e230	84	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x40f5b0	60	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x40ac00	60	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x40f5f0	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x40a930	72	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x412240	244	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x40d33c	300	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x409a20	248	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x412150	60	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x409b20	56	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x40aca0	60	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x40f600	60	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x412e00	140	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x411890	308	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x4119d0	824	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x412d50	76	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x40a560	144	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x40f1a0	112	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x40f640	96	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x40f6a0	60	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x40f71c	200	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x40e6ec	192	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x40a134	240	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x40e290	264	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x40ce20	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x40d100	172	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x411d10	192	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x40e8ec	192	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x40a310	264	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x40fb60	272	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x409bc0	60	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x40ad1c	240	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x40ae80	280	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x40f7f0	164	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x409ca0	260	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x40afdc	240	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x40b140	280	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x409db0	60	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x40b260	96	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x40d468	272	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x40f210	28	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x40b300	76	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x40b350	36	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x40b380	228	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x409df0	176	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x40e3a0	404	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x40b2c0	60	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x40d1ac	400	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x40a5f0	52	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x411dd0	248	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x411ed0	248	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x40a630	44	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x40a630	44	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x411fd0	144	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x40a660	184	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x40a8f0	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x412060	160	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x412100	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x40a720	256	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x40a820	208	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x40d5a0	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x40da9c	792	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x412190	176	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x409ea0	16	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x40f8a0	16	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x409eb0	60	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x40e7ec	192	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x424184	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x424184	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x425f2c	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x424310	24	OBJECT	<unknown>	DEFAULT	10
__bss_start	.symtab	0x424918	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40ec2c	136	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x40e5fc	176	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x40e5d4	40	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x424340	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x4284a0	4	OBJECT	<unknown>	HIDDEN	13
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x412e90	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400140	0	FUNC	<unknown>	DEFAULT	2
__environ	.symtab	0x425f24	4	OBJECT	<unknown>	DEFAULT	13
__errno_location	.symtab	0x40a4d0	28	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x4259c0	4	OBJECT	<unknown>	HIDDEN	13
__fcntl_nocancel	.symtab	0x409880	108	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x4115e0	388	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x424174	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x424174	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x40de50	988	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x424920	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x424924	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x4259d0	4	OBJECT	<unknown>	HIDDEN	13
__getdents	.symtab	0x40f400	268	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x412860	436	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x40f580	48	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x40e230	84	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x424174	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x424174	0	NOTYPE	<unknown>	HIDDEN	6
__libc_accept	.symtab	0x40a9bc	220	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x40e5fc	176	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x40ab1c	220	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x40e9b0	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x40ea38	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x4098ec	268	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x40de50	988	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x40f71c	200	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x40e6ec	192	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x40e8ec	192	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x40ad1c	240	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x40ae80	280	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x409ca0	260	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x40afdc	240	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x40b140	280	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x412418	660	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x40f210	28	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x425f20	4	OBJECT	<unknown>	DEFAULT	13
__libc_write	.symtab	0x40e7ec	192	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x40e540	120	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x40c764	520	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x40b500	140	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x424210	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x428508	888	OBJECT	<unknown>	DEFAULT	13
__malloc_trim	.symtab	0x40c640	292	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x40e6ec	192	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x40e6c4	40	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x425f28	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x424174	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x424174	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x424334	4	OBJECT	<unknown>	DEFAULT	10
__progname_full	.symtab	0x424338	4	OBJECT	<unknown>	DEFAULT	10
__pthread_initialize_minimal	.symtab	0x4126ac	28	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x40eb28	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x40eb20	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x40eb20	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x40eb20	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x40eb20	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x40e8ec	192	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x40e8c4	40	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x425f30	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x40b498	44	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x40b4c4	48	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x40b470	40	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x412da0	96	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x40f250	36	FUNC	<unknown>	DEFAULT	2
__sigsetjmp_aux	.symtab	0x4127e0	128	FUNC	<unknown>	DEFAULT	2
__start	.symtab	0x400290	100	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x42436c	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x412a20	144	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x412ab0	344	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x412c10	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x412c70	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x410c70	100	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x424370	4	OBJECT	<unknown>	DEFAULT	10
__sys_accept	.symtab	0x40a980	60	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x40aae0	60	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x40ace0	60	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x40ae10	112	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x40afa0	60	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x40b0d0	112	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x40f280	92	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x40f6e0	60	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x40f2e0	60	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x409c40	96	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x4123f8	32	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x40eb60	204	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x40ecb4	120	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x40ed2c	1132	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x424330	4	OBJECT	<unknown>	HIDDEN	10
__write	.symtab	0x40e7ec	192	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x40e7c4	40	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x40f9a8	220	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x40f8b0	248	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x40fa84	220	FUNC	<unknown>	HIDDEN	2
_dl_aux_init	.symtab	0x4126d0	40	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x4126f8	148	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x424948	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x42494c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x42493c	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x424938	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x424940	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x424930	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x412394	100	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x42492c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x424944	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x424934	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x424928	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x424918	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x428880	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x40f320	76	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x424918	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x424190	0	NOTYPE	<unknown>	DEFAULT	10
_fini	.symtab	0x412f00	28	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x425f60	8192	OBJECT	<unknown>	DEFAULT	13
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400140	0	NOTYPE	<unknown>	DEFAULT	2
_gp	.symtab	0x42c440	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_init	.symtab	0x4000b4	28	FUNC	<unknown>	DEFAULT	1
_pthread_cleanup_pop_restore	.symtab	0x40eb3c	36	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x40eb30	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x40f230	28	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x4284f8	16	OBJECT	<unknown>	HIDDEN	13
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x410580	1168	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x410a10	184	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x424374	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x425f40	12	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_dec_use	.symtab	0x410fa0	648	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x425f5c	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x425f4c	12	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_use_count	.symtab	0x425f58	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x424378	204	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x410ac8	416	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x424350	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x40d5c0	488	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40cc60	408	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x40a9bc	220	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
anti_gdb_entry	.symtab	0x407d74	32	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x40d580	28	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x40d580	28	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x4009d4	116	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x400960	116	FUNC	<unknown>	DEFAULT	2
attack_gre_ip	.symtab	0x406284	1916	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x400a48	1508	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0x40048c	448	FUNC	<unknown>	DEFAULT	2
attack_method_udprape	.symtab	0x406a00	2320	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x424978	32	OBJECT	<unknown>	DEFAULT	13
attack_parse	.symtab	0x40064c	788	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x400300	396	FUNC	<unknown>	DEFAULT	2
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0x401a58	2248	FUNC	<unknown>	DEFAULT	2
attack_tcp_bypass	.symtab	0x404258	1168	FUNC	<unknown>	DEFAULT	2
attack_tcp_ovh	.symtab	0x402cf8	2736	FUNC	<unknown>	DEFAULT	2
attack_tcp_ovhtest	.symtab	0x4037a8	2736	FUNC	<unknown>	DEFAULT	2
attack_tcp_socket	.symtab	0x40102c	400	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0x402320	2520	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0x4011bc	2204	FUNC	<unknown>	DEFAULT	2
attack_tcp_tcp	.symtab	0x4046e8	2356	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_openvpn	.symtab	0x405ac0	572	FUNC	<unknown>	DEFAULT	2
attack_udp_ovhhex	.symtab	0x40501c	2152	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0x405f84	768	FUNC	<unknown>	DEFAULT	2
attack_udp_pps	.symtab	0x405cfc	648	FUNC	<unknown>	DEFAULT	2
attack_udp_r6	.symtab	0x405884	572	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x4259b0	4	OBJECT	<unknown>	DEFAULT	13
bind	.symtab	0x40aaa0	60	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x412790	80	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40b380	228	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x40c060	344	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x407310	92	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x40736c	168	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x40a4f0	108	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40e5fc	176	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x409ef0	292	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.4786	.symtab	0x424950	1	OBJECT	<unknown>	DEFAULT	13
connect	.symtab	0x40ab1c	220	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0x407dc4	544	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x425f24	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x40d7b0	240	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fclose	.symtab	0x410230	804	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x4098ec	268	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x4241fc	4	OBJECT	<unknown>	DEFAULT	10
fd_serv	.symtab	0x424200	4	OBJECT	<unknown>	DEFAULT	10
fd_to_DIR	.symtab	0x40a020	276	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x40a224	228	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x411228	940	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x410ce0	372	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x4115e0	388	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x410e60	320	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x411770	276	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x410560	28	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40de50	988	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x4259d4	1348	OBJECT	<unknown>	DEFAULT	13
frame_dummy	.symtab	0x4001fc	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x40c96c	660	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x40f370	136	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x410ce0	372	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x4115e0	388	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x40f510	72	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x40f560	16	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x409a00	16	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40f570	16	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40f580	48	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40e230	84	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x409a10	16	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40f5b0	60	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x40ac00	60	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40ac40	96	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40f5f0	16	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
hlt	.symtab	0x4002ec	0	NOTYPE	<unknown>	DEFAULT	2
index	.symtab	0x411dd0	248	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x40a930	72	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x412240	244	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x412340	84	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x40cf7c	208	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x40d33c	300	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x409a20	248	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x412150	60	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x409b20	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill_watchdog	.symtab	0x409858	32	FUNC	<unknown>	DEFAULT	2
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x40780c	1384	FUNC	<unknown>	DEFAULT	2
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x40aca0	60	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.4398	.symtab	0x424208	1	OBJECT	<unknown>	DEFAULT	10
lseek	.symtab	0x40f600	60	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x412e00	140	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x407fe4	2800	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x40b58c	2764	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x40cc00	84	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x411890	308	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x4119d0	824	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x412d50	76	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40a560	144	FUNC	<unknown>	DEFAULT	2
methods	.symtab	0x424974	4	OBJECT	<unknown>	DEFAULT	13
methods_len	.symtab	0x424970	1	OBJECT	<unknown>	DEFAULT	13
mmap	.symtab	0x40f1a0	112	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x40f640	96	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x40f6a0	60	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x424230	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x424250	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x40f71c	200	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nprocessors_onln	.symtab	0x40d8a0	508	FUNC	<unknown>	DEFAULT	2
object.4798	.symtab	0x424954	24	OBJECT	<unknown>	DEFAULT	13
open	.symtab	0x40e6ec	192	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x40a134	240	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
openvpn	.symtab	0x424194	54	OBJECT	<unknown>	DEFAULT	10
p.4784	.symtab	0x424190	0	OBJECT	<unknown>	DEFAULT	10
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x42599c	1	OBJECT	<unknown>	DEFAULT	13
prctl	.symtab	0x409b60	96	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x424338	4	OBJECT	<unknown>	DEFAULT	10
program_invocation_short_name	.symtab	0x424334	4	OBJECT	<unknown>	DEFAULT	10
r6	.symtab	0x4241cc	45	OBJECT	<unknown>	DEFAULT	10
raise	.symtab	0x40e290	264	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40ce00	28	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alphastr	.symtab	0x408bdc	368	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x408b30	172	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x408ad4	92	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x408d4c	256	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x40ce20	164	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x413960	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x40d100	172	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x424268	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x411d10	192	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40e8ec	192	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x40a310	264	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x40fb60	272	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x409bc0	60	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x40c1c0	1152	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x40ad1c	240	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x40ae80	280	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rename	.symtab	0x409c00	56	FUNC	<unknown>	DEFAULT	2
rename.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolve_cnc_addr	.symtab	0x407d94	48	FUNC	<unknown>	DEFAULT	2
resolve_func	.symtab	0x424204	4	OBJECT	<unknown>	DEFAULT	10
rewinddir	.symtab	0x40a420	176	FUNC	<unknown>	DEFAULT	2
rewinddir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x412060	160	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x40f7f0	164	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x409ca0	260	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
self	.symtab	0x42499c	4096	OBJECT	<unknown>	DEFAULT	13
send	.symtab	0x40afdc	240	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x40b140	280	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp_aux.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x409db0	60	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40b260	96	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40cec4	184	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x40d468	272	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x40f210	28	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x40b300	76	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x40b350	36	FUNC	<unknown>	DEFAULT	2
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x40b380	228	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x409df0	176	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40e3a0	404	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40b2c0	60	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40d04c	172	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x40d04c	172	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x40d1ac	400	FUNC	<unknown>	DEFAULT	2
srv_addr	.symtab	0x4284b0	16	OBJECT	<unknown>	DEFAULT	13
static_dtv	.symtab	0x427f60	512	OBJECT	<unknown>	DEFAULT	13
static_map	.symtab	0x428468	52	OBJECT	<unknown>	DEFAULT	13
static_slotinfo	.symtab	0x428160	776	OBJECT	<unknown>	DEFAULT	13
stderr	.symtab	0x424368	4	OBJECT	<unknown>	DEFAULT	10
stdin	.symtab	0x424360	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x424364	4	OBJECT	<unknown>	DEFAULT	10
strcat	.symtab	0x40a5f0	52	FUNC	<unknown>	DEFAULT	2
strcat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x411dd0	248	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x411ed0	248	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x40a630	44	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x40a630	44	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x411fd0	144	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strlen	.symtab	0x40a660	184	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40a8f0	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x412060	160	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x412100	72	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x40a720	256	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40a820	208	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40d5a0	28	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x40da9c	792	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x4284c0	56	OBJECT	<unknown>	DEFAULT	13
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x409048	420	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x42420c	4	OBJECT	<unknown>	DEFAULT	10
table_lock_val	.symtab	0x408e80	228	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x408e4c	52	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x408f64	228	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x412190	176	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x409ea0	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x40f8a0	16	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unlink	.symtab	0x409eb0	60	FUNC	<unknown>	DEFAULT	2
unlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x4242f0	20	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x40ddc0	144	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x409470	348	FUNC	<unknown>	DEFAULT	2
util_char_search	.symtab	0x409314	104	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x40937c	244	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x4092c8	44	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x409228	64	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x409268	96	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x4091ec	60	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x4092f4	32	FUNC	<unknown>	DEFAULT	2
w	.symtab	0x4259ac	4	OBJECT	<unknown>	DEFAULT	13
watch_pid	.symtab	0x42491c	4	OBJECT	<unknown>	DEFAULT	12
watchdog.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
watchdog_init	.symtab	0x4095cc	652	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x40e7ec	192	FUNC	<unknown>	DEFAULT	2
x	.symtab	0x4259a0	4	OBJECT	<unknown>	DEFAULT	13
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x4259a4	4	OBJECT	<unknown>	DEFAULT	13
z	.symtab	0x4259a8	4	OBJECT	<unknown>	DEFAULT	13

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 13, 2024 10:42:39.887761116 CET	35740	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:40.008100986 CET	1337	35740	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:40.008184910 CET	35740	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:40.008514881 CET	35740	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:40.128701925 CET	1337	35740	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:40.128792048 CET	35740	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:40.249113083 CET	1337	35740	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:41.268975019 CET	1337	35740	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:41.269404888 CET	35740	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:41.269406080 CET	35740	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:41.271224976 CET	35742	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:41.391915083 CET	1337	35742	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:41.392049074 CET	35742	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:41.392143965 CET	35742	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:41.512456894 CET	1337	35742	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:41.512521029 CET	35742	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:41.632874966 CET	1337	35742	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:42.652576923 CET	1337	35742	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:42.652669907 CET	35742	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:42.652729034 CET	35742	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:42.653423071 CET	35744	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:42.773756981 CET	1337	35744	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:42.773859024 CET	35744	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:42.773911953 CET	35744	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:42.894344091 CET	1337	35744	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:42.894772053 CET	35744	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:43.015168905 CET	1337	35744	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:44.036015987 CET	1337	35744	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:44.041287899 CET	35744	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:44.041287899 CET	35744	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:44.100323915 CET	35746	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:44.220742941 CET	1337	35746	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:44.220863104 CET	35746	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:44.220957994 CET	35746	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:44.343487024 CET	1337	35746	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:44.343553066 CET	35746	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:44.465917110 CET	1337	35746	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:45.483952045 CET	1337	35746	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:45.484126091 CET	35746	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:45.484126091 CET	35746	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:45.486677885 CET	35748	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:45.606983900 CET	1337	35748	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:45.607108116 CET	35748	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:45.607108116 CET	35748	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:45.728645086 CET	1337	35748	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:45.728765965 CET	35748	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:45.849014044 CET	1337	35748	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:46.869554043 CET	1337	35748	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:46.869652033 CET	35748	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:46.869725943 CET	35748	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:46.870122910 CET	35750	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:46.990353107 CET	1337	35750	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:46.990510941 CET	35750	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:46.990612984 CET	35750	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:47.111139059 CET	1337	35750	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:47.111330032 CET	35750	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:47.231736898 CET	1337	35750	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:48.272445917 CET	1337	35750	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:48.272552013 CET	35750	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:48.272634029 CET	35750	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:48.272989988 CET	35752	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:48.393418074 CET	1337	35752	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:48.393502951 CET	35752	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:48.393563032 CET	35752	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:48.513983011 CET	1337	35752	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:48.514084101 CET	35752	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:48.634330988 CET	1337	35752	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:49.653245926 CET	1337	35752	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:49.653327942 CET	35752	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:49.653383970 CET	35752	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:49.653764963 CET	35754	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:49.773989916 CET	1337	35754	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:49.774082899 CET	35754	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:49.774125099 CET	35754	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:49.894408941 CET	1337	35754	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:49.894483089 CET	35754	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:50.014966965 CET	1337	35754	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:51.036195040 CET	1337	35754	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:51.036288977 CET	35754	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:51.036345005 CET	35754	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:51.036916971 CET	35756	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:51.157280922 CET	1337	35756	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:51.157398939 CET	35756	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:51.157495975 CET	35756	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:51.277791023 CET	1337	35756	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:51.277885914 CET	35756	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:51.399521112 CET	1337	35756	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:52.416202068 CET	1337	35756	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:52.416302919 CET	35756	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:52.416395903 CET	35756	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:52.416805983 CET	35758	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:52.537144899 CET	1337	35758	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:52.537271976 CET	35758	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:52.537360907 CET	35758	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:52.657706022 CET	1337	35758	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:52.657783985 CET	35758	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:52.778356075 CET	1337	35758	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:53.798495054 CET	1337	35758	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:53.798655987 CET	35758	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:53.798743963 CET	35758	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:53.799300909 CET	35760	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:53.919423103 CET	1337	35760	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:53.919492960 CET	35760	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:53.919519901 CET	35760	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:54.039649963 CET	1337	35760	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:54.039714098 CET	35760	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:54.159823895 CET	1337	35760	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:55.180596113 CET	1337	35760	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:55.180684090 CET	35760	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:55.180768967 CET	35760	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:55.181188107 CET	35762	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:55.301465034 CET	1337	35762	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:55.301549911 CET	35762	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:55.301603079 CET	35762	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:55.422058105 CET	1337	35762	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:55.422144890 CET	35762	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:55.543580055 CET	1337	35762	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:56.561810970 CET	1337	35762	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:56.561883926 CET	35762	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:56.561917067 CET	35762	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:56.562283039 CET	35764	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:56.683665991 CET	1337	35764	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:56.683762074 CET	35764	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:56.683810949 CET	35764	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:56.804322004 CET	1337	35764	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:56.804393053 CET	35764	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:56.924791098 CET	1337	35764	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:57.945317984 CET	1337	35764	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:57.945473909 CET	35764	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:57.945473909 CET	35764	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:57.945804119 CET	35766	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:58.065988064 CET	1337	35766	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:58.066217899 CET	35766	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:58.066217899 CET	35766	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:58.186665058 CET	1337	35766	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:58.186965942 CET	35766	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:58.307506084 CET	1337	35766	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:59.326316118 CET	1337	35766	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:59.326395988 CET	35766	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:59.326664925 CET	35766	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:59.326759100 CET	35768	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:59.447098017 CET	1337	35768	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:59.447208881 CET	35768	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:59.447345972 CET	35768	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:59.568116903 CET	1337	35768	45.90.96.167	192.168.2.14
Dec 13, 2024 10:42:59.568217993 CET	35768	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:42:59.689141035 CET	1337	35768	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:00.709307909 CET	1337	35768	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:00.709470034 CET	35768	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:00.709527969 CET	35768	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:00.710149050 CET	35770	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:00.830389977 CET	1337	35770	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:00.830635071 CET	35770	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:00.830635071 CET	35770	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:00.951097012 CET	1337	35770	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:00.951308012 CET	35770	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:01.071800947 CET	1337	35770	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:02.092703104 CET	1337	35770	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:02.092890024 CET	35770	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:02.092988014 CET	35770	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:02.093535900 CET	35772	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:02.214310884 CET	1337	35772	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:02.214457035 CET	35772	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:02.214499950 CET	35772	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:02.334985018 CET	1337	35772	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:02.335217953 CET	35772	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:02.455682039 CET	1337	35772	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:03.477066994 CET	1337	35772	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:03.477221966 CET	35772	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:03.477273941 CET	35772	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:03.477905035 CET	35774	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:03.598179102 CET	1337	35774	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:03.598361969 CET	35774	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:03.598361969 CET	35774	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:03.719095945 CET	1337	35774	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:03.719547033 CET	35774	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:03.840326071 CET	1337	35774	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:04.859486103 CET	1337	35774	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:04.859884977 CET	35774	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:04.859885931 CET	35774	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:04.860713005 CET	35776	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:04.981004000 CET	1337	35776	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:04.981189013 CET	35776	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:04.981241941 CET	35776	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:05.101671934 CET	1337	35776	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:05.101993084 CET	35776	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:05.222337961 CET	1337	35776	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:06.242872000 CET	1337	35776	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:06.243343115 CET	35776	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:06.243343115 CET	35776	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:06.244137049 CET	35778	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:06.364520073 CET	1337	35778	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:06.364729881 CET	35778	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:06.364729881 CET	35778	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:06.485222101 CET	1337	35778	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:06.485445976 CET	35778	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:06.605917931 CET	1337	35778	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:07.625282049 CET	1337	35778	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:07.625473022 CET	35778	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:07.625521898 CET	35778	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:07.626287937 CET	35780	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:07.746651888 CET	1337	35780	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:07.746881008 CET	35780	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:07.746953011 CET	35780	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:07.867516041 CET	1337	35780	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:07.867697001 CET	35780	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:07.988363028 CET	1337	35780	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:09.007179022 CET	1337	35780	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:09.007394075 CET	35780	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:09.007508039 CET	35780	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:09.008287907 CET	35782	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:09.129600048 CET	1337	35782	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:09.129815102 CET	35782	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:09.129877090 CET	35782	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:09.250452995 CET	1337	35782	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:09.250613928 CET	35782	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:09.371946096 CET	1337	35782	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:10.389667988 CET	1337	35782	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:10.389960051 CET	35782	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:10.389960051 CET	35782	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:10.390969992 CET	35784	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:10.511292934 CET	1337	35784	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:10.511595011 CET	35784	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:10.511595011 CET	35784	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:10.631975889 CET	1337	35784	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:10.632142067 CET	35784	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:10.752420902 CET	1337	35784	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:11.772028923 CET	1337	35784	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:11.772329092 CET	35784	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:11.772329092 CET	35784	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:11.772922993 CET	35786	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:11.893321037 CET	1337	35786	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:11.893609047 CET	35786	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:11.893609047 CET	35786	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:12.014663935 CET	1337	35786	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:12.014936924 CET	35786	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:12.135407925 CET	1337	35786	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:13.156208038 CET	1337	35786	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:13.156599998 CET	35786	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:13.156600952 CET	35786	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:13.157377005 CET	35788	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:13.277916908 CET	1337	35788	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:13.278239965 CET	35788	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:13.278239965 CET	35788	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:13.398749113 CET	1337	35788	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:13.399051905 CET	35788	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:13.522042036 CET	1337	35788	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:14.538856030 CET	1337	35788	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:14.539052963 CET	35788	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:14.539100885 CET	35788	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:14.539650917 CET	35790	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:14.660074949 CET	1337	35790	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:14.660366058 CET	35790	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:14.660366058 CET	35790	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:14.780936956 CET	1337	35790	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:14.781239986 CET	35790	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:14.901848078 CET	1337	35790	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:15.920994997 CET	1337	35790	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:15.921370029 CET	35790	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:15.921370029 CET	35790	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:15.922197104 CET	35792	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:16.042474031 CET	1337	35792	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:16.042896986 CET	35792	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:16.042896986 CET	35792	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:16.163444042 CET	1337	35792	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:16.163721085 CET	35792	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:16.284048080 CET	1337	35792	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:17.312632084 CET	1337	35792	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:17.313080072 CET	35792	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:17.313080072 CET	35792	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:17.314189911 CET	35794	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:17.434499025 CET	1337	35794	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:17.434762955 CET	35794	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:17.434818983 CET	35794	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:17.555233002 CET	1337	35794	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:17.555494070 CET	35794	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:17.675770044 CET	1337	35794	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:18.695339918 CET	1337	35794	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:18.695645094 CET	35794	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:18.695679903 CET	35794	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:18.696826935 CET	35796	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:18.817219973 CET	1337	35796	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:18.817392111 CET	35796	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:18.817564964 CET	35796	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:18.937908888 CET	1337	35796	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:18.938277006 CET	35796	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:19.058634043 CET	1337	35796	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:20.165859938 CET	1337	35796	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:20.166623116 CET	35796	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:20.287091970 CET	1337	35796	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:21.169975042 CET	35798	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:21.290333033 CET	1337	35798	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:21.290558100 CET	35798	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:21.290558100 CET	35798	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:21.410953999 CET	1337	35798	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:21.411139965 CET	35798	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:21.532294035 CET	1337	35798	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:22.551606894 CET	1337	35798	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:22.551904917 CET	35798	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:22.551906109 CET	35798	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:22.552604914 CET	35800	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:22.672977924 CET	1337	35800	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:22.673369884 CET	35800	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:22.673371077 CET	35800	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:22.793951988 CET	1337	35800	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:22.794409037 CET	35800	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:22.915035009 CET	1337	35800	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:23.970113039 CET	1337	35800	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:23.970597982 CET	35800	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:23.970597982 CET	35800	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:23.971668959 CET	35802	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:24.092096090 CET	1337	35802	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:24.092319012 CET	35802	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:24.092319012 CET	35802	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:24.212897062 CET	1337	35802	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:24.213093996 CET	35802	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:24.334481955 CET	1337	35802	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:25.353393078 CET	1337	35802	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:25.353684902 CET	35802	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:25.353684902 CET	35802	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:25.354856014 CET	35804	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:25.475163937 CET	1337	35804	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:25.475651026 CET	35804	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:25.475651979 CET	35804	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:25.596474886 CET	1337	35804	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:25.596836090 CET	35804	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:25.717268944 CET	1337	35804	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:26.739384890 CET	1337	35804	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:26.739801884 CET	35804	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:26.739803076 CET	35804	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:26.740763903 CET	35806	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:26.861212969 CET	1337	35806	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:26.861457109 CET	35806	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:26.861457109 CET	35806	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:26.982053041 CET	1337	35806	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:26.982306957 CET	35806	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:27.104584932 CET	1337	35806	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:28.154263973 CET	1337	35806	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:28.154603004 CET	35806	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:28.154670954 CET	35806	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:28.155960083 CET	35808	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:28.277678013 CET	1337	35808	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:28.277837038 CET	35808	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:28.277954102 CET	35808	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:28.398375988 CET	1337	35808	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:28.398571968 CET	35808	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:28.526037931 CET	1337	35808	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:29.537833929 CET	1337	35808	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:29.538022995 CET	35808	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:29.538089991 CET	35808	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:29.540076971 CET	35810	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:29.660464048 CET	1337	35810	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:29.660645962 CET	35810	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:29.660666943 CET	35810	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:29.781297922 CET	1337	35810	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:29.781491041 CET	35810	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:29.902348995 CET	1337	35810	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:30.931415081 CET	1337	35810	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:30.931670904 CET	35810	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:30.931670904 CET	35810	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:30.932749033 CET	35812	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:31.053313017 CET	1337	35812	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:31.053622007 CET	35812	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:31.053622961 CET	35812	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:31.174169064 CET	1337	35812	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:31.174495935 CET	35812	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:31.294954062 CET	1337	35812	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:32.324517012 CET	1337	35812	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:32.324757099 CET	35812	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:32.324845076 CET	35812	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:32.325680017 CET	35814	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:32.446089983 CET	1337	35814	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:32.446290970 CET	35814	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:32.446347952 CET	35814	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:32.566843987 CET	1337	35814	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:32.567184925 CET	35814	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:32.687603951 CET	1337	35814	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:33.706301928 CET	1337	35814	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:33.706473112 CET	35814	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:33.706521034 CET	35814	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:33.707247972 CET	35816	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:33.827502012 CET	1337	35816	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:33.827754021 CET	35816	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:33.827754974 CET	35816	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:33.948160887 CET	1337	35816	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:33.948292971 CET	35816	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:34.068742990 CET	1337	35816	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:35.088505983 CET	1337	35816	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:35.088732958 CET	35816	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:35.088732958 CET	35816	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:35.089271069 CET	35818	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:35.209477901 CET	1337	35818	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:35.209723949 CET	35818	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:35.209723949 CET	35818	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:35.330182076 CET	1337	35818	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:35.330480099 CET	35818	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:35.451051950 CET	1337	35818	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:36.479774952 CET	1337	35818	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:36.479979038 CET	35818	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:36.479979038 CET	35818	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:36.481046915 CET	35820	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:36.601445913 CET	1337	35820	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:36.601574898 CET	35820	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:36.601643085 CET	35820	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:36.722069025 CET	1337	35820	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:36.722260952 CET	35820	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:36.842843056 CET	1337	35820	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:37.950448036 CET	1337	35820	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:37.950824022 CET	35820	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:38.071554899 CET	1337	35820	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:38.953299046 CET	35822	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:39.073684931 CET	1337	35822	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:39.074089050 CET	35822	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:39.074089050 CET	35822	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:39.194412947 CET	1337	35822	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:39.194576025 CET	35822	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:39.314898968 CET	1337	35822	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:40.334060907 CET	1337	35822	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:40.334397078 CET	35822	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:40.334445953 CET	35822	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:40.335494995 CET	35824	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:40.455775023 CET	1337	35824	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:40.455971003 CET	35824	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:40.455971003 CET	35824	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:40.576531887 CET	1337	35824	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:40.576702118 CET	35824	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:40.697140932 CET	1337	35824	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:41.719017029 CET	1337	35824	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:41.719368935 CET	35824	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:41.719368935 CET	35824	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:41.720330954 CET	35826	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:41.840528011 CET	1337	35826	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:41.840650082 CET	35826	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:41.840697050 CET	35826	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:41.961091042 CET	1337	35826	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:41.961250067 CET	35826	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:42.081866026 CET	1337	35826	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:43.110141993 CET	1337	35826	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:43.110318899 CET	35826	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:43.110371113 CET	35826	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:43.111068010 CET	35828	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:43.231909990 CET	1337	35828	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:43.232156992 CET	35828	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:43.232156992 CET	35828	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:43.352571011 CET	1337	35828	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:43.352778912 CET	35828	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:43.473530054 CET	1337	35828	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:44.491946936 CET	1337	35828	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:44.492490053 CET	35828	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:44.492490053 CET	35828	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:44.493386030 CET	35830	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:44.613634109 CET	1337	35830	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:44.613845110 CET	35830	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:44.614126921 CET	35830	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:44.734899044 CET	1337	35830	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:44.735105038 CET	35830	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:44.855467081 CET	1337	35830	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:45.875076056 CET	1337	35830	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:45.875299931 CET	35830	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:45.875361919 CET	35830	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:45.876677990 CET	35832	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:45.996974945 CET	1337	35832	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:45.997519970 CET	35832	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:45.997520924 CET	35832	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:46.117902040 CET	1337	35832	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:46.118379116 CET	35832	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:46.238949060 CET	1337	35832	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:47.347450018 CET	1337	35832	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:47.347865105 CET	35832	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:47.468163967 CET	1337	35832	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:48.349988937 CET	35834	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:48.471024036 CET	1337	35834	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:48.471184969 CET	35834	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:48.471254110 CET	35834	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:48.591598988 CET	1337	35834	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:48.591727972 CET	35834	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:48.712090969 CET	1337	35834	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:49.730901957 CET	1337	35834	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:49.731086016 CET	35834	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:49.731116056 CET	35834	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:49.731843948 CET	35836	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:49.852125883 CET	1337	35836	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:49.852427959 CET	35836	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:49.852427959 CET	35836	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:49.972923040 CET	1337	35836	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:49.973057985 CET	35836	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:50.093482971 CET	1337	35836	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:51.113528967 CET	1337	35836	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:51.114002943 CET	35836	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:51.114002943 CET	35836	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:51.115362883 CET	35838	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:51.236711025 CET	1337	35838	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:51.236916065 CET	35838	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:51.237006903 CET	35838	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:51.357446909 CET	1337	35838	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:51.357687950 CET	35838	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:51.478311062 CET	1337	35838	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:52.498116970 CET	1337	35838	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:52.498282909 CET	35838	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:52.498343945 CET	35838	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:52.499420881 CET	35840	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:52.619775057 CET	1337	35840	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:52.620069027 CET	35840	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:52.620178938 CET	35840	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:52.740536928 CET	1337	35840	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:52.740894079 CET	35840	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:52.861304045 CET	1337	35840	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:53.897525072 CET	1337	35840	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:53.897804022 CET	35840	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:53.897804022 CET	35840	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:53.899336100 CET	35842	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:54.019762993 CET	1337	35842	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:54.019984961 CET	35842	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:54.020041943 CET	35842	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:54.140898943 CET	1337	35842	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:54.141223907 CET	35842	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:54.261543989 CET	1337	35842	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:55.282166958 CET	1337	35842	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:55.282500982 CET	35842	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:55.282501936 CET	35842	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:55.283545971 CET	35844	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:55.403784037 CET	1337	35844	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:55.403945923 CET	35844	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:55.403986931 CET	35844	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:55.524485111 CET	1337	35844	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:55.524713993 CET	35844	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:55.646025896 CET	1337	35844	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:56.665057898 CET	1337	35844	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:56.665407896 CET	35844	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:56.665409088 CET	35844	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:56.666994095 CET	35846	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:56.788002014 CET	1337	35846	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:56.788458109 CET	35846	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:56.788681984 CET	35846	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:56.909291029 CET	1337	35846	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:56.909838915 CET	35846	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:57.030770063 CET	1337	35846	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:58.049026966 CET	1337	35846	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:58.049410105 CET	35846	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:58.049410105 CET	35846	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:58.050935030 CET	35848	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:58.171607971 CET	1337	35848	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:58.172034979 CET	35848	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:58.172034979 CET	35848	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:58.292653084 CET	1337	35848	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:58.293011904 CET	35848	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:58.413892031 CET	1337	35848	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:59.432383060 CET	1337	35848	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:59.432637930 CET	35848	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:59.432758093 CET	35848	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:59.433916092 CET	35850	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:59.554333925 CET	1337	35850	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:59.554502964 CET	35850	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:59.554702044 CET	35850	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:59.675529957 CET	1337	35850	45.90.96.167	192.168.2.14
Dec 13, 2024 10:43:59.676279068 CET	35850	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:43:59.796994925 CET	1337	35850	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:00.816103935 CET	1337	35850	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:00.816395998 CET	35850	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:00.816395998 CET	35850	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:00.817877054 CET	35852	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:00.938304901 CET	1337	35852	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:00.938716888 CET	35852	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:00.938716888 CET	35852	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:01.059084892 CET	1337	35852	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:01.059326887 CET	35852	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:01.180208921 CET	1337	35852	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:02.198929071 CET	1337	35852	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:02.199213028 CET	35852	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:02.199213982 CET	35852	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:02.201184988 CET	35854	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:02.321686029 CET	1337	35854	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:02.322062969 CET	35854	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:02.322062969 CET	35854	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:02.442873001 CET	1337	35854	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:02.443085909 CET	35854	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:02.563522100 CET	1337	35854	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:03.582876921 CET	1337	35854	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:03.583148956 CET	35854	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:03.583148956 CET	35854	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:03.585215092 CET	35856	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:03.705713034 CET	1337	35856	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:03.706067085 CET	35856	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:03.706067085 CET	35856	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:03.827101946 CET	1337	35856	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:03.827344894 CET	35856	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:03.948081017 CET	1337	35856	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:04.967235088 CET	1337	35856	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:04.967622995 CET	35856	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:04.967622995 CET	35856	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:04.968756914 CET	35858	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:05.089483023 CET	1337	35858	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:05.089860916 CET	35858	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:05.089860916 CET	35858	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:05.210751057 CET	1337	35858	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:05.210983038 CET	35858	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:05.331883907 CET	1337	35858	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:06.352711916 CET	1337	35858	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:06.353029966 CET	35858	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:06.353029966 CET	35858	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:06.354197979 CET	35860	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:06.474586010 CET	1337	35860	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:06.474973917 CET	35860	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:06.474975109 CET	35860	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:06.596398115 CET	1337	35860	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:06.596769094 CET	35860	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:06.717350006 CET	1337	35860	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:07.745415926 CET	1337	35860	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:07.745892048 CET	35860	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:07.745893002 CET	35860	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:07.747677088 CET	35862	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:07.868135929 CET	1337	35862	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:07.868580103 CET	35862	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:07.868580103 CET	35862	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:07.989391088 CET	1337	35862	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:07.989653111 CET	35862	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:08.110189915 CET	1337	35862	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:09.129100084 CET	1337	35862	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:09.129379034 CET	35862	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:09.129379988 CET	35862	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:09.130781889 CET	35864	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:09.251391888 CET	1337	35864	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:09.251969099 CET	35864	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:09.251969099 CET	35864	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:09.372685909 CET	1337	35864	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:09.373019934 CET	35864	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:09.493626118 CET	1337	35864	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:10.512203932 CET	1337	35864	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:10.512636900 CET	35864	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:10.512638092 CET	35864	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:10.514141083 CET	35866	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:10.634697914 CET	1337	35866	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:10.635354042 CET	35866	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:10.635446072 CET	35866	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:10.755947113 CET	1337	35866	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:10.756323099 CET	35866	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:10.876777887 CET	1337	35866	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:11.905874014 CET	1337	35866	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:11.906469107 CET	35866	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:11.906469107 CET	35866	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:11.908009052 CET	35868	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:12.028933048 CET	1337	35868	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:12.029361963 CET	35868	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:12.029567003 CET	35868	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:12.150173903 CET	1337	35868	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:12.150460958 CET	35868	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:12.271272898 CET	1337	35868	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:13.290441036 CET	1337	35868	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:13.290797949 CET	35868	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:13.290797949 CET	35868	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:13.292310953 CET	35870	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:13.412965059 CET	1337	35870	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:13.413523912 CET	35870	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:13.413690090 CET	35870	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:13.534055948 CET	1337	35870	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:13.534303904 CET	35870	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:13.654959917 CET	1337	35870	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:14.674407959 CET	1337	35870	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:14.674776077 CET	35870	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:14.674776077 CET	35870	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:14.676100969 CET	35872	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:14.796394110 CET	1337	35872	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:14.796636105 CET	35872	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:14.796636105 CET	35872	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:14.916945934 CET	1337	35872	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:14.917303085 CET	35872	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:15.037699938 CET	1337	35872	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:16.057666063 CET	1337	35872	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:16.058087111 CET	35872	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:16.058087111 CET	35872	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:16.059994936 CET	35874	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:16.180613995 CET	1337	35874	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:16.181150913 CET	35874	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:16.181150913 CET	35874	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:16.302139997 CET	1337	35874	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:16.302496910 CET	35874	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:16.423629999 CET	1337	35874	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:17.441652060 CET	1337	35874	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:17.442307949 CET	35874	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:17.442307949 CET	35874	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:17.445044041 CET	35876	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:17.565709114 CET	1337	35876	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:17.566083908 CET	35876	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:17.566231012 CET	35876	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:17.686525106 CET	1337	35876	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:17.687009096 CET	35876	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:17.807686090 CET	1337	35876	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:18.826220036 CET	1337	35876	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:18.826797962 CET	35876	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:18.826873064 CET	35876	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:18.829226017 CET	35878	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:18.949937105 CET	1337	35878	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:18.950333118 CET	35878	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:18.950333118 CET	35878	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:19.071425915 CET	1337	35878	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:19.071919918 CET	35878	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:19.192797899 CET	1337	35878	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:20.227214098 CET	1337	35878	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:20.227427959 CET	35878	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:20.227488041 CET	35878	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:20.229150057 CET	35880	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:20.349493027 CET	1337	35880	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:20.349709988 CET	35880	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:20.349709988 CET	35880	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:20.471118927 CET	1337	35880	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:20.471384048 CET	35880	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:20.591744900 CET	1337	35880	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:21.611567974 CET	1337	35880	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:21.612111092 CET	35880	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:21.612112045 CET	35880	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:21.613467932 CET	35882	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:21.733947992 CET	1337	35882	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:21.734402895 CET	35882	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:21.734404087 CET	35882	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:21.854862928 CET	1337	35882	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:21.855274916 CET	35882	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:21.975831985 CET	1337	35882	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:22.994859934 CET	1337	35882	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:22.995376110 CET	35882	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:22.995376110 CET	35882	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:22.997298002 CET	35884	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:23.117975950 CET	1337	35884	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:23.118406057 CET	35884	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:23.118406057 CET	35884	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:23.238771915 CET	1337	35884	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:23.238964081 CET	35884	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:23.359561920 CET	1337	35884	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:24.378918886 CET	1337	35884	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:24.379354000 CET	35884	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:24.379354000 CET	35884	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:24.380954981 CET	35886	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:24.501368046 CET	1337	35886	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:24.501611948 CET	35886	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:24.501781940 CET	35886	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:24.622646093 CET	1337	35886	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:24.623085022 CET	35886	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:24.743896961 CET	1337	35886	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:25.764628887 CET	1337	35886	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:25.765013933 CET	35886	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:25.765106916 CET	35886	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:25.766515970 CET	35888	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:25.887228012 CET	1337	35888	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:25.887670040 CET	35888	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:25.887670040 CET	35888	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:26.008739948 CET	1337	35888	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:26.009013891 CET	35888	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:26.130147934 CET	1337	35888	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:27.149435043 CET	1337	35888	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:27.149962902 CET	35888	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:27.149964094 CET	35888	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:27.152081013 CET	35890	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:27.273036957 CET	1337	35890	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:27.273726940 CET	35890	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:27.273726940 CET	35890	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:27.394804955 CET	1337	35890	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:27.395304918 CET	35890	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:27.516563892 CET	1337	35890	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:28.534841061 CET	1337	35890	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:28.535415888 CET	35890	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:28.535808086 CET	35890	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:28.538636923 CET	35892	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:28.659296989 CET	1337	35892	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:28.659502029 CET	35892	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:28.659709930 CET	35892	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:28.780311108 CET	1337	35892	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:28.780776978 CET	35892	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:28.901478052 CET	1337	35892	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:29.920979023 CET	1337	35892	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:29.921260118 CET	35892	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:29.921260118 CET	35892	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:29.922533035 CET	35894	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:30.043386936 CET	1337	35894	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:30.043849945 CET	35894	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:30.043936968 CET	35894	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:30.164841890 CET	1337	35894	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:30.165510893 CET	35894	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:30.286097050 CET	1337	35894	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:31.304784060 CET	1337	35894	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:31.305007935 CET	35894	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:31.305089951 CET	35894	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:31.306164980 CET	35896	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:31.427354097 CET	1337	35896	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:31.427784920 CET	35896	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:31.427784920 CET	35896	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:31.548482895 CET	1337	35896	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:31.548887968 CET	35896	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:31.669532061 CET	1337	35896	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:32.687993050 CET	1337	35896	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:32.688230991 CET	35896	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:32.688231945 CET	35896	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:32.688893080 CET	35898	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:32.809051991 CET	1337	35898	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:32.809267998 CET	35898	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:32.809431076 CET	35898	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:32.930011034 CET	1337	35898	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:32.930341959 CET	35898	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:33.051028013 CET	1337	35898	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:34.071371078 CET	1337	35898	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:34.071660042 CET	35898	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:34.071660042 CET	35898	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:34.072952986 CET	35900	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:34.193485022 CET	1337	35900	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:34.193743944 CET	35900	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:34.193743944 CET	35900	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:34.314213037 CET	1337	35900	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:34.314376116 CET	35900	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:34.434782982 CET	1337	35900	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:35.470902920 CET	1337	35900	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:35.471617937 CET	35900	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:35.471617937 CET	35900	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:35.473947048 CET	35902	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:35.594561100 CET	1337	35902	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:35.594969988 CET	35902	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:35.595277071 CET	35902	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:35.715660095 CET	1337	35902	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:35.715830088 CET	35902	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:35.836469889 CET	1337	35902	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:36.857106924 CET	1337	35902	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:36.857563972 CET	35902	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:36.857810020 CET	35902	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:36.859899044 CET	35904	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:36.980989933 CET	1337	35904	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:36.981563091 CET	35904	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:36.981846094 CET	35904	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:37.102410078 CET	1337	35904	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:37.102879047 CET	35904	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:37.224034071 CET	1337	35904	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:38.242552996 CET	1337	35904	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:38.242985964 CET	35904	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:38.243115902 CET	35904	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:38.244477987 CET	35906	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:38.364948988 CET	1337	35906	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:38.365586042 CET	35906	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:38.365586042 CET	35906	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:38.486586094 CET	1337	35906	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:38.487271070 CET	35906	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:38.608195066 CET	1337	35906	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:39.627281904 CET	1337	35906	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:39.627655983 CET	35906	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:39.627715111 CET	35906	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:39.629604101 CET	35908	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:39.750283003 CET	1337	35908	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:39.750690937 CET	35908	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:39.750880003 CET	35908	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:39.871471882 CET	1337	35908	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:39.872127056 CET	35908	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:39.992997885 CET	1337	35908	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:41.012383938 CET	1337	35908	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:41.012811899 CET	35908	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:41.012811899 CET	35908	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:41.014142036 CET	35910	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:41.134488106 CET	1337	35910	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:41.134788990 CET	35910	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:41.134788990 CET	35910	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:41.255198956 CET	1337	35910	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:41.255368948 CET	35910	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:41.375751019 CET	1337	35910	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:42.411501884 CET	1337	35910	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:42.411781073 CET	35910	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:42.411885977 CET	35910	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:42.412447929 CET	35912	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:42.532684088 CET	1337	35912	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:42.532849073 CET	35912	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:42.533042908 CET	35912	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:42.653389931 CET	1337	35912	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:42.653860092 CET	35912	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:42.774415016 CET	1337	35912	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:43.792649984 CET	1337	35912	45.90.96.167	192.168.2.14
Dec 13, 2024 10:44:43.792864084 CET	35912	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:43.792939901 CET	35912	1337	192.168.2.14	45.90.96.167
Dec 13, 2024 10:44:43.793905020 CET	35914	1337	192.168.2.14	45.90.96.167

System Behavior

Analysis Process: mips.elf PID: 5572, Parent PID: 5490

General

Start time (UTC):	09:42:39
Start date (UTC):	13/12/2024
Path:	/tmp/mips.elf
Arguments:	/tmp/mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5574, Parent PID: 5572

General

Start time (UTC):	09:42:39
Start date (UTC):	13/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5576, Parent PID: 5574

General

Start time (UTC):	09:42:39
Start date (UTC):	13/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: mips.elf PID: 5577, Parent PID: 5574

General

Start time (UTC):	09:42:39
Start date (UTC):	13/12/2024
Path:	/tmp/mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: mips.elf PID: 5572, Parent PID: 5490

General

Chronological Activities

Analysis Process: mips.elf PID: 5574, Parent PID: 5572

General

Chronological Activities

Analysis Process: mips.elf PID: 5576, Parent PID: 5574

General

Chronological Activities

Analysis Process: mips.elf PID: 5577, Parent PID: 5574

General

Chronological Activities

Linux Analysis Report
mips.elf