Edit tour

Linux Analysis Report
sh4.elf

Overview

General Information

Sample name:	sh4.elf
Analysis ID:	1574409
MD5:	a333c2d567cd16cfd41b3ce203b0aca1
SHA1:	48d9d9813fa69f6ff6cb40cef9cd6cd172ec6ae7
SHA256:	f8531d9e117f9fdc01323176d1eff81384b685f6e4862d635469e6b7fbd2b24a
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Contains symbols with names commonly found in malware

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574409
Start date and time:	2024-12-13 10:49:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	sh4.elf
Detection:	MAL
Classification:	mal68.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: sh4.elf

Runtime Messages

Command:	/tmp/sh4.elf
PID:	5430
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	listening tun0
Standard Error:

Process Tree

system is lnxubuntu20

sh4.elf (PID: 5430, Parent: 5353, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/sh4.elf

sh4.elf New Fork (PID: 5432, Parent: 5430)

sh4.elf New Fork (PID: 5434, Parent: 5432)

sh4.elf New Fork (PID: 5436, Parent: 5432)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
sh4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
sh4.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5436.1.00007fb97c400000.00007fb97c40f000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5430.1.00007fb97c400000.00007fb97c40f000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5430	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1309:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x131d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1331:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1345:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1359:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x136d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1381:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1395:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1421:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1435:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1449:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5436	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x39e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a0e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a22:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a36:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a4a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a5e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a72:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a86:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a9a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3aae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ac2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ad6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3aea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3afe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b26:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b4e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b62:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b76:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: sh4.elf

ReversingLabs: Detection: 44%

Source: global traffic

TCP traffic: 192.168.2.13:33288 -> 45.90.96.167:1337

Source: /tmp/sh4.elf (PID: 5430)

Socket: 127.0.0.1:46157

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167
Source: unknown	TCP traffic detected without corresponding DNS query: 45.90.96.167

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5436.1.00007fb97c400000.00007fb97c40f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5430.1.00007fb97c400000.00007fb97c40f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5430, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_gre_ip
Source: ELF static info symbol of initial sample	Name: attack_init
Source: ELF static info symbol of initial sample	Name: attack_kill_all
Source: ELF static info symbol of initial sample	Name: attack_method_udprape
Source: ELF static info symbol of initial sample	Name: attack_ongoing
Source: ELF static info symbol of initial sample	Name: attack_parse
Source: ELF static info symbol of initial sample	Name: attack_start

Source: sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5436.1.00007fb97c400000.00007fb97c40f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5430.1.00007fb97c400000.00007fb97c40f000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5430, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal68.troj.linELF@0/0@0/0

Source: /tmp/sh4.elf (PID: 5430)

Queries kernel information via 'uname':

Jump to behavior

Source: sh4.elf, 5430.1.00007ffc3b237000.00007ffc3b258000.rw-.sdmp, sh4.elf, 5436.1.00007ffc3b237000.00007ffc3b258000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: sh4.elf, 5430.1.000055828224a000.00005582822ad000.rw-.sdmp, sh4.elf, 5436.1.000055828224a000.00005582822ad000.rw-.sdmp	Binary or memory string: U5!/etc/qemu-binfmt/sh4
Source: sh4.elf, 5430.1.000055828224a000.00005582822ad000.rw-.sdmp, sh4.elf, 5436.1.000055828224a000.00005582822ad000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: sh4.elf, 5430.1.00007ffc3b237000.00007ffc3b258000.rw-.sdmp, sh4.elf, 5436.1.00007ffc3b237000.00007ffc3b258000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sh4/tmp/sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sh4.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match

File source: sh4.elf, type: SAMPLE

Remote Access Functionality

Yara detected Mirai

Source: Yara match

File source: sh4.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
sh4.elf	45%	ReversingLabs	Linux.Trojan.LnxMirai

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false
45.90.96.167	unknown	Germany		34549	MEER-ASmeerfarbigGmbHCoKGDE	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.125.190.26	zmap.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse
	roze.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
	ppc.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse
	sh4.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x86.xxx.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	arm4.elf	Get hash	malicious	Mirai	Browse
	main_x86_64.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse
	kjsusa6.elf	Get hash	malicious	Mirai	Browse
45.90.96.167	mips.elf	Get hash	malicious	Mirai	Browse
	ppc.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai	Browse
	arm6.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	roze.armv5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse	91.189.91.42
	ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	zmap.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse	185.125.190.26
	0x86d.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	roze.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	arm5.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	zmap.arm5.elf	Get hash	malicious	Okiru	Browse	91.189.91.42
	ppc.elf	Get hash	malicious	Gafgyt, Mirai, Okiru	Browse	185.125.190.26
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
MEER-ASmeerfarbigGmbHCoKGDE	mips.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	ppc.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm5.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm7.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	arm6.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	m68k.elf	Get hash	malicious	Unknown	Browse	45.90.96.167
	mpsl.elf	Get hash	malicious	Mirai	Browse	45.90.96.167
	fWAr4zGUkY.exe	Get hash	malicious	Remcos, Amadey, Stealc	Browse	45.155.249.199
	https://adrianocarreira.com/team/index.html	Get hash	malicious	HTMLPhisher	Browse	94.247.42.112
	https://geaggda.r.af.d.sendibt2.com/tr/cl/G6qLHi_vqRpNEshmo4Rb0Zi9wTI57XqpRBN9j8dsPzzZwRPQslplmE2NZOV7I4ZyAW8Debk1WJB4vkNN2b2Ymh_xzh3GM7ikV7zFXqNBPGLT_3-ggJ1kozgt2qpczQVJPoanMp2q8VT-Vfp9XDwlA87cx4lPh-ekGo3OmOH1GVhSoreRLRYcOy9-QIzMTEB73P_5lDdW91eGd493vzrT7eGGNz_RQDN5h33uL34k84Zf-XFIybIb1ttQkKbxN5hvQd_5dlX_y4d0yT_KM2VzPr3A0fcsmlHZu3_JktQ8T932jDkv1PITN5Lgv1rTUwsHy3-BpdBMpPjZn3kWrt6TUwpuIJwGTU-yHnFelsoNQCHzwfnGZP4YdL92LyxYOt8PNTGCg27gEMxuIa0RBwD9j9pVGZtxKbGjc3Wo2UqALFneGqf_QC3sGHFr_7zyM0y4CuE2Onwf1-lzIFO6utDvVOq2umljYXy_lJZV4bSKfZeWpWNQ09UKU9JwcRjyD8ICoL-6FiKlYs8puAlM5G8Sk4AqjR-IPw41iIHOdzVbSiJs3a5cnBHhyeO7jx42M7S8htsYpmaO2bMVea40frXVlQ3e3kg	Get hash	malicious	HTMLPhisher	Browse	45.155.250.176

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.6259194190795
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	sh4.elf
File size:	80'312 bytes
MD5:	a333c2d567cd16cfd41b3ce203b0aca1
SHA1:	48d9d9813fa69f6ff6cb40cef9cd6cd172ec6ae7
SHA256:	f8531d9e117f9fdc01323176d1eff81384b685f6e4862d635469e6b7fbd2b24a
SHA512:	4fc842c2c9c2096cfac928711fc6ac1ea7878a39c57366022622ec1025571b8115d82ba4d9d29fd26da0fea9128944dcd8657ad74a105b555c2d1fd9f68d5a4a
SSDEEP:	1536:LaH6TU5P/VH6QHGoMxfbO5wRVDyQ8xwwqN9S7z:LaH64Z6QHt2fpVwyK
TLSH:	45734B13E1725EA3C4821FB915BB8E380B13A89257161E32561DDFFC0A47DCDBC58BA6
File Content Preview:	.ELF.....................@.4...........4. ...(...............@...@.d...d...............d...d.A.d.A.....8B....................A...A.................Q.td............................././"O.n........#.@........#.*@.....o&O.n...l.............................

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001c0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	60948
Section Header Size:	40
Number of Section Headers:	17
Header String Table Index:	14

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000b4	0xb4	0x30	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400100	0x100	0xd2a0	0x0	0x6	AX	0	0	32
.fini	PROGBITS	0x40d3a0	0xd3a0	0x24	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x40d3c4	0xd3c4	0xda0	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x41e164	0xe164	0x7c	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x41e1e0	0xe1e0	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x41e1e0	0xe1e0	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x41e1e8	0xe1e8	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x41e1f0	0xe1f0	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x41e1f4	0xe1f4	0x274	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x41e468	0xe468	0x14	0x4	0x3	WA	0	0	4
.bss	NOBITS	0x41e47c	0xe47c	0x3f20	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0xe47c	0x924	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0xeda0	0x71	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0xf0bc	0x2a00	0x10	0x0		16	238	4
.strtab	STRTAB	0x0	0x11abc	0x1efc	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xe164	0xe164	6.9033	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xe164	0x41e164	0x41e164	0x318	0x4238	4.5384	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .bss
TLS	0xe1e0	0x41e1e0	0x41e1e0	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40d3a0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40d3c4	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x41e164	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x41e1e0	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x41e1e0	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x41e1e8	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x41e1f0	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x41e1f4	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x41e468	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x41e47c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
.jmp_loc	.symtab	0x40788a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x40792a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x407d4a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x40a66a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x40a76a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x40a86a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x40a96a	0	NOTYPE	<unknown>	DEFAULT	2
.jmp_loc	.symtab	0x40cb8a	0	NOTYPE	<unknown>	DEFAULT	2
C.3.5229	.symtab	0x40de1c	12	OBJECT	<unknown>	DEFAULT	4
C.3.5941	.symtab	0x40e134	12	OBJECT	<unknown>	DEFAULT	4
C.3.5941	.symtab	0x40e158	12	OBJECT	<unknown>	DEFAULT	4
C.4.5303	.symtab	0x40dd8c	24	OBJECT	<unknown>	DEFAULT	4
C.4.5942	.symtab	0x40e14c	12	OBJECT	<unknown>	DEFAULT	4
C.5.5949	.symtab	0x40e140	12	OBJECT	<unknown>	DEFAULT	4
C.8.5347	.symtab	0x40de10	12	OBJECT	<unknown>	DEFAULT	4
KillerCheckFd	.symtab	0x405220	572	FUNC	<unknown>	DEFAULT	2
LOCAL_ADDR	.symtab	0x421f9c	4	OBJECT	<unknown>	DEFAULT	12
L_abort	.symtab	0x4001f0	0	NOTYPE	<unknown>	DEFAULT	2
L_fini	.symtab	0x4001e8	0	NOTYPE	<unknown>	DEFAULT	2
L_init	.symtab	0x4001e4	0	NOTYPE	<unknown>	DEFAULT	2
L_main	.symtab	0x4001e0	0	NOTYPE	<unknown>	DEFAULT	2
L_movmem_2mod4_end	.symtab	0x40d300	0	NOTYPE	<unknown>	DEFAULT	2
L_movmem_loop	.symtab	0x40d31a	0	NOTYPE	<unknown>	DEFAULT	2
L_movmem_start_even	.symtab	0x40d326	0	NOTYPE	<unknown>	DEFAULT	2
L_uClibc_main	.symtab	0x4001ec	0	NOTYPE	<unknown>	DEFAULT	2
Nodes	.symtab	0x41e4c0	4	OBJECT	<unknown>	DEFAULT	12
_Exit	.symtab	0x40b050	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x41e468	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x41e1e4	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x41e1e0	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x41e378	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x40de32	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x41e1ec	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x41e1e8	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x41e164	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x41e1dc	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x41e378	4	OBJECT	<unknown>	HIDDEN	10
__GI___close	.symtab	0x40a6a0	164	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x40a6b0	40	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x41e37c	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x407800	44	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x406ea4	180	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x40c4c8	216	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x40a6a0	164	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x406f58	280	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x40a7a0	172	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x40a9a0	172	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x40a8a0	172	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x40a7a0	172	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x40a7b0	40	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x40a9a0	172	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x40a9b0	40	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x40872c	40	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x408754	42	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x408700	44	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x40abb8	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x40ac6c	68	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x40a8a0	172	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x40a8b0	40	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x40b050	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x4095e4	184	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x40802c	116	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x409b40	24	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x4080a0	64	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x40a6a0	164	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x407460	200	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x40b8e0	72	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x40b928	60	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x40b644	668	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x408120	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x409cc4	116	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x40b964	444	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x406f58	280	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x40c2c4	516	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x40bfb8	212	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x40c4c8	216	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x40c08c	188	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x40c5a0	132	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x40bb20	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x40a294	572	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x40b0b8	96	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x40c4c8	216	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x40b1c8	52	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x40b1fc	18	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x407070	18	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x40b20e	18	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x40b220	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x40a4d0	52	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x40b23c	64	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x408194	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x40b27c	18	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x407fc0	44	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x40ca68	200	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x409990	204	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x407094	268	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40c9d0	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x4071a0	60	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x408218	64	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x40b290	60	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40d288	108	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x4079e0	860	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x40c624	188	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x40d264	36	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x407d80	150	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x40af44	64	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x40b2cc	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x40b310	60	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x40b38c	108	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x40a7a0	172	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x4075b8	176	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x40a504	116	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x4096b0	100	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x409858	108	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40c6e0	164	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x40a9a0	172	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x407708	148	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x40b5ac	152	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x407220	60	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x408298	128	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x40835c	144	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x40af84	104	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x4072dc	136	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x40842c	128	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x4084f0	144	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x407364	60	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x408580	68	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x409a5c	228	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x40cb30	20	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x408604	72	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x40864c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x408660	160	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x4073a0	116	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x40a578	224	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x4085c4	64	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x4098c4	204	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x407e20	36	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x40c784	196	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x40c848	192	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x407e44	34	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x407e44	34	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x40c908	72	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x4078c0	88	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x407f94	44	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x40c950	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x40c9a0	48	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x407e66	182	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x407f1c	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x409b58	20	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x409e40	1032	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40c9f4	116	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x407414	16	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x40b3f8	16	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x407424	60	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x40a8a0	172	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x41e1f0	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x41e1f0	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x41fa34	4	OBJECT	<unknown>	HIDDEN	12
__atexit_lock	.symtab	0x41e354	24	OBJECT	<unknown>	DEFAULT	10
__bss_start	.symtab	0x41e47c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40ac24	72	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x40a6a0	164	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x40a6b0	40	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x41e37c	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x421f98	4	OBJECT	<unknown>	HIDDEN	12
__data_start	.symtab	0x41e1f4	0	NOTYPE	<unknown>	DEFAULT	10
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x40d360	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x41e1f4	0	OBJECT	<unknown>	HIDDEN	10
__environ	.symtab	0x41fa2c	4	OBJECT	<unknown>	DEFAULT	12
__errno_location	.symtab	0x407800	44	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x41f4dc	4	OBJECT	<unknown>	HIDDEN	12
__fcntl_nocancel	.symtab	0x406ea4	180	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x40c4c8	216	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x41e1e0	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x41e1e0	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x40a294	572	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x42236c	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x422370	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x41f4e0	4	OBJECT	<unknown>	HIDDEN	12
__getdents	.symtab	0x40b118	176	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x40cf84	276	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x40b220	28	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x40a4d0	52	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x41e1e0	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x41e1e0	0	NOTYPE	<unknown>	HIDDEN	6
__init_brk	.symtab	0x40cef0	84	FUNC	<unknown>	HIDDEN	2
__init_brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__libc_accept	.symtab	0x40802c	116	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x40a6a0	164	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x408120	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x40aa60	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x40aae8	136	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x406f58	280	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x40a294	572	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x40b38c	108	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x40a7a0	172	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x40a9a0	172	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x408298	128	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x40835c	144	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x4072dc	136	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x40842c	128	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x4084f0	144	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x40ccb2	366	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x40cb30	20	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x41fa28	4	OBJECT	<unknown>	DEFAULT	12
__libc_write	.symtab	0x40a8a0	172	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x40cbc0	64	FUNC	<unknown>	HIDDEN	2
__lll_unlock_wake_private	.symtab	0x40cc00	30	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x4092e8	328	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x408780	112	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x41e278	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x421ff4	888	OBJECT	<unknown>	DEFAULT	12
__malloc_trim	.symtab	0x40924c	156	FUNC	<unknown>	DEFAULT	2
__movmemSI12_i4	.symtab	0x40d340	14	FUNC	<unknown>	HIDDEN	2
__movmem_i4_even	.symtab	0x40d308	48	FUNC	<unknown>	HIDDEN	2
__movmem_i4_odd	.symtab	0x40d30e	42	FUNC	<unknown>	HIDDEN	2
__movstrSI12_i4	.symtab	0x40d340	14	FUNC	<unknown>	HIDDEN	2
__movstr_i4_even	.symtab	0x40d308	48	FUNC	<unknown>	HIDDEN	2
__movstr_i4_odd	.symtab	0x40d30e	42	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x40a7a0	172	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x40a7b0	40	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x41fa30	4	OBJECT	<unknown>	DEFAULT	12
__preinit_array_end	.symtab	0x41e1e0	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x41e1e0	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x41e370	4	OBJECT	<unknown>	DEFAULT	10
__progname_full	.symtab	0x41e374	4	OBJECT	<unknown>	DEFAULT	10
__pthread_initialize_minimal	.symtab	0x40ce20	24	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x40ab7e	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x40ab70	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x40ab70	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x40ab70	14	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x40ab70	14	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x40a9a0	172	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x40a9b0	40	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x41fa38	4	OBJECT	<unknown>	HIDDEN	12
__sdivsi3_i4i	.symtab	0x406b50	852	FUNC	<unknown>	HIDDEN	2
__sigaddset	.symtab	0x40872c	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x408754	42	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x408700	44	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x40cb44	56	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x40b010	60	FUNC	<unknown>	DEFAULT	2
__sigsetjmp_intern	.symtab	0x40b014	0	NOTYPE	<unknown>	DEFAULT	2
__stdin	.symtab	0x41e38c	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x40d098	80	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x40d0e8	192	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x40d1a8	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40d1d8	140	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x40bf84	52	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x41e390	4	OBJECT	<unknown>	DEFAULT	10
__sys_accept	.symtab	0x407fec	64	FUNC	<unknown>	DEFAULT	2
__sys_connect	.symtab	0x4080e0	64	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x408258	64	FUNC	<unknown>	DEFAULT	2
__sys_recvfrom	.symtab	0x408318	68	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x4083ec	64	FUNC	<unknown>	DEFAULT	2
__sys_sendto	.symtab	0x4084ac	68	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x407880	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x407920	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x407d40	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x40a660	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x40a760	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x40a860	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x40a960	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x40cb80	0	NOTYPE	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x40b34c	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x40cf44	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x407298	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x40cc9c	22	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x40abb8	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x40ac6c	68	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x40acb0	660	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x41e36c	4	OBJECT	<unknown>	HIDDEN	10
__udivsi3_i4i	.symtab	0x406a80	208	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x40a8a0	172	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x40a8b0	40	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x40b494	128	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x40b408	140	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x40b514	152	FUNC	<unknown>	HIDDEN	2
_brk	.symtab	0x40ceb4	60	FUNC	<unknown>	HIDDEN	2
_dl_aux_init	.symtab	0x40ce38	32	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x40ce58	92	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x422394	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x422398	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x422388	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x422384	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x42238c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x42237c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x40cc60	60	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x422378	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x422390	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x422380	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x422374	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x41e47c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x42239c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x40b050	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40d3a0	0	FUNC	<unknown>	HIDDEN	3
_fixed_buffers	.symtab	0x41fa5c	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x4000b4	0	FUNC	<unknown>	HIDDEN	1
_pthread_cleanup_pop_restore	.symtab	0x40ab9c	28	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x40ab8c	16	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x40aff0	4	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x421fec	8	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x4001c0	30	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40bb38	732	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x40be14	116	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x41e394	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x41fa3c	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x40c148	380	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x41fa58	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_del_lock	.symtab	0x41fa48	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x41fa54	4	OBJECT	<unknown>	DEFAULT	12
_stdio_streams	.symtab	0x41e39c	204	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x40be88	252	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x41e398	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x409b6c	344	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x4095e4	184	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x40802c	116	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
anti_gdb_entry	.symtab	0x405760	20	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x409b40	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x409b40	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_get_opt_int	.symtab	0x4006c0	136	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x400620	136	FUNC	<unknown>	DEFAULT	2
attack_gre_ip	.symtab	0x404620	1336	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x400760	832	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0x400300	220	FUNC	<unknown>	DEFAULT	2
attack_method_udprape	.symtab	0x404b60	1480	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x41e4a0	32	OBJECT	<unknown>	DEFAULT	12
attack_parse	.symtab	0x4003e0	552	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x400200	228	FUNC	<unknown>	DEFAULT	2
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0x4011e0	1544	FUNC	<unknown>	DEFAULT	2
attack_tcp_bypass	.symtab	0x402dc0	864	FUNC	<unknown>	DEFAULT	2
attack_tcp_ovh	.symtab	0x401f00	1876	FUNC	<unknown>	DEFAULT	2
attack_tcp_ovhtest	.symtab	0x402660	1876	FUNC	<unknown>	DEFAULT	2
attack_tcp_socket	.symtab	0x400aa0	292	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0x401800	1792	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0x400be0	1512	FUNC	<unknown>	DEFAULT	2
attack_tcp_tcp	.symtab	0x403120	1840	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_openvpn	.symtab	0x404000	480	FUNC	<unknown>	DEFAULT	2
attack_udp_ovhhex	.symtab	0x403860	1444	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0x4043e0	564	FUNC	<unknown>	DEFAULT	2
attack_udp_pps	.symtab	0x4041e0	504	FUNC	<unknown>	DEFAULT	2
attack_udp_r6	.symtab	0x403e20	480	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x41f4d8	4	OBJECT	<unknown>	DEFAULT	12
bind	.symtab	0x4080a0	64	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x408660	160	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x408eb4	228	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x405140	52	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x405180	140	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x40782c	56	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40a6a0	164	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x407460	200	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.4720	.symtab	0x41e47c	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x408120	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0x4057a0	360	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x41fa2c	4	OBJECT	<unknown>	DEFAULT	12
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x409cc4	116	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fclose	.symtab	0x40b964	444	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x406f58	280	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x41e264	4	OBJECT	<unknown>	DEFAULT	10
fd_serv	.symtab	0x41e268	4	OBJECT	<unknown>	DEFAULT	10
fd_to_DIR	.symtab	0x407528	144	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x407668	160	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x40c2c4	516	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x40bfb8	212	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40c4c8	216	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40c08c	188	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40c5a0	132	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x40bb20	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40a294	572	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x41f4e4	1348	OBJECT	<unknown>	DEFAULT	12
frame_dummy	.symtab	0x400160	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x409430	384	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x40b0b8	96	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x40bfb8	212	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x40c4c8	216	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x40b1c8	52	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x40b1fc	18	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x407070	18	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40b20e	18	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40b220	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40a4d0	52	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x407082	16	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40b23c	64	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x408194	64	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x4081d4	68	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40b27c	18	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
index	.symtab	0x40c784	196	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x407fc0	44	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x40ca68	200	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x40cc20	64	FUNC	<unknown>	DEFAULT	2
initstate	.symtab	0x409780	120	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x409990	204	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x407094	268	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40c9d0	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x4071a0	60	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill_watchdog	.symtab	0x406a60	20	FUNC	<unknown>	DEFAULT	2
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x405460	756	FUNC	<unknown>	DEFAULT	2
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x408218	64	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.4392	.symtab	0x41e270	1	OBJECT	<unknown>	DEFAULT	10
lseek	.symtab	0x40b290	60	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40d288	108	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x405920	1908	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x4087f0	1732	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x4095b0	52	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x4079e0	860	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x40c624	188	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40d264	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x407d80	150	FUNC	<unknown>	DEFAULT	2
methods	.symtab	0x41e49c	4	OBJECT	<unknown>	DEFAULT	12
methods_len	.symtab	0x41e498	1	OBJECT	<unknown>	DEFAULT	12
mmap	.symtab	0x40af44	64	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x40b2cc	68	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x40b310	60	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x41e290	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x41e2a8	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x40b38c	108	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
nprocessors_onln	.symtab	0x409d38	264	FUNC	<unknown>	DEFAULT	2
object.4732	.symtab	0x41e480	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x40a7a0	172	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x4075b8	176	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
openvpn	.symtab	0x41e1fc	54	OBJECT	<unknown>	DEFAULT	10
p.4718	.symtab	0x41e1f8	0	OBJECT	<unknown>	DEFAULT	10
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x41f4c4	1	OBJECT	<unknown>	DEFAULT	12
prctl	.symtab	0x4071dc	68	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x41e374	4	OBJECT	<unknown>	DEFAULT	10
program_invocation_short_name	.symtab	0x41e370	4	OBJECT	<unknown>	DEFAULT	10
r6	.symtab	0x41e234	45	OBJECT	<unknown>	DEFAULT	10
raise	.symtab	0x40a504	116	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40969c	20	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alphastr	.symtab	0x406160	276	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x406100	96	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x4060a0	68	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x406280	252	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x4096b0	100	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x40dda4	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x409858	108	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x41e2d4	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x40c6e0	164	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40a9a0	172	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x407708	148	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x40b5ac	152	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x407220	60	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x408f98	692	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x408298	128	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x40835c	144	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rename	.symtab	0x40725c	60	FUNC	<unknown>	DEFAULT	2
rename.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolve_cnc_addr	.symtab	0x405780	28	FUNC	<unknown>	DEFAULT	2
resolve_func	.symtab	0x41e26c	4	OBJECT	<unknown>	DEFAULT	10
rewinddir	.symtab	0x40779c	100	FUNC	<unknown>	DEFAULT	2
rewinddir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x40c950	80	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x40af84	104	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x4072dc	136	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
self	.symtab	0x41e4c4	4096	OBJECT	<unknown>	DEFAULT	12
send	.symtab	0x40842c	128	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x4084f0	144	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp	.symtab	0x40b000	4	FUNC	<unknown>	DEFAULT	2
setsid	.symtab	0x407364	60	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x408580	68	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x409714	108	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x409a5c	228	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x40cb30	20	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x408604	72	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x40864c	20	FUNC	<unknown>	DEFAULT	2
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x408660	160	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x4073a0	116	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40a578	224	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x4085c4	64	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x4097f8	96	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x4097f8	96	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x4098c4	204	FUNC	<unknown>	DEFAULT	2
srv_addr	.symtab	0x421fa0	16	OBJECT	<unknown>	DEFAULT	12
static_dtv	.symtab	0x421a5c	512	OBJECT	<unknown>	DEFAULT	12
static_map	.symtab	0x421f64	52	OBJECT	<unknown>	DEFAULT	12
static_slotinfo	.symtab	0x421c5c	776	OBJECT	<unknown>	DEFAULT	12
stderr	.symtab	0x41e388	4	OBJECT	<unknown>	DEFAULT	10
stdin	.symtab	0x41e380	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x41e384	4	OBJECT	<unknown>	DEFAULT	10
strcat	.symtab	0x407e20	36	FUNC	<unknown>	DEFAULT	2
strcat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40c784	196	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x40c848	192	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x407e44	34	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x407e44	34	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x40c908	72	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strlen	.symtab	0x4078c0	88	FUNC	<unknown>	DEFAULT	2
strpbrk	.symtab	0x407f94	44	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x40c950	80	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x40c9a0	48	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x407e66	182	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x407f1c	120	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x409b58	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x409e40	1032	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x421fb0	56	OBJECT	<unknown>	DEFAULT	12
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x4064c0	208	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x41e274	4	OBJECT	<unknown>	DEFAULT	10
table_lock_val	.symtab	0x4063c0	120	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x406380	36	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x406440	120	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x40c9f4	116	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x407414	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x40b3f8	16	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unlink	.symtab	0x407424	60	FUNC	<unknown>	DEFAULT	2
unlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x41e2c0	20	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x40a248	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x406780	380	FUNC	<unknown>	DEFAULT	2
util_char_search	.symtab	0x406680	100	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x406700	128	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x406640	20	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x4065c0	64	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x406600	50	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x4065a0	24	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x406660	20	FUNC	<unknown>	DEFAULT	2
w	.symtab	0x41f4d4	4	OBJECT	<unknown>	DEFAULT	12
watch_pid	.symtab	0x421fe8	4	OBJECT	<unknown>	DEFAULT	12
watchdog.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
watchdog_init	.symtab	0x406900	344	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x40a8a0	172	FUNC	<unknown>	DEFAULT	2
x	.symtab	0x41f4c8	4	OBJECT	<unknown>	DEFAULT	12
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x41f4cc	4	OBJECT	<unknown>	DEFAULT	12
z	.symtab	0x41f4d0	4	OBJECT	<unknown>	DEFAULT	12

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 13, 2024 10:50:29.514470100 CET	33288	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:29.634414911 CET	1337	33288	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:29.634486914 CET	33288	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:29.634788036 CET	33288	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:29.754585981 CET	1337	33288	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:29.754730940 CET	33288	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:29.874596119 CET	1337	33288	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:30.893783092 CET	1337	33288	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:30.893877029 CET	33288	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:30.894126892 CET	33288	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:30.894994020 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:31.014731884 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:31.014801025 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:31.014838934 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:31.134551048 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:31.134613037 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:31.254407883 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:32.284866095 CET	1337	33290	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:32.284918070 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:32.284974098 CET	33290	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:32.295043945 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:32.415056944 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:32.415128946 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:32.415167093 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:32.535062075 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:32.535123110 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:32.654942036 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:33.674269915 CET	1337	33292	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:33.674355984 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:33.674407005 CET	33292	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:33.728821993 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:33.848630905 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:33.848697901 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:33.848784924 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:33.968494892 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:33.968563080 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:34.088407040 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:35.107469082 CET	1337	33294	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:35.107575893 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:35.107672930 CET	33294	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:35.108122110 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:35.228185892 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:35.228312016 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:35.228363037 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:35.348330021 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:35.348419905 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:35.468270063 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:36.488915920 CET	1337	33296	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:36.489038944 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:36.489135027 CET	33296	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:36.489593983 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:36.609419107 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:36.609522104 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:36.609571934 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:36.729404926 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:36.729537964 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:36.849319935 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:37.869193077 CET	1337	33298	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:37.869330883 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:37.869383097 CET	33298	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:37.869745970 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:37.989491940 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:37.989581108 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:37.989643097 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:38.109672070 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:38.109750032 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:38.229646921 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:38.253269911 CET	48202	443	192.168.2.13	185.125.190.26
Dec 13, 2024 10:50:39.248378038 CET	1337	33300	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:39.248461962 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:39.248538017 CET	33300	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:39.248915911 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:39.368782043 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:39.368880987 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:39.368911028 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:39.488759041 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:39.488869905 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:39.608766079 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:40.628870010 CET	1337	33302	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:40.628974915 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:40.629072905 CET	33302	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:40.629686117 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:40.749742985 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:40.749871016 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:40.749912977 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:40.869834900 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:40.869932890 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:40.989792109 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:42.010021925 CET	1337	33304	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:42.010103941 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:42.010164022 CET	33304	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:42.010664940 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:42.130373955 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:42.130455971 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:42.130551100 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:42.250431061 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:42.250510931 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:42.370265007 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:43.400672913 CET	1337	33306	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:43.400753975 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:43.400875092 CET	33306	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:43.401328087 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:43.520987988 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:43.521094084 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:43.521133900 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:43.640975952 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:43.641041994 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:43.760896921 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:44.780417919 CET	1337	33308	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:44.780508995 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:44.780563116 CET	33308	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:44.781039000 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:44.900856972 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:44.900934935 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:44.901047945 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:45.021845102 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:45.021914005 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:45.141830921 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:46.163162947 CET	1337	33310	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:46.163264990 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:46.163357973 CET	33310	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:46.163753986 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:46.283538103 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:46.283653021 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:46.283751965 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:46.403805017 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:46.404537916 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:46.524321079 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:47.543658972 CET	1337	33312	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:47.543740034 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:47.543797016 CET	33312	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:47.544127941 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:47.664104939 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:47.664220095 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:47.664247990 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:47.784181118 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:47.784279108 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:47.904474974 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:48.924992085 CET	1337	33314	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:48.925151110 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:48.925218105 CET	33314	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:48.926000118 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:49.045991898 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:49.046148062 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:49.046272993 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:49.166008949 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:49.166157007 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:49.332741976 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:50.306241035 CET	1337	33316	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:50.306521893 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:50.306521893 CET	33316	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:50.306989908 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:50.427400112 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:50.427743912 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:50.427907944 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:50.547897100 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:50.550438881 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:50.671406031 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:51.688091040 CET	1337	33318	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:51.688311100 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:51.688311100 CET	33318	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:51.689104080 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:51.809076071 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:51.809252024 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:51.809417009 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:51.929229021 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:51.929425955 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:52.049566031 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:53.069369078 CET	1337	33320	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:53.069516897 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:53.069633961 CET	33320	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:53.070131063 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:53.189846992 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:53.190237045 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:53.190237045 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:53.310132027 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:53.310386896 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:53.430440903 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:54.450100899 CET	1337	33322	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:54.450515032 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:54.450586081 CET	33322	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:54.451181889 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:54.571548939 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:54.571736097 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:54.571885109 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:54.692336082 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:54.692401886 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:54.812845945 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:55.833772898 CET	1337	33324	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:55.834213018 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:55.834213018 CET	33324	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:55.835361004 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:55.955178022 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:55.957284927 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:55.957284927 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:56.078421116 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:56.078825951 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:56.198884010 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:57.217967987 CET	1337	33326	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:57.218067884 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:57.218108892 CET	33326	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:57.218573093 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:57.338498116 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:57.338669062 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:57.338696003 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:57.458530903 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:57.458761930 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:57.578824997 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:58.598953009 CET	1337	33328	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:58.599266052 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:58.599308968 CET	33328	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:58.599986076 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:58.719729900 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:58.719953060 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:58.720006943 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:58.839976072 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:58.840415001 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:58.960438013 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:59.980417013 CET	1337	33330	45.90.96.167	192.168.2.13
Dec 13, 2024 10:50:59.980793953 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:59.980844021 CET	33330	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:50:59.981679916 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:00.102123976 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:00.102437019 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:00.102519035 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:00.222706079 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:00.223007917 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:00.343094110 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:01.363665104 CET	1337	33332	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:01.364048958 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:01.364048958 CET	33332	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:01.364814043 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:01.484766960 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:01.485064030 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:01.485064030 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:01.605084896 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:01.605247974 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:01.725100040 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:02.745498896 CET	1337	33334	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:02.745683908 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:02.745793104 CET	33334	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:02.746699095 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:02.866489887 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:02.866673946 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:02.866735935 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:02.986670971 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:02.986828089 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:03.106965065 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:04.126410007 CET	1337	33336	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:04.126702070 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:04.126702070 CET	33336	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:04.127408981 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:04.247184992 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:04.247478008 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:04.247478008 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:04.368069887 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:04.368340969 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:04.488423109 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:05.507292986 CET	1337	33338	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:05.507736921 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:05.507736921 CET	33338	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:05.508483887 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:05.628422022 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:05.628715038 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:05.628715038 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:05.748735905 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:05.748980999 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:05.868933916 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:06.887926102 CET	1337	33340	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:06.888269901 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:06.888271093 CET	33340	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:06.889436007 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:07.009792089 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:07.010088921 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:07.010288000 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:07.131078959 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:07.131433010 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:07.251318932 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:08.290389061 CET	1337	33342	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:08.290565968 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:08.290565968 CET	33342	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:08.291091919 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:08.410909891 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:08.411233902 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:08.411295891 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:08.531219959 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:08.531449080 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:08.651464939 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:09.672291040 CET	1337	33344	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:09.672456026 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:09.672698975 CET	33344	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:09.673636913 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:09.793451071 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:09.793615103 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:09.793709993 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:09.913613081 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:09.913784027 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:09.997315884 CET	48202	443	192.168.2.13	185.125.190.26
Dec 13, 2024 10:51:10.033657074 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:11.053028107 CET	1337	33346	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:11.053211927 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:11.053276062 CET	33346	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:11.054467916 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:11.174360991 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:11.174561977 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:11.174634933 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:11.294795036 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:11.295082092 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:11.415144920 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:12.443450928 CET	1337	33348	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:12.443767071 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:12.443767071 CET	33348	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:12.444236040 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:12.564101934 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:12.564407110 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:12.564407110 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:12.684493065 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:12.684873104 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:12.805027962 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:13.826379061 CET	1337	33350	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:13.826838017 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:13.826838017 CET	33350	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:13.827657938 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:13.947488070 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:13.947654009 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:13.947714090 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:14.067668915 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:14.067909956 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:14.188080072 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:15.207604885 CET	1337	33352	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:15.207914114 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:15.207974911 CET	33352	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:15.208720922 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:15.328567028 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:15.328784943 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:15.328879118 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:15.448787928 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:15.448945045 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:15.568893909 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:16.589703083 CET	1337	33354	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:16.589904070 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:16.589987040 CET	33354	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:16.591478109 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:16.711505890 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:16.711801052 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:16.711802006 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:16.832017899 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:16.832144976 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:16.953154087 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:17.972652912 CET	1337	33356	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:17.973073959 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:17.973073959 CET	33356	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:17.973865986 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:18.093748093 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:18.093981981 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:18.093982935 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:18.214093924 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:18.214334965 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:18.334413052 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:19.354423046 CET	1337	33358	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:19.354672909 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:19.354672909 CET	33358	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:19.355518103 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:19.476309061 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:19.476526976 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:19.476526976 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:19.596766949 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:19.596972942 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:19.717710018 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:20.736517906 CET	1337	33360	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:20.736680984 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:20.736758947 CET	33360	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:20.737557888 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:20.857645035 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:20.857867956 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:20.857969046 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:20.978204012 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:20.978492022 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:21.099143982 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:22.119447947 CET	1337	33362	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:22.119889975 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:22.119890928 CET	33362	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:22.120693922 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:22.240550041 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:22.240752935 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:22.240791082 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:22.360758066 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:22.360959053 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:22.480910063 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:23.501378059 CET	1337	33364	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:23.501589060 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:23.501651049 CET	33364	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:23.502661943 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:23.622502089 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:23.622675896 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:23.622675896 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:23.742578983 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:23.742852926 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:23.862771034 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:24.883292913 CET	1337	33366	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:24.883577108 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:24.883622885 CET	33366	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:24.884378910 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:25.004220963 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:25.004575014 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:25.004621983 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:25.125032902 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:25.125376940 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:25.245379925 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:26.264607906 CET	1337	33368	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:26.265058994 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:26.265151978 CET	33368	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:26.265995026 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:26.386111021 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:26.386320114 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:26.386423111 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:26.506613970 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:26.506808996 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:26.626929998 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:27.645591021 CET	1337	33370	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:27.645788908 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:27.645790100 CET	33370	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:27.646586895 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:27.766495943 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:27.766856909 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:27.766926050 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:27.886756897 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:27.886934042 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:28.006819010 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:29.025876045 CET	1337	33372	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:29.026133060 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:29.026133060 CET	33372	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:29.027085066 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:29.147748947 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:29.148055077 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:29.148055077 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:29.268161058 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:29.268317938 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:29.388360977 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:30.408221960 CET	1337	33374	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:30.408627987 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:30.408627987 CET	33374	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:30.409641981 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:30.529520035 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:30.529854059 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:30.530035973 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:30.649811029 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:30.650121927 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:30.770140886 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:31.791744947 CET	1337	33376	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:31.792073965 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:31.792150021 CET	33376	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:31.792937994 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:31.912842035 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:31.913062096 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:31.913173914 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:32.033081055 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:32.033248901 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:32.153132915 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:33.183207035 CET	1337	33378	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:33.183619976 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:33.183619976 CET	33378	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:33.184973955 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:33.304846048 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:33.305047989 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:33.305123091 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:33.425154924 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:33.425313950 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:33.545334101 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:34.654620886 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:34.655209064 CET	33380	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:34.775165081 CET	1337	33380	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:35.658216953 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:35.778322935 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:35.778554916 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:35.778554916 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:35.898490906 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:35.898642063 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:36.018578053 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:37.039017916 CET	1337	33382	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:37.039189100 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:37.039273977 CET	33382	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:37.040050030 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:37.159851074 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:37.159992933 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:37.160080910 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:37.280064106 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:37.280191898 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:37.400070906 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:38.420274973 CET	1337	33384	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:38.420475960 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:38.420675993 CET	33384	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:38.421458960 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:38.541388035 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:38.541697979 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:38.541697979 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:38.661693096 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:38.661917925 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:38.782007933 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:39.804178953 CET	1337	33386	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:39.804323912 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:39.804361105 CET	33386	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:39.804792881 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:39.924566031 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:39.924948931 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:39.924948931 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:40.044872046 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:40.045157909 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:40.165100098 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:41.185446024 CET	1337	33388	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:41.185745955 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:41.185853004 CET	33388	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:41.186631918 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:41.306529999 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:41.306649923 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:41.306756973 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:41.426639080 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:41.426755905 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:41.546595097 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:42.566915989 CET	1337	33390	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:42.567117929 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:42.567183018 CET	33390	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:42.567914963 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:42.687644958 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:42.687768936 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:42.687810898 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:42.808329105 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:42.808438063 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:42.928978920 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:43.948237896 CET	1337	33392	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:43.948539019 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:43.948575974 CET	33392	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:43.949352026 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:44.069142103 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:44.069479942 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:44.069479942 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:44.189414978 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:44.189759016 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:44.309581995 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:45.329790115 CET	1337	33394	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:45.329986095 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:45.329986095 CET	33394	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:45.330562115 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:45.450401068 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:45.450690985 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:45.450691938 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:45.570915937 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:45.571182966 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:45.691334963 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:46.711925983 CET	1337	33396	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:46.712135077 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:46.712197065 CET	33396	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:46.713057041 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:46.833143950 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:46.833359003 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:46.833431959 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:46.953485012 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:46.953783035 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:47.073792934 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:48.093539953 CET	1337	33398	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:48.093816042 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:48.093816042 CET	33398	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:48.094839096 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:48.214941978 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:48.215358019 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:48.215358973 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:48.335365057 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:48.335562944 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:48.455986977 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:49.779465914 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:49.779727936 CET	33400	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:49.899699926 CET	1337	33400	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:50.781799078 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:50.901839972 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:50.901968002 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:50.902020931 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:51.021800995 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:51.021934986 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:51.141927004 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:52.161622047 CET	1337	33402	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:52.161916018 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:52.162034988 CET	33402	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:52.162936926 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:52.282856941 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:52.283020973 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:52.283288956 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:52.403116941 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:52.403265953 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:52.523570061 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:53.543534040 CET	1337	33404	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:53.543714046 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:53.543756008 CET	33404	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:53.544686079 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:53.665347099 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:53.665664911 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:53.665760040 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:53.786690950 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:53.786875010 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:53.907454967 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:54.928399086 CET	1337	33406	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:54.928600073 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:54.928734064 CET	33406	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:54.929573059 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:55.049360991 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:55.049499989 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:55.049607038 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:55.169845104 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:55.170039892 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:55.290066004 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:56.309597969 CET	1337	33408	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:56.309772015 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:56.309772015 CET	33408	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:56.310298920 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:56.430574894 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:56.430732012 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:56.430833101 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:56.550828934 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:56.550987005 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:56.671031952 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:57.691200018 CET	1337	33410	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:57.691468954 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:57.691517115 CET	33410	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:57.692059994 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:57.811856031 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:57.812027931 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:57.812124014 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:57.932164907 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:57.932382107 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:58.052354097 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:59.073023081 CET	1337	33412	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:59.073250055 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:59.073251009 CET	33412	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:59.073879004 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:59.193634033 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:59.193773031 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:59.193846941 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:59.313802958 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 10:51:59.313997030 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:51:59.434170008 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:00.454195023 CET	1337	33414	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:00.454648018 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:00.454648018 CET	33414	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:00.455261946 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:00.575329065 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:00.575506926 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:00.575506926 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:00.695732117 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:00.695955992 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:00.816406965 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:01.836060047 CET	1337	33416	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:01.836338997 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:01.836416960 CET	33416	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:01.837423086 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:01.957365990 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:01.957566023 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:01.957643986 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:02.077785969 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:02.077940941 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:02.198225021 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:03.218597889 CET	1337	33418	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:03.218841076 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:03.218938112 CET	33418	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:03.219959021 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:03.339770079 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:03.339916945 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:03.339916945 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:03.460182905 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:03.460369110 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:03.580285072 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:04.599250078 CET	1337	33420	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:04.599466085 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:04.599533081 CET	33420	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:04.600512981 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:04.722140074 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:04.722342968 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:04.722485065 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:04.842355967 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:04.842529058 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:04.963066101 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:05.982193947 CET	1337	33422	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:05.982454062 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:05.982511997 CET	33422	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:05.983599901 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:06.103466034 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:06.103635073 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:06.103768110 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:06.223752022 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:06.223892927 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:06.343862057 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:07.363981009 CET	1337	33424	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:07.364200115 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:07.364295959 CET	33424	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:07.365058899 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:07.484976053 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:07.485328913 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:07.485438108 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:07.605319977 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:07.605485916 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:07.725616932 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:08.755556107 CET	1337	33426	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:08.755717039 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:08.755759001 CET	33426	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:08.756774902 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:08.877064943 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:08.877311945 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:08.877311945 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:08.997231007 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:08.997391939 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:09.117477894 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:10.136890888 CET	1337	33428	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:10.137083054 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:10.137171984 CET	33428	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:10.137931108 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:10.259428024 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:10.259649038 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:10.259756088 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:10.379595041 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:10.379806995 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:10.499831915 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:11.526586056 CET	1337	33430	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:11.526758909 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:11.526758909 CET	33430	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:11.527793884 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:11.647687912 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:11.648020029 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:11.648080111 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:11.768774033 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:11.768976927 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:11.888894081 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:12.908792973 CET	1337	33432	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:12.908967972 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:12.909001112 CET	33432	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:12.909554958 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:13.029347897 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:13.029510021 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:13.029546976 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:13.149698973 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:13.149857044 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:13.269805908 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:14.290268898 CET	1337	33434	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:14.290457964 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:14.290489912 CET	33434	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:14.291373968 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:14.411429882 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:14.411689043 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:14.411689043 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:14.725538015 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:14.725722075 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:14.845773935 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:15.865526915 CET	1337	33436	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:15.865854979 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:15.865854979 CET	33436	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:15.866616011 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:15.986480951 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:15.986763000 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:15.986763000 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:16.107014894 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:16.107369900 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:16.227468014 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:17.256371975 CET	1337	33438	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:17.256866932 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:17.256867886 CET	33438	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:17.257616043 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:17.377690077 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:17.378155947 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:17.378155947 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:17.498507023 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:17.498795986 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:17.619020939 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:18.638087034 CET	1337	33440	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:18.638334990 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:18.638376951 CET	33440	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:18.638900042 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:18.758739948 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:18.758878946 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:18.758924961 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:18.878856897 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:18.879050016 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:18.999176979 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:20.018989086 CET	1337	33442	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:20.019200087 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:20.019244909 CET	33442	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:20.020040989 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:20.139874935 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:20.140109062 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:20.140109062 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:20.260179043 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:20.260307074 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:20.380184889 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:21.400574923 CET	1337	33444	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:21.400736094 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:21.400793076 CET	33444	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:21.401587963 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:21.521653891 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:21.521795988 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:21.521868944 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:21.642076015 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:21.642244101 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:21.762269974 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:22.781992912 CET	1337	33446	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:22.782150030 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:22.782203913 CET	33446	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:22.782998085 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:22.903604031 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:22.904047012 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:22.904047966 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:23.023973942 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:23.024151087 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:23.143984079 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:24.164036989 CET	1337	33448	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:24.164176941 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:24.164227962 CET	33448	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:24.164736986 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:24.284487009 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:24.284632921 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:24.284694910 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:24.404611111 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:24.404809952 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:24.524760962 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:25.543596029 CET	1337	33450	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:25.543803930 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:25.543803930 CET	33450	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:25.544617891 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:25.664791107 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:25.665043116 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:25.665123940 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:25.785072088 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:25.785198927 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:25.905013084 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:26.926156998 CET	1337	33452	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:26.926456928 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:26.926508904 CET	33452	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:26.927330017 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:27.047096968 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:27.047266960 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:27.047266960 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:27.168554068 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:27.168730974 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:27.288748026 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:28.307310104 CET	1337	33454	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:28.307518959 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:28.307565928 CET	33454	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:28.308559895 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:28.428663969 CET	1337	33456	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:28.428930998 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:28.429001093 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:28.549031973 CET	1337	33456	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:28.549241066 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:28.669286013 CET	1337	33456	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:29.698070049 CET	1337	33456	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:29.698401928 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:29.698456049 CET	33456	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:29.699377060 CET	33458	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:29.819391966 CET	1337	33458	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:29.819556952 CET	33458	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:29.819610119 CET	33458	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:29.939518929 CET	1337	33458	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:29.939690113 CET	33458	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:30.059755087 CET	1337	33458	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:31.169709921 CET	1337	33458	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:31.170003891 CET	33458	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:31.289906979 CET	1337	33458	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:32.172550917 CET	33460	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:32.292870045 CET	1337	33460	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:32.293198109 CET	33460	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:32.293198109 CET	33460	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:32.413096905 CET	1337	33460	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:32.413239956 CET	33460	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:32.533103943 CET	1337	33460	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:33.553692102 CET	1337	33460	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:33.553891897 CET	33460	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:33.553953886 CET	33460	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:33.554501057 CET	33462	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:33.674459934 CET	1337	33462	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:33.674621105 CET	33462	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:33.674664021 CET	33462	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:33.794586897 CET	1337	33462	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:33.794728994 CET	33462	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:33.914829969 CET	1337	33462	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:34.934541941 CET	1337	33462	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:34.934762001 CET	33462	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:34.934817076 CET	33462	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:34.935642004 CET	33464	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:35.055504084 CET	1337	33464	45.90.96.167	192.168.2.13
Dec 13, 2024 10:52:35.055654049 CET	33464	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:35.055654049 CET	33464	1337	192.168.2.13	45.90.96.167
Dec 13, 2024 10:52:35.175595999 CET	1337	33464	45.90.96.167	192.168.2.13

System Behavior

Analysis Process: sh4.elf PID: 5430, Parent PID: 5353

General

Start time (UTC):	09:50:28
Start date (UTC):	13/12/2024
Path:	/tmp/sh4.elf
Arguments:	/tmp/sh4.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Chronological Activities

Analysis Process: sh4.elf PID: 5432, Parent PID: 5430

General

Start time (UTC):	09:50:28
Start date (UTC):	13/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Chronological Activities

Analysis Process: sh4.elf PID: 5434, Parent PID: 5432

General

Start time (UTC):	09:50:28
Start date (UTC):	13/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Chronological Activities

Analysis Process: sh4.elf PID: 5436, Parent PID: 5432

General

Start time (UTC):	09:50:28
Start date (UTC):	13/12/2024
Path:	/tmp/sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report sh4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: sh4.elf PID: 5430, Parent PID: 5353

General

Chronological Activities

Analysis Process: sh4.elf PID: 5432, Parent PID: 5430

General

Chronological Activities

Analysis Process: sh4.elf PID: 5434, Parent PID: 5432

General

Chronological Activities

Analysis Process: sh4.elf PID: 5436, Parent PID: 5432

General

Chronological Activities

Linux Analysis Report
sh4.elf