Edit tour

Linux Analysis Report
hidakibest.arm7.elf

Overview

General Information

Sample name:	hidakibest.arm7.elf
Analysis ID:	1579486
MD5:	52d0ae13c857d4eb4234dc595722dccc
SHA1:	8e38ea859ff096811f869980013931836a4b5be5
SHA256:	504a1d38ce1c64c802409879813a4707e35d5e0123e077e197ff6ab14627bc1a
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579486
Start date and time:	2024-12-22 15:56:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.arm7.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: 185.216.71.152:4258
VT rate limit hit for: http://fast.no/support/crawler.asp)
VT rate limit hit for: http://feedback.redkolibri.com/
VT rate limit hit for: http://www.billybobbot.com/crawler/)

Runtime Messages

Command:	/tmp/hidakibest.arm7.elf
PID:	5428
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.arm7.elf (PID: 5428, Parent: 5355, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/hidakibest.arm7.elf

hidakibest.arm7.elf New Fork (PID: 5430, Parent: 5428)

hidakibest.arm7.elf New Fork (PID: 5432, Parent: 5430)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.arm7.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.arm7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.arm7.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1457c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1461c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1466c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.arm7.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14518:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5428.1.00007f7528017000.00007f752802e000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5428.1.00007f7528017000.00007f752802e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5428.1.00007f7528017000.00007f752802e000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1457c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1461c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1466c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5428.1.00007f7528017000.00007f752802e000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14518:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5430.1.00007f7528017000.00007f752802e000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5430.1.00007f7528017000.00007f752802e000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5430.1.00007f7528017000.00007f752802e000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1457c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1461c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14630:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14644:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14658:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1466c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14680:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14694:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5430.1.00007f7528017000.00007f752802e000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14518:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm7.elf PID: 5428	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm7.elf PID: 5428	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x56b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x56cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x56e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x56f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5709:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x571d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5731:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5745:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5759:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x576d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5781:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5795:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x580d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5821:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5835:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5849:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm7.elf PID: 5428	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x566c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x5ade:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm7.elf PID: 5430	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm7.elf PID: 5430	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b81f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b833:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b847:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b85b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b86f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b883:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b897:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8d3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b90f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b923:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b937:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b94b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b95f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b973:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b987:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b99b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm7.elf PID: 5430	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1b7d2:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x1bc44:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.arm7.elf

Avira: detected

Found malware configuration

Source: hidakibest.arm7.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.216.71.152:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.arm7.elf	Virustotal: Detection: 65%			Perma Link
Source: hidakibest.arm7.elf	ReversingLabs: Detection: 68%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.arm7.elf (PID: 5428)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:40062 -> 185.216.71.152:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: hidakibest.arm7.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.arm7.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.arm7.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.arm7.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.arm7.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm7.elf PID: 5428, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm7.elf PID: 5428, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm7.elf PID: 5430, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm7.elf PID: 5430, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.arm7.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: hidakibest.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.arm7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm7.elf PID: 5428, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm7.elf PID: 5428, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm7.elf PID: 5430, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm7.elf PID: 5430, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: /tmp/hidakibest.arm7.elf (PID: 5428)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.arm7.elf, 5428.1.0000557c32b88000.0000557c32cb6000.rw-.sdmp, hidakibest.arm7.elf, 5430.1.0000557c32b88000.0000557c32cb6000.rw-.sdmp	Binary or memory string: 2\|U!/etc/qemu-binfmt/arm
Source: hidakibest.arm7.elf, 5428.1.0000557c32b88000.0000557c32cb6000.rw-.sdmp, hidakibest.arm7.elf, 5430.1.0000557c32b88000.0000557c32cb6000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: hidakibest.arm7.elf, 5428.1.00007ffde9d70000.00007ffde9d91000.rw-.sdmp, hidakibest.arm7.elf, 5430.1.00007ffde9d70000.00007ffde9d91000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: hidakibest.arm7.elf, 5428.1.00007ffde9d70000.00007ffde9d91000.rw-.sdmp, hidakibest.arm7.elf, 5430.1.00007ffde9d70000.00007ffde9d91000.rw-.sdmp	Binary or memory string: `x86_64/usr/bin/qemu-arm/tmp/hidakibest.arm7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.arm7.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm7.elf PID: 5428, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm7.elf PID: 5430, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm7.elf, type: SAMPLE
Source: Yara match	File source: 5428.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5430.1.00007f7528017000.00007f752802e000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm7.elf PID: 5428, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm7.elf PID: 5430, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.216.71.152:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.arm7.elf	65%	Virustotal		Browse
hidakibest.arm7.elf	68%	ReversingLabs	Linux.Trojan.Gafgyt
hidakibest.arm7.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.216.71.152:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.arm7.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.arm7.elf	false	unknown
http://fast.no/support/crawler.asp)	hidakibest.arm7.elf	false	unknown
http://feedback.redkolibri.com/	hidakibest.arm7.elf	false	unknown
http://www.baidu.com/search/spider.htm)	hidakibest.arm7.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.216.71.152	unknown	Germany		43659	CLOUDCOMPUTINGDE	true

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	Space.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	most-mpsl.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	m68k.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	vlxx.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDCOMPUTINGDE	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	85.31.47.165
	6G4au3vWsI.lnk	Get hash	malicious	Unknown	Browse	80.76.51.231
	tegga.hta	Get hash	malicious	Xmrig	Browse	185.216.68.189
	KzHndnydSG.dll	Get hash	malicious	CobaltStrike	Browse	185.216.71.202
	bot.sh4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	80.76.51.45
	bot.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.02225816945831
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.arm7.elf
File size:	154'520 bytes
MD5:	52d0ae13c857d4eb4234dc595722dccc
SHA1:	8e38ea859ff096811f869980013931836a4b5be5
SHA256:	504a1d38ce1c64c802409879813a4707e35d5e0123e077e197ff6ab14627bc1a
SHA512:	dc8cbeb911cf55effdb0fd7fbc71fd388374bbc8b5e9ac7f8c616292934e61d8f696c48e76b514cb77ca34fed00c0b47a734fb1073c2579d09d96f88224a6665
SSDEEP:	3072:Tdbmn8aAEHqgSkano1DTAD5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTW5hWTGHIM/9ldmpwTsLS
TLSH:	87E34C09F7408B57C0D22776B6DF524633239BA9A3DB33069524AFF43FC27A94E22951
File Content Preview:	.ELF..............(.........4...........4. ...(........plh..l...l... ... ............................i...i...............i...i...i.......t...............i...i...i..................Q.td..................................-...L..................G.F.G.F.G.F.G.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81d0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	120272
Section Header Size:	40
Number of Section Headers:	29
Header String Table Index:	26

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x127f4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1a8e4	0x128e4	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1a8f8	0x128f8	0x3f5c	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1e854	0x16854	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1e86c	0x1686c	0x120	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x2698c	0x1698c	0x4	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x26990	0x16990	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x26990	0x16990	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x26994	0x16994	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x26998	0x16998	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2699c	0x1699c	0xb0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x26a4c	0x16a4c	0x314	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x26d60	0x16d60	0x7128	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x16d60	0xbe6	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x17948	0x140	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x17a88	0x213	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x17c9b	0x2043	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x19cde	0x6e2	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x1a3c0	0xe76	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x1b238	0x2b8	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x1b4f0	0x8ca	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x1bdba	0x118f	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x1cf49	0x558	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x1d4a1	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1d4b7	0x117	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1da58	0x54a0	0x10	0x0		28	753	4
.strtab	STRTAB	0x0	0x22ef8	0x2ca0	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x1686c	0x1e86c	0x1e86c	0x120	0x120	4.5038	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x1698c	0x1698c	6.2430	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1698c	0x2698c	0x2698c	0x3d4	0x74fc	4.3481	0x6	RW	0x8000	.eh_frame .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x16990	0x26990	0x26990	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1a8e4	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1a8f8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1e854	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1e86c	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2698c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x26990	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x26990	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x26994	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x26998	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2699c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x26a4c	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x26d60	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1a8e4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1a8f0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x812c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x820c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x848c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8824	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x953c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9958	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ee4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa0bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb800	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc1c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc2d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc2e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc62c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc734	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc764	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc808	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc838	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc858	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc88c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc95c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd1c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd20c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd3bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd9b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdaa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdab0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdbd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdcc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdce4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdeac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdfd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe03c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe06c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe174	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe19c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe1b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe26c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe2e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe324	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe36c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe3b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe51c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe624	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf040	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf87c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf920	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10090	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1105c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11064	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1117c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11184	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x113d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11428	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1186c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1199c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11aa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11f1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12090	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1217c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12520	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12574	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12598	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12654	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13204	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13234	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1460c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x146b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14dfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14edc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15034	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1512c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15540	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15978	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ddc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1609c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x160c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16280	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1647c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1658c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x165b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1671c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16a14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16b64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17708	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1775c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17cf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18038	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1813c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18254	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x182e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x184b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18514	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1875c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18808	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1894c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19204	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19398	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x193e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1943c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19480	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x196a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x197f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1980c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1986c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19990	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a03c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a044	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a04c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a054	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a8b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8164	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26994	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26990	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x26a50	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x8200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26a54	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x82dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x841c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8488	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8810	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x912c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9950	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bfc0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9ee0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa0b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaa38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xae60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb7d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc1a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xc378	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc4d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc510	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc5e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc628	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc66c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc6ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc730	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc7d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc800	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b54	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1d164	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x26b5c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1d464	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xc854	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc954	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd104	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d78c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xd3b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd404	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd950	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b64	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1d794	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xda70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdcb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdda8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdfc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d818	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xe034	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe064	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe16c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe218	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe264	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe2d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe31c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe364	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe45c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe4cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe514	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe618	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf01c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b68	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xf4c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf518	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf634	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b80	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xf6e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf7a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf860	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf904	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26b98	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26c30	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0xf9ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfb70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfc60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e384	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xfe70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xff24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26c44	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1006c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10688	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10cf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11000	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11090	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1130c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x113c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11420	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11474	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26c5c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x118e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11910	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11990	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ad4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11ba8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26c68	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1e416	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11e30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11f14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11fd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12088	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e718	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12168	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12518	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12650	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12974	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12fb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1310c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26c74	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x26c70	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x13200	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e778	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x14118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x144c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14604	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14df4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15030	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15124	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x153ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15524	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x158e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15960	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15c6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26d58	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x15d1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d94	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15dd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1627c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x163b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1654c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16658	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16b60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16dec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x176c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26d5c	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x17754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x177ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17bc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26d5e	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x1e834	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17c90	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18138	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x181a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18210	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18250	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x182c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1853c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1874c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x19684	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a02c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	23
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	21
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	23
$t	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
C.11.5548	.symtab	0x1e3f4	12	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x1e718	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x1e400	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x1d764	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x1e754	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x1e730	12	OBJECT	<unknown>	DEFAULT	4
C.70.5338	.symtab	0x1bfc0	104	OBJECT	<unknown>	DEFAULT	4
C.77.5437	.symtab	0x1cc54	1128	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x1e748	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x1e73c	12	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xdb98	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xdbb4	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x26d98	16384	OBJECT	<unknown>	DEFAULT	14
Randhex	.symtab	0x9ee4	472	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x9a84	448	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x9d94	336	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0xc474	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2699c	0	OBJECT	<unknown>	HIDDEN	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x19438	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1943c	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1a0ec	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x19430	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x19474	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x1a110	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x1a8b0	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x19468	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x1a080	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x1a0a4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x1a0c8	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x19398	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x199b0	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x193e4	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x26b54	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1d164	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x26c68	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1e416	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x26b5c	4	OBJECT	<unknown>	DEFAULT	13
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1d464	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x2698c	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x2698c	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x26b54	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_tolower	.symtab	0x26c68	4	OBJECT	<unknown>	HIDDEN	13
__GI___C_ctype_toupper	.symtab	0x26b5c	4	OBJECT	<unknown>	HIDDEN	13
__GI___close	.symtab	0x10f90	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x10f74	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x26b58	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_tolower	.symtab	0x26c6c	4	OBJECT	<unknown>	HIDDEN	13
__GI___ctype_toupper	.symtab	0x26b60	4	OBJECT	<unknown>	HIDDEN	13
__GI___errno_location	.symtab	0xc838	32	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xc2e8	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x144e0	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0xdeac	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x10f90	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xc380	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x11020	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x11140	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x110b0	100	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x11020	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x11004	24	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x11140	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x11124	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x10b7c	392	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0xe648	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0xe66c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0xe624	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x11358	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x11428	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x110b0	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x11094	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0xdec4	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xc474	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0xf520	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0xfc6c	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x15cd0	88	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xc4dc	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x10f90	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x11d3c	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x124a4	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x124d8	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1217c	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xe26c	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0xfe80	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x12654	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xc380	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x14134	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x13c24	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x144e0	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x13d68	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1460c	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12984	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x106b4	972	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0xd980	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1609c	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x160c0	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x15d34	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0xd9b8	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x144e0	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x11a10	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x11a3c	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x11a50	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x11a64	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xe19c	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0xe1b8	112	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x1512c	724	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x17cf4	836	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x18078	132	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x11a78	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x10d04	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x11aa0	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xe2e0	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x11ad8	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x11b18	20	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0xe07c	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0xe06c	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0xe174	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x15034	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xe158	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xe0cc	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x16b64	668	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x167ec	552	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0xfa88	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xc514	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x14f94	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0xc7e0	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xc5f4	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x18254	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x14b40	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xdaa0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x182d0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1658c	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x14c30	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xdab0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x1186c	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x15d98	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x11b2c	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x11bac	96	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0xe0ac	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0xe09c	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x11020	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x11f1c	196	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1813c	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x10d4c	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0xf660	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0xf920	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x165b0	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x11140	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x12090	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xe3b0	112	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x11c0c	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xc670	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xe464	112	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xc6f4	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xe4d4	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0xfb80	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x11914	136	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xe560	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11c78	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x10e3c	300	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xe51c	68	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0xc858	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0xf9b0	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x181b0	100	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0xdfd0	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xdbd0	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x14d10	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xdb50	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xdb50	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xdcc0	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x14dfc	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x182e0	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xdb70	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x16660	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0xdce4	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x14f54	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x14e40	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x14e90	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xddb0	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xe03c	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x14edc	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0xfc8c	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x10090	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x14fb8	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xc734	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xc808	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x18214	64	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0xc88c	208	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x11d04	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xc764	124	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x12520	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x12598	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x12574	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x110b0	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x26998	0	OBJECT	<unknown>	DEFAULT	11
__JCR_LIST__	.symtab	0x26998	0	OBJECT	<unknown>	DEFAULT	11
___Unwind_ForcedUnwind	.symtab	0x1a0ec	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x1a080	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x1a0a4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x1a0c8	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x18958	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x192b4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x192b4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x19298	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x19344	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x18958	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x192cc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x19314	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1932c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x192fc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x192e4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x18ff8	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x18d68	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1894c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x18954	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x18cb4	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x18c8c	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x18808	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x18934	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x18d08	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x119c0	8	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x18c68	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xc1c0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xc2bc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x18cf4	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1a04c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x1a044	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1a03c	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2b4e0	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x26c44	24	OBJECT	<unknown>	DEFAULT	13
__bss_end__	.symtab	0x2de88	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x26d60	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x26d60	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x113d4	84	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x10f90	100	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x17c10	152	FUNC	<unknown>	HIDDEN	2
__close_nocancel	.symtab	0x10f74	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x19214	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x26b58	4	OBJECT	<unknown>	DEFAULT	13
__ctype_tolower	.symtab	0x26c6c	4	OBJECT	<unknown>	DEFAULT	13
__ctype_toupper	.symtab	0x26b60	4	OBJECT	<unknown>	DEFAULT	13
__curbrk	.symtab	0x2da44	4	OBJECT	<unknown>	HIDDEN	14
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x26a4c	0	NOTYPE	<unknown>	DEFAULT	13
__decode_dotted	.symtab	0x16e00	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x18400	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x119b4	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x119a8	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xc2d4	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x18ff8	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x18808	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x16ef8	2064	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x812c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x26994	0	OBJECT	<unknown>	DEFAULT	10
__dso_handle	.symtab	0x26a4c	0	OBJECT	<unknown>	HIDDEN	13
__encode_dotted	.symtab	0x1875c	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x18314	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x184b4	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x2de88	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2b4d8	4	OBJECT	<unknown>	DEFAULT	14
__eqdf2	.symtab	0x19214	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xc838	32	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1e98c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1e86c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x2af88	4	OBJECT	<unknown>	HIDDEN	14
__extendsfdf2	.symtab	0x18cb4	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0xc2e8	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x144e0	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x26998	0	NOTYPE	<unknown>	HIDDEN	10
__fini_array_start	.symtab	0x26994	0	NOTYPE	<unknown>	HIDDEN	10
__fixunsdfsi	.symtab	0x19344	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x18d08	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x18c8c	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x18cf4	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x18c68	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x106b4	972	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x2de40	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x2de44	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x2af8c	4	OBJECT	<unknown>	HIDDEN	14
__frame_dummy_init_array_entry	.symtab	0x26990	0	OBJECT	<unknown>	DEFAULT	9
__gedf2	.symtab	0x19204	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x17ca8	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x15f54	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x11a78	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x10d04	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0xdeac	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x197f0	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x198d8	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x1a070	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x1986c	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x19990	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x1a078	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x1a154	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x1a868	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x19af4	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x19204	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x26994	0	NOTYPE	<unknown>	HIDDEN	9
__init_array_start	.symtab	0x26990	0	NOTYPE	<unknown>	HIDDEN	9
__ledf2	.symtab	0x1920c	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x10f90	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xe26c	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x111b0	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x11238	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_fcntl	.symtab	0xc380	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x106b4	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	8
__libc_multiple_threads	.symtab	0x2de48	4	OBJECT	<unknown>	HIDDEN	14
__libc_nanosleep	.symtab	0x11bac	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x11020	100	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x11140	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xe3b0	112	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xc670	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xe464	112	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x15a04	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x11914	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2b4d4	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0xc764	124	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x110b0	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x10b18	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x10a80	152	FUNC	<unknown>	HIDDEN	2
__local_nameserver	.symtab	0x1e834	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x1920c	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0xf0f0	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0xe690	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x26b68	24	OBJECT	<unknown>	DEFAULT	13
__malloc_state	.symtab	0x2dac8	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0xf040	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x18d68	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x2de7c	4	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x2de80	4	OBJECT	<unknown>	HIDDEN	14
__nedf2	.symtab	0x19214	132	FUNC	<unknown>	HIDDEN	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x11020	100	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x18514	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x177b4	1116	FUNC	<unknown>	HIDDEN	2
__open_nocancel	.symtab	0x11004	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x2b4dc	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x26990	0	NOTYPE	<unknown>	HIDDEN	8
__preinit_array_start	.symtab	0x26990	0	NOTYPE	<unknown>	HIDDEN	8
__progname	.symtab	0x26c60	4	OBJECT	<unknown>	DEFAULT	13
__progname_full	.symtab	0x26c64	4	OBJECT	<unknown>	DEFAULT	13
__pthread_initialize_minimal	.symtab	0x15c34	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1131c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x11314	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x11314	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x11314	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x11314	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x11140	100	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x18544	536	FUNC	<unknown>	HIDDEN	2
__read_nocancel	.symtab	0x11124	24	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x10b7c	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x2de74	4	OBJECT	<unknown>	HIDDEN	14
__resolv_attempts	.symtab	0x26d5f	1	OBJECT	<unknown>	HIDDEN	13
__resolv_lock	.symtab	0x2da4c	24	OBJECT	<unknown>	DEFAULT	14
__resolv_timeout	.symtab	0x26d5e	1	OBJECT	<unknown>	HIDDEN	13
__restore_core_regs	.symtab	0x1a054	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x2b4e4	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x2de78	4	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x2de84	4	OBJECT	<unknown>	HIDDEN	14
__sigaddset	.symtab	0xe648	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xe66c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xe624	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x18038	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x15d28	12	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x26c80	4	OBJECT	<unknown>	DEFAULT	13
__stdio_READ	.symtab	0x16280	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x162d8	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x163b4	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x12e04	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1647c	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x16550	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x164ac	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x13128	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x13204	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x26c84	4	OBJECT	<unknown>	DEFAULT	13
__subdf3	.symtab	0x18954	788	FUNC	<unknown>	HIDDEN	2
__sys_connect	.symtab	0xe228	68	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0xe36c	68	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0xe420	68	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x118e8	44	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x11b6c	64	FUNC	<unknown>	DEFAULT	2
__syscall_poll	.symtab	0x180fc	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x119d0	64	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0xc62c	68	FUNC	<unknown>	DEFAULT	2
__tls_get_addr	.symtab	0x159e0	36	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x11358	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x11428	88	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x11480	1004	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x26c5c	4	OBJECT	<unknown>	HIDDEN	13
__udivsi3	.symtab	0xc1c0	252	FUNC	<unknown>	HIDDEN	2
__write	.symtab	0x110b0	100	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x11094	24	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0xdec4	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x15ea8	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x15ddc	204	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2ad98	10	OBJECT	<unknown>	DEFAULT	14
_bss_end__	.symtab	0x2de88	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x811d	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8121	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8129	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x810d	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x8111	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x8115	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x8119	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8125	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0xc95c	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2da70	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x2da98	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x26b64	4	OBJECT	<unknown>	HIDDEN	13
_dl_aux_init	.symtab	0x15c40	56	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x26d58	4	OBJECT	<unknown>	DEFAULT	13
_dl_nothread_init_static_tls	.symtab	0x15c78	88	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x2de6c	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x2de70	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x2de60	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x2de5c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x2de64	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x2de54	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x15978	104	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x2de50	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x2de68	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x2de58	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x2de4c	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x26d60	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2de88	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0xc474	104	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1a8e4	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x2b508	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0xc9b0	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x13430	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80d4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x13234	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x146b0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0xd128	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0xd410	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0xd1c8	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0xd20c	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0xd3bc	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x1132c	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x11324	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x1199c	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x2dac0	8	OBJECT	<unknown>	HIDDEN	14
_start	.symtab	0x81d0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x129a4	1120	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x12f44	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x26c88	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_add_lock	.symtab	0x2b4e8	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x13e84	688	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x2b504	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x2b4f4	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x2b500	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x26c8c	204	OBJECT	<unknown>	DEFAULT	13
_stdio_term	.symtab	0x12fc4	356	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x26c70	4	OBJECT	<unknown>	DEFAULT	13
_stdlib_strto_l	.symtab	0xfca8	472	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x132a8	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1d828	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x132d4	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0xca34	1780	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0xf520	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0xfc6c	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0xfc6c	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0xda80	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x2af84	4	OBJECT	<unknown>	DEFAULT	14
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x15cd0	88	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xe560	196	FUNC	<unknown>	DEFAULT	2
buf.4507	.symtab	0x2ada8	16	OBJECT	<unknown>	DEFAULT	14
buf.6549	.symtab	0x2adb8	440	OBJECT	<unknown>	DEFAULT	14
bzero	.symtab	0xda90	12	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x26b4c	4	OBJECT	<unknown>	DEFAULT	13
calloc	.symtab	0x15400	320	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0xc4dc	56	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x10f90	100	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x11d3c	272	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x26a54	4	OBJECT	<unknown>	DEFAULT	13
completed.5105	.symtab	0x26d60	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0xe26c	116	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x953c	628	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 15:56:56.249090910 CET	40062	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:56.368887901 CET	4258	40062	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:56.368942022 CET	40062	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:56.370995045 CET	40062	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:56.491282940 CET	4258	40062	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:57.521049976 CET	4258	40062	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:57.521174908 CET	4258	40062	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:57.522351027 CET	40062	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:57.522351027 CET	40062	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:57.524602890 CET	40064	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:57.654092073 CET	4258	40062	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:57.654098988 CET	4258	40064	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:57.654784918 CET	40064	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:57.654784918 CET	40064	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:57.774305105 CET	4258	40064	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:58.832629919 CET	4258	40064	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:58.832895994 CET	4258	40064	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:58.833163023 CET	40064	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:58.833364964 CET	40064	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:58.834747076 CET	40066	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:58.952862978 CET	4258	40064	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:58.954380989 CET	4258	40066	185.216.71.152	192.168.2.13
Dec 22, 2024 15:56:58.954567909 CET	40066	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:58.954678059 CET	40066	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:56:59.074564934 CET	4258	40066	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:00.118145943 CET	4258	40066	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:00.118163109 CET	4258	40066	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:00.118433952 CET	40066	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:00.118434906 CET	40066	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:00.120083094 CET	40068	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:00.238390923 CET	4258	40066	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:00.239566088 CET	4258	40068	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:00.239861965 CET	40068	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:00.240103006 CET	40068	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:00.359632015 CET	4258	40068	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:01.395817995 CET	4258	40068	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:01.396004915 CET	4258	40068	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:01.396253109 CET	40068	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:01.396253109 CET	40068	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:01.397506952 CET	40070	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:01.515865088 CET	4258	40068	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:01.516946077 CET	4258	40070	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:01.517164946 CET	40070	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:01.517164946 CET	40070	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:01.637012005 CET	4258	40070	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:02.693764925 CET	4258	40070	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:02.693907022 CET	4258	40070	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:02.694108963 CET	40070	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:02.694109917 CET	40070	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:02.695064068 CET	40072	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:02.815006971 CET	4258	40070	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:02.815756083 CET	4258	40072	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:02.816076040 CET	40072	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:02.816076994 CET	40072	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:02.935806036 CET	4258	40072	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:04.000355005 CET	4258	40072	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:04.000377893 CET	4258	40072	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:04.000497103 CET	40072	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:04.000564098 CET	40072	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:04.001118898 CET	40074	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:04.120316982 CET	4258	40072	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:04.120614052 CET	4258	40074	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:04.120796919 CET	40074	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:04.120975018 CET	40074	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:04.240395069 CET	4258	40074	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:05.286854029 CET	4258	40074	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:05.287060976 CET	40074	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:05.287086010 CET	4258	40074	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:05.287343025 CET	40074	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:05.287687063 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:05.406923056 CET	4258	40074	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:05.407190084 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:05.407274008 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:05.407335997 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:05.526890039 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:06.563092947 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:06.563225031 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:06.563247919 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:06.563404083 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:06.563967943 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:06.682956934 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:06.683389902 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:06.683484077 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:06.683569908 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:06.803227901 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:07.849478960 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:07.849546909 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:07.849706888 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:07.849912882 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:07.850931883 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:07.969403028 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:07.970581055 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:07.970691919 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:07.970820904 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:08.091690063 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:09.148993015 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:09.149100065 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:09.149211884 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:09.149297953 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:09.150302887 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:09.268872976 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:09.269898891 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:09.270103931 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:09.270217896 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:09.389935970 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:10.427130938 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:10.427169085 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:10.427367926 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:10.427479029 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:10.428499937 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:10.547049999 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:10.548048019 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:10.548305988 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:10.548413992 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:10.668401957 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:11.724517107 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:11.724555969 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:11.724845886 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:11.725039005 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:11.725828886 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:11.844643116 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:11.845439911 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:11.845854998 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:11.845854998 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:11.965883970 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:13.025635004 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:13.025752068 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:13.026092052 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:13.026191950 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:13.028163910 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:13.146164894 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:13.147763968 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:13.148047924 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:13.148216963 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:13.267802954 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:14.308675051 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:14.308856964 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:14.309007883 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:14.309176922 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:14.310658932 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:14.429702044 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:14.430686951 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:14.430924892 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:14.431032896 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:14.551704884 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:15.589365005 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:15.589382887 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:15.589442015 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:15.589523077 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:15.590158939 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:15.709208965 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:15.709656000 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:15.709762096 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:15.709902048 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:15.829394102 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:16.922940016 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:16.922960043 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:16.923243046 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:16.923367977 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:16.924470901 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:17.043083906 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:17.044100046 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:17.044584036 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:17.044584036 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:17.164275885 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:21.335330963 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:21.335465908 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:21.335481882 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:21.335733891 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:21.336796045 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:21.455154896 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:21.456269026 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:21.456376076 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:21.456376076 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:21.575907946 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:22.653203964 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:22.653270006 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:22.653376102 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:22.653503895 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:22.654572010 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:22.773101091 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:22.774116039 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:22.774235964 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:22.774365902 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:22.894845963 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:23.947947025 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:23.947959900 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:23.948256969 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:23.948405981 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:23.949450970 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:24.090325117 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:24.090337992 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:24.090521097 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:24.090787888 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:24.211675882 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:25.256387949 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:25.256407022 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:25.256546021 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:25.256697893 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:25.257765055 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:25.377496004 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:25.378094912 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:25.378633976 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:25.378719091 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:25.498405933 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:26.615506887 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:26.615554094 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:26.615698099 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:26.615828991 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:26.616842031 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:26.736080885 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:26.736911058 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:26.736975908 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:26.737140894 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:26.856722116 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:27.966031075 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:27.966320038 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:27.966356039 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:27.966515064 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:27.967729092 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:28.086031914 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:28.087193966 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:28.087330103 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:28.087455034 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:28.207075119 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:29.243110895 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:29.243124008 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:29.243350029 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:29.243568897 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:29.244744062 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:29.363040924 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:29.364423037 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:29.364629030 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:29.364734888 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:29.484215975 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:30.548470974 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:30.548547983 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:30.548623085 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:30.548710108 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:30.549499989 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:30.682759047 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:30.682779074 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:30.682873964 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:30.682918072 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:30.802716970 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:31.949491978 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:31.949635983 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:31.949749947 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:31.949749947 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:31.950606108 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:32.069478035 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:32.070261002 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:32.070336103 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:32.070386887 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:32.189958096 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:33.291532040 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:33.291800022 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:33.291830063 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:33.291929007 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:33.292604923 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:33.412422895 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:33.412875891 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:33.412949085 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:33.412992001 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:33.532692909 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:34.626898050 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:34.627012014 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:34.627163887 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:34.627228022 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:34.628019094 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:34.746778965 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:34.747631073 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:34.747718096 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:34.747741938 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:34.867322922 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:35.903676987 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:35.903811932 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:35.903824091 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:35.904057980 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:35.905647993 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:36.023623943 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:36.025294065 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:36.025501013 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:36.025593042 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:36.145596027 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:37.184001923 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:37.184089899 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:37.184216022 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:37.184351921 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:37.185158968 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:37.304138899 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:37.304976940 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:37.305172920 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:37.305277109 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:37.424983978 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:38.470501900 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:38.470523119 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:38.470913887 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:38.471041918 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:38.471869946 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:38.590584993 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:38.591377020 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:38.591698885 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:38.591809034 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:38.711648941 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:39.757467985 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:39.757544041 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:39.757808924 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:39.757865906 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:39.758713961 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:39.879076004 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:39.879678011 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:39.879831076 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:39.879884958 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:39.999449968 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:41.057399988 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:41.057451010 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:41.057712078 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:41.057867050 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:41.058760881 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:41.177562952 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:41.178390026 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:41.178687096 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:41.178787947 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:41.299093962 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:42.666382074 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:42.666655064 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:42.667613983 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:42.786190033 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:42.787240982 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:42.787377119 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:42.787436008 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:42.907027960 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:44.039437056 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:44.039639950 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:44.039859056 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:44.040304899 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:44.041080952 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:44.159948111 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:44.161015034 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:44.161143064 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:44.161179066 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:44.280962944 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:45.314285994 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:45.314332962 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:45.314439058 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:45.314610958 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:45.315493107 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:45.435214043 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:45.436105013 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:45.436379910 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:45.436381102 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:45.556720018 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:46.601212978 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:46.601258039 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:46.601393938 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:46.601478100 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:46.602264881 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:46.721129894 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:46.723932028 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:46.724123955 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:46.724186897 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:46.844067097 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:47.871706963 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:47.871790886 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:47.872086048 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:47.872189999 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:47.873315096 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:47.991841078 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:47.993012905 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:47.993144035 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:47.993324041 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:48.112840891 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:49.215140104 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:49.215188026 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:49.215334892 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:49.215466022 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:49.216314077 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:49.337577105 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:49.338327885 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:49.338416100 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:49.338529110 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:49.458904028 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:50.561995029 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:50.562145948 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:50.562216997 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:50.562314034 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:50.563019037 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:50.681824923 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:50.682543039 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:50.682712078 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:50.682764053 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:50.802906036 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:54.857111931 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:54.857130051 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:54.857332945 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:54.857461929 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:54.858427048 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:54.977833986 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:54.979162931 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:54.979238987 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:54.979394913 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:55.099543095 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:56.156158924 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:56.156215906 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:56.156260967 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:56.156455040 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:56.157406092 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:56.276027918 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:56.277116060 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:56.277215958 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:56.277322054 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:56.396859884 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:57.433331966 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:57.433347940 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:57.433449030 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:57.433481932 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:57.434411049 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:57.591901064 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:57.591916084 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:57.592250109 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:57.592401028 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:57.711855888 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:58.758141994 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:58.758208036 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:58.758317947 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:58.758451939 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:58.759499073 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:58.878205061 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:58.879180908 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 15:57:58.879287004 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:58.879430056 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:57:58.999605894 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:00.076508999 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:00.076844931 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:00.076862097 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:00.076967955 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:00.077917099 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:00.197674990 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:00.198467970 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:00.198607922 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:00.198719978 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:00.318242073 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:01.346141100 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:01.346314907 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:01.346524954 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:01.346676111 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:01.347695112 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:01.466135979 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:01.467361927 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:01.467531919 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:01.467658043 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:01.587255001 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:02.633282900 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:02.633301973 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:02.633501053 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:02.633651972 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:02.634788036 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:02.753206968 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:02.754401922 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:02.754652977 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:02.754686117 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:02.874484062 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:03.909497023 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:03.909636974 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:03.909749031 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:03.909849882 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:03.910701036 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:04.030695915 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:04.031873941 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:04.031980991 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:04.032030106 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:04.153311014 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:05.210174084 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:05.210309982 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:05.210516930 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:05.210633039 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:05.212265015 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:05.330349922 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:05.331794024 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:05.331994057 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:05.332103968 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:05.454722881 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:06.510318995 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:06.510445118 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:06.510601044 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:06.510734081 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:06.511892080 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:06.630228043 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:06.631445885 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:06.631561041 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:06.631807089 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:06.751427889 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:07.821674109 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:07.821868896 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:07.821921110 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:07.822055101 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:07.823072910 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:07.943470955 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:07.944752932 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:07.944987059 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:07.945123911 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:08.065776110 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:09.092987061 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:09.093018055 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:09.093296051 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:09.093442917 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:09.094535112 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:09.212925911 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:09.214010000 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:09.214174032 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:09.214245081 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:09.333827972 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:10.372534990 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:10.372564077 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:10.372868061 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:10.372988939 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:10.374104977 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:10.492535114 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:10.493582010 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:10.493793964 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:10.493875980 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:10.613778114 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:11.646644115 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:11.646780014 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:11.646821022 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:11.646946907 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:11.648154974 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:11.767205000 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:11.767802954 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:11.767894983 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:11.767940998 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:11.887706041 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:12.933571100 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:12.933605909 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:12.933706045 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:12.933782101 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:12.934665918 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:13.053574085 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:13.054256916 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:13.054414034 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:13.054500103 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:13.174267054 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:14.219279051 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:14.219310045 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:14.219464064 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:14.219640017 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:14.220716953 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:14.340780020 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:14.341017962 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:14.341324091 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:14.341468096 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:14.461077929 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:15.549050093 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:15.549079895 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:15.549223900 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:15.549335957 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:15.549916983 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:15.668946028 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:15.669589996 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:15.669869900 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:15.670104980 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:15.789663076 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:16.861449957 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:16.861476898 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:16.861747980 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:16.861835957 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:16.862792969 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:16.981627941 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:16.982582092 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:16.982676983 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:16.982798100 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:17.102734089 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:18.174225092 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:18.174263000 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:18.174398899 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:18.174597979 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:18.175331116 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:18.294166088 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:18.294826031 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:18.295001030 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:18.295149088 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:18.414772034 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:19.511499882 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:19.511528015 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:19.511617899 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:19.511717081 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:19.512343884 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:19.632138968 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:19.632158995 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:19.632267952 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:19.632347107 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:19.754633904 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:20.803210020 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:20.803241014 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:20.803514004 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:20.803584099 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:20.804533958 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:20.923201084 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:20.924127102 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:20.924446106 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:20.924561024 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:21.044255018 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:22.102444887 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:22.102755070 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:22.102809906 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:22.102919102 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:22.103782892 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:22.222631931 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:22.223395109 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:22.223635912 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:22.223635912 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:22.343604088 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:23.370687962 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:23.370793104 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:23.371237040 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:23.371361971 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:23.372157097 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:23.491142035 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:23.491782904 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:23.492117882 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:23.492207050 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:23.611841917 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:24.664772987 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:24.664802074 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:24.664984941 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:24.665085077 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:24.665906906 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:24.785264969 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:24.786282063 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:24.786364079 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:24.786561012 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:24.907464027 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:26.017488956 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:26.017548084 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:26.017646074 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:26.017740965 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:26.018506050 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:26.137614965 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:26.138039112 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:26.138298035 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:26.138552904 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:26.258058071 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:27.336504936 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:27.336534977 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:27.336694002 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:27.336829901 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:27.337800026 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:27.456697941 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:27.457752943 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:27.457921028 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:27.458044052 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:27.577714920 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:28.613571882 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:28.613671064 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:28.613759041 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:28.613914013 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:28.614729881 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:28.733582973 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:28.734327078 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:28.734457016 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:28.734508038 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:28.854119062 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:29.974641085 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:29.974692106 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:29.974857092 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:29.974951982 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:29.975701094 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:30.094683886 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:30.095369101 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:30.095457077 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:30.095493078 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:30.215347052 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:31.306260109 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:31.306288004 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:31.306385040 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:31.306432009 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:31.307192087 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:31.426054955 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:31.426749945 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:31.426873922 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:31.426954031 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:31.546581030 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:32.575476885 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:32.575532913 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:32.575814009 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:32.575814009 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:32.576484919 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:32.695802927 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:32.696202040 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:32.696320057 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:32.696377039 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:32.816076994 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:33.852737904 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:33.853003979 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:33.853008032 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:33.853106022 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:33.853926897 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:33.972723007 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:33.973479986 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:33.973598957 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:33.973711967 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:34.093518972 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:35.122503042 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:35.122622013 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:35.122684002 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:35.122864962 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:35.124063015 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:35.242432117 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:35.243735075 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:35.243916035 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:35.244015932 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:35.366739988 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:36.426603079 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:36.426690102 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:36.426804066 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:36.426863909 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:36.427788019 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:36.546564102 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:36.547429085 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:36.547576904 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:36.547632933 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:36.667287111 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:37.700923920 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:37.700985909 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:37.701222897 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:37.701411963 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:37.702286959 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:37.821403980 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:37.822462082 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:37.822591066 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:37.822736979 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:37.942534924 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:38.988372087 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:38.988440037 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:38.988581896 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:38.988735914 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:38.989620924 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:39.108643055 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:39.109282017 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:39.109426975 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:39.109471083 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:39.229258060 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:40.270313978 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:40.270370007 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:40.270539999 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:40.270680904 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:40.271810055 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:40.390357971 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:40.391422987 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:40.391593933 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:40.391716003 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:40.512254000 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:41.557779074 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:41.557843924 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:41.558001995 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:41.558121920 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:41.558974981 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:41.678165913 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:41.678600073 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:41.678785086 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:41.678879976 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:41.798888922 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:42.837013960 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:42.837075949 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:42.837141991 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:42.837342024 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:42.838323116 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:42.956965923 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:42.957869053 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:42.957932949 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:42.958062887 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:43.077815056 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:44.120896101 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:44.120949030 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:44.121134996 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:44.121283054 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:44.122433901 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:44.241213083 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:44.242079020 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:44.242372990 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:44.242459059 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:44.362010002 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:45.391685009 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:45.391736984 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:45.391863108 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:45.392016888 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:45.392946959 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:45.511610985 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:45.512602091 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:45.512742043 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:45.512856007 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:45.632833004 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:46.678036928 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:46.678066969 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:46.678237915 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:46.678350925 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:46.679240942 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:46.798120022 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:46.799797058 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:46.799952984 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:46.800137997 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:46.919725895 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:47.977880955 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:47.977948904 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:47.978055000 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:47.978166103 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:47.978952885 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:48.097840071 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:48.098644972 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:48.098815918 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:48.098817110 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:48.218605042 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:49.263890982 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:49.263920069 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:49.264038086 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:49.264087915 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:49.264811993 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:49.384833097 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:49.385283947 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:49.385575056 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:49.385628939 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:49.506695986 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:50.545484066 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:50.545551062 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:50.545885086 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:50.545885086 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:50.546709061 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:50.666443110 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:50.666999102 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:50.667112112 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:50.667165995 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:50.787292957 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:52.012401104 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:52.012564898 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:52.012650013 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:52.012742043 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:52.013910055 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:52.132877111 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:52.133475065 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:52.133579016 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:52.133764982 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:52.253896952 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:53.477570057 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:53.477627993 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:53.477799892 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:53.477946997 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:53.479001045 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:53.597553015 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:53.598613977 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:53.598699093 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:53.598938942 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:53.720452070 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:54.824217081 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:54.824278116 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:54.824537039 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:54.824651003 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:54.825774908 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:54.946342945 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:54.946932077 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:54.947196960 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:54.947288990 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:55.066759109 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:56.166665077 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:56.166718960 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:56.167011976 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:56.167135000 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:56.168129921 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:56.286761045 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:56.288002014 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:56.288119078 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:56.288248062 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:56.407896042 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:57.454075098 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:57.454251051 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:57.454402924 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:57.454538107 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:57.455570936 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:57.574364901 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:57.575119972 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:57.575342894 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:57.575342894 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:57.695149899 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:58.729321003 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:58.729343891 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:58.729417086 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:58.729528904 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:58.730207920 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:58.849025011 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:58.849709988 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 15:58:58.849771023 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:58.849833012 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:58:58.969510078 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:00.012192965 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:00.012250900 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:00.012614012 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:00.012670994 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:00.013727903 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:00.132632971 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:00.133258104 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:00.133354902 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:00.133466959 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:00.254415989 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:01.292222023 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:01.292268038 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:01.292381048 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:01.292505980 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:01.293526888 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:01.412197113 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:01.413151979 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:01.413408995 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:01.413547993 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:01.533108950 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:02.566293001 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:02.566384077 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:02.566525936 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:02.566659927 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:02.567717075 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:02.686367989 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:02.687464952 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:02.687575102 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:02.687702894 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:02.807219982 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:03.845247030 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:03.845300913 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:03.845606089 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:03.845733881 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:03.846709967 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:03.965511084 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:03.966311932 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:03.966408014 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:03.966670990 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:04.086546898 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:05.122066021 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:05.122112036 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:05.122370958 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:05.122661114 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:05.123646021 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:05.242132902 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:05.243127108 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:05.243268013 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:05.243421078 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:05.363187075 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:06.399475098 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:06.399666071 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:06.399717093 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:06.399820089 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:06.400719881 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:06.519368887 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:06.520286083 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:06.520559072 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:06.520685911 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:06.640261889 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:07.696990013 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:07.697026968 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:07.697180986 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:07.697237015 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:07.697983027 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:07.817858934 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:07.818404913 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:07.818674088 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:07.818818092 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:07.939299107 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:08.966845036 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:08.966876984 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:08.966960907 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:08.967015982 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:08.967772007 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:09.086610079 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:09.087573051 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:09.087729931 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:09.087867975 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:09.207998991 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:10.275156975 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:10.275288105 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:10.275372028 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:10.275438070 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:10.276235104 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:10.395059109 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:10.395826101 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:10.396100998 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:10.396222115 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:10.515896082 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:11.571907043 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:11.572062969 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:11.572267056 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:11.572365046 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:11.573419094 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:11.691977024 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:11.692914009 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:11.693065882 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:11.693185091 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:11.815619946 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:12.860908031 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:12.861074924 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:12.861193895 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:12.861268997 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:12.862355947 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:12.980943918 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:12.981903076 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:12.982162952 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:12.982211113 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:13.102091074 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:14.160335064 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:14.160463095 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:14.160499096 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:14.160593987 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:14.161393881 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:14.280204058 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:14.281106949 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:14.281203985 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:14.281243086 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:14.400868893 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:15.443684101 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:15.443926096 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:15.444005013 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:15.444168091 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:15.445291042 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:15.563786030 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:15.564831018 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:15.564982891 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:15.565076113 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:15.685112953 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:16.773231983 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:16.773339987 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:16.773535013 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:16.773679018 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:16.774745941 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:16.893357038 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:16.894548893 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:16.894819975 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:16.894908905 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:17.014642000 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:18.051366091 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:18.051527023 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:18.051578045 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:18.051652908 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:18.052454948 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:18.171417952 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:18.171958923 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:18.172099113 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:18.172144890 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:18.291914940 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:19.349129915 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:19.349164009 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:19.349359035 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:19.349513054 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:19.350542068 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:19.469245911 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:19.470087051 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:19.470154047 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:19.470217943 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:19.590356112 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:20.659924984 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:20.660068989 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:20.660137892 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:20.660300970 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:20.661259890 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:20.780900002 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:20.781950951 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:20.782274008 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:20.782304049 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:20.902179003 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:21.963234901 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:21.963332891 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:21.963504076 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:21.963648081 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:21.964528084 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:22.083273888 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:22.084120035 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:22.084335089 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:22.084383011 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:22.204144001 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:23.237812042 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:23.237860918 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:23.238086939 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:23.238276958 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:23.239308119 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:23.358062983 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:23.358984947 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:23.359242916 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:23.359272957 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:23.479516029 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:24.520605087 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:24.520654917 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:24.520950079 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:24.520998955 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:24.521655083 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:24.642147064 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:24.642302036 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:24.642472982 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:24.642514944 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:24.762842894 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:25.835159063 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:25.835211039 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:25.835479021 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:25.835532904 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:25.836261034 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:25.955167055 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:25.955898046 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:25.955997944 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:25.956069946 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:26.075900078 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:27.133241892 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:27.133277893 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:27.133347034 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:27.133425951 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:27.134083986 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:27.253129959 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:27.253813028 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:27.253931999 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:27.253968000 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:27.373563051 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:28.430174112 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:28.430213928 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:28.430459976 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:28.430537939 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:28.431241989 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:28.550004959 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:28.550735950 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:28.550827026 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:28.550879955 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:28.670454025 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:29.710097075 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:29.710262060 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:29.710366011 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:29.710472107 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:29.711407900 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:29.830188990 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:29.830910921 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:29.831003904 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:29.831105947 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:29.951071024 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:30.991266966 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:30.991364956 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:30.991425991 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:30.991487026 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:30.992302895 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:31.111309052 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:31.111901999 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:31.111990929 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:31.112152100 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:31.231648922 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:32.304795027 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:32.305022955 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:32.305151939 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:32.305250883 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:32.305948973 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:32.424913883 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:32.425575972 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:32.425666094 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:32.425774097 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:32.546813011 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:33.621438980 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:33.621474028 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:33.621607065 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:33.621771097 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:33.622713089 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:33.741328001 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:33.742299080 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:33.742372036 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:33.742479086 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:33.862034082 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:35.023875952 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:35.023962975 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:35.024199963 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:35.024285078 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:35.025243998 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:35.144490004 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:35.145004988 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:35.145248890 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:35.145248890 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:35.265464067 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:36.439585924 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:36.439732075 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:36.439922094 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:36.440042973 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:36.440988064 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:36.560120106 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:36.560794115 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:36.560911894 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:36.561002970 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:36.680794001 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:37.822325945 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:37.822452068 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:37.822547913 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:37.822705984 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:37.823476076 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:37.942251921 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:37.943061113 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:37.943397045 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:37.943500042 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:38.063402891 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:39.296212912 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:39.296252966 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:39.296468973 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:39.296644926 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:39.297754049 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:39.416203976 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:39.417610884 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:39.417768955 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:39.417826891 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:39.537424088 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:40.648637056 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:40.648688078 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:40.648700953 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:40.648756027 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:40.649291039 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:40.768341064 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:40.768835068 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:40.768899918 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:40.768970966 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:40.888622046 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:41.948060989 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:41.948118925 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:41.948188066 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:41.948255062 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:41.948865891 CET	40306	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:42.068213940 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:42.068489075 CET	4258	40306	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:42.068618059 CET	40306	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:42.068618059 CET	40306	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:42.188286066 CET	4258	40306	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:43.272264957 CET	4258	40306	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:43.272378922 CET	4258	40306	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:43.272428036 CET	40306	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:43.272494078 CET	40306	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:43.273200035 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:43.392045021 CET	4258	40306	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:43.392751932 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:43.392833948 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:43.392867088 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:43.512511015 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:44.603737116 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:44.603846073 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:44.603921890 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:44.603982925 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:44.604532003 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:44.723510027 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:44.724088907 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:44.724272966 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:44.724318981 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:44.844053984 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:46.033791065 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:46.033847094 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:46.033935070 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:46.034023046 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:46.034573078 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:46.154364109 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:46.154692888 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:46.154755116 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:46.154802084 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:46.275285006 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:47.470746040 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:47.470873117 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:47.470887899 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:47.471052885 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:47.471673965 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:47.590552092 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:47.591161013 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:47.591240883 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:47.591298103 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:47.710897923 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:51.847878933 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:51.847942114 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:51.848076105 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:51.848149061 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:51.848776102 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:51.968177080 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:51.968842983 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:51.968985081 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:51.968985081 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:52.089087009 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:53.508889914 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:53.509157896 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:53.509978056 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:53.630470037 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:53.631159067 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:53.631383896 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:53.631498098 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:53.753314018 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:55.124341011 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:55.124406099 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:55.124490023 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:55.124646902 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:55.125508070 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:55.244266033 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:55.245182991 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:55.245506048 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:55.245589972 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:55.365380049 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:59.492131948 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:59.492247105 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:59.492275000 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:59.492408991 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:59.493238926 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:59.613111019 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:59.613696098 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 15:59:59.613809109 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:59.613939047 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 15:59:59.733753920 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:00.778939962 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:00.779078007 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:00.779114008 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:00.779273987 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:00.780292034 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:00.898876905 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:00.900068998 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:00.900330067 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:00.900425911 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:01.020704031 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:02.065162897 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:02.065224886 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:02.065471888 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:02.065471888 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:02.066236973 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:02.186125040 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:02.186356068 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:02.186563015 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:02.186665058 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:02.306823969 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:03.403445005 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:03.403492928 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:03.403578997 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:03.403824091 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:03.404629946 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:03.523448944 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:03.524375916 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:03.524455070 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:03.524723053 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:03.644437075 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:04.734577894 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:04.734652996 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:04.734899998 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:04.735002995 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:04.735605001 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:04.855041981 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:04.855377913 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:04.855506897 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:04.855554104 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:04.975512028 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:06.132292032 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:06.132349968 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:06.132435083 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:06.132528067 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:06.133277893 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:06.252795935 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:06.253335953 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:06.253721952 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:06.253721952 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:06.374069929 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:07.484220028 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:07.484299898 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:07.484416008 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:07.484498978 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:07.485104084 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:07.604650974 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:07.605365992 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:07.605501890 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:07.605618954 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:07.725482941 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:08.782471895 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:08.782553911 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:08.782721996 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:08.782721996 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:08.783574104 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:08.903486967 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:08.903558969 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:08.903759956 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:08.903759956 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:09.023910999 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:10.081806898 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:10.081947088 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:10.081988096 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:10.082071066 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:10.082683086 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:10.201757908 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:10.202327967 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:10.202502966 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:10.202548027 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:10.322207928 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:11.370157003 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:11.370246887 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:11.370455980 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:11.370507002 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:11.371047020 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:11.490883112 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:11.490932941 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:11.491018057 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:11.491075039 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:11.612099886 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:12.662390947 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:12.662439108 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:12.662563086 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:12.662563086 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:12.663280010 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:12.782578945 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:12.782824993 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:12.782962084 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:12.782989025 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:12.902731895 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:13.933609009 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:13.933768034 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:13.934137106 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:13.934237957 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:13.934956074 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:14.053880930 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:14.054672956 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:14.054796934 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:14.054796934 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:14.174732924 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:15.207571030 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:15.207623005 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:15.207787037 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:15.207900047 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:15.208518982 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:15.327774048 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:15.328483105 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:15.328738928 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:15.328739882 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:15.448569059 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:16.483982086 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:16.484040976 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:16.484292984 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:16.484293938 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:16.484858036 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:16.606570005 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:16.606618881 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:16.606712103 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:16.606776953 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:16.727211952 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:17.771662951 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:17.771728039 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:17.771934986 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:17.772221088 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:17.773119926 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:17.892165899 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:17.893043995 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:17.893316031 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:17.893480062 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:18.013407946 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:19.069256067 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:19.069351912 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:19.069538116 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:19.069538116 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:19.070331097 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:19.189871073 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:19.190011024 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:19.190212965 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:19.190468073 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:19.310493946 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:20.373750925 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:20.373848915 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:20.374036074 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:20.374036074 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:20.374708891 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:20.494344950 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:20.494455099 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:20.494805098 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:20.494805098 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:20.614665031 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:21.658668995 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:21.659018040 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:21.659029961 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:21.659152031 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:21.659805059 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:21.778779984 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:21.779628992 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:21.779745102 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:21.779795885 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:21.899398088 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:22.927620888 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:22.927809000 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:22.927845955 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:22.927906036 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:22.928494930 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:23.047379017 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:23.048243999 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:23.048322916 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:23.048479080 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:23.167988062 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:24.214684010 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:24.214778900 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:24.214796066 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:24.214924097 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:24.215473890 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:24.334714890 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:24.335146904 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:24.335361958 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:24.335361958 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:24.455353975 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:25.501050949 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:25.501104116 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:25.501249075 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:25.501341105 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:25.501849890 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:25.621088982 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:25.621505022 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:25.621692896 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:25.621694088 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:25.742135048 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:26.782994986 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:26.783045053 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:26.783307076 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:26.783308029 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:26.783747911 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:26.903234959 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:26.903405905 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:26.903516054 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:26.903539896 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:27.023653984 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:28.051502943 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:28.051561117 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:28.051634073 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:28.051697969 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:28.052208900 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:28.171804905 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:28.171901941 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:28.172049999 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:28.172219038 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:28.291868925 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:29.343456984 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:29.343556881 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:29.343558073 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:29.343643904 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:29.344276905 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:29.464627028 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:29.464674950 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:29.464741945 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:29.464806080 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:29.584620953 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:30.637661934 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:30.637717962 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:30.637785912 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:30.637865067 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:30.638403893 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:30.758775949 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:30.758821011 CET	4258	40370	185.216.71.152	192.168.2.13
Dec 22, 2024 16:00:30.758891106 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:30.758955002 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:00:30.878650904 CET	4258	40370	185.216.71.152	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 15:59:40.996176958 CET	36904	53	192.168.2.13	8.8.8.8
Dec 22, 2024 15:59:40.996253014 CET	57025	53	192.168.2.13	8.8.8.8
Dec 22, 2024 15:59:41.119226933 CET	53	57025	8.8.8.8	192.168.2.13
Dec 22, 2024 15:59:41.130122900 CET	53	36904	8.8.8.8	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 22, 2024 15:59:40.996176958 CET	192.168.2.13	8.8.8.8	0xc10c	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 22, 2024 15:59:40.996253014 CET	192.168.2.13	8.8.8.8	0x7e0d	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 22, 2024 15:59:41.130122900 CET	8.8.8.8	192.168.2.13	0xc10c	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 22, 2024 15:59:41.130122900 CET	8.8.8.8	192.168.2.13	0xc10c	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: hidakibest.arm7.elf PID: 5428, Parent PID: 5355

General

Start time (UTC):	14:56:55
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm7.elf
Arguments:	/tmp/hidakibest.arm7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm7.elf PID: 5430, Parent PID: 5428

General

Start time (UTC):	14:56:55
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm7.elf PID: 5432, Parent PID: 5430

General

Start time (UTC):	14:56:55
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.arm7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: hidakibest.arm7.elf PID: 5428, Parent PID: 5355

General

Chronological Activities

Analysis Process: hidakibest.arm7.elf PID: 5430, Parent PID: 5428

General

Chronological Activities

Analysis Process: hidakibest.arm7.elf PID: 5432, Parent PID: 5430

General

Chronological Activities

Linux Analysis Report
hidakibest.arm7.elf