Edit tour

Linux Analysis Report
hidakibest.arm4.elf

Overview

General Information

Sample name:	hidakibest.arm4.elf
Analysis ID:	1579489
MD5:	0b9c50ac49e202f06421ab0bb325468e
SHA1:	3c3e2fa064f80ef9a9a5580abc747764c2950872
SHA256:	96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579489
Start date and time:	2024-12-22 15:58:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.arm4.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: 185.216.71.152:4258
VT rate limit hit for: http://fast.no/support/crawler.asp)
VT rate limit hit for: http://feedback.redkolibri.com/
VT rate limit hit for: http://www.billybobbot.com/crawler/)

Runtime Messages

Command:	/tmp/hidakibest.arm4.elf
PID:	6252
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.arm4.elf (PID: 6252, Parent: 6179, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/hidakibest.arm4.elf

hidakibest.arm4.elf New Fork (PID: 6254, Parent: 6252)

hidakibest.arm4.elf New Fork (PID: 6256, Parent: 6254)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.arm4.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.arm4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.arm4.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10c00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.arm4.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10bb0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10c00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10bb0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10c00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10bb0:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm4.elf PID: 6252	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm4.elf PID: 6252	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x147d3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x147fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1480f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14823:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14837:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1484b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1485f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14873:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14887:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1489b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x148ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14913:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14927:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1493b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1494f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14963:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm4.elf PID: 6252	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14786:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x14bf8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm4.elf PID: 6254	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm4.elf PID: 6254	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2cbf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2cd3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ce7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2cfb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d73:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2daf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dc3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dd7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2deb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm4.elf PID: 6254	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x2c72:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x30e4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.arm4.elf

Avira: detected

Found malware configuration

Source: hidakibest.arm4.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.216.71.152:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.arm4.elf	Virustotal: Detection: 62%			Perma Link
Source: hidakibest.arm4.elf	ReversingLabs: Detection: 68%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.arm4.elf (PID: 6252)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:52112 -> 185.216.71.152:4258

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152

Source: hidakibest.arm4.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.arm4.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.arm4.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.arm4.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.arm4.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.arm4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.arm4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm4.elf PID: 6252, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm4.elf PID: 6252, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm4.elf PID: 6254, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm4.elf PID: 6254, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.arm4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.arm4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm4.elf PID: 6252, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm4.elf PID: 6252, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm4.elf PID: 6254, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm4.elf PID: 6254, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@0/0

Source: /tmp/hidakibest.arm4.elf (PID: 6252)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.arm4.elf, 6252.1.000055d3c5f10000.000055d3c603e000.rw-.sdmp, hidakibest.arm4.elf, 6254.1.000055d3c5f10000.000055d3c603e000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: hidakibest.arm4.elf, 6252.1.00007ffdb004a000.00007ffdb006b000.rw-.sdmp, hidakibest.arm4.elf, 6254.1.00007ffdb004a000.00007ffdb006b000.rw-.sdmp	Binary or memory string: rx86_64/usr/bin/qemu-arm/tmp/hidakibest.arm4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.arm4.elf
Source: hidakibest.arm4.elf, 6252.1.000055d3c5f10000.000055d3c603e000.rw-.sdmp, hidakibest.arm4.elf, 6254.1.000055d3c5f10000.000055d3c603e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: hidakibest.arm4.elf, 6252.1.00007ffdb004a000.00007ffdb006b000.rw-.sdmp, hidakibest.arm4.elf, 6254.1.00007ffdb004a000.00007ffdb006b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm4.elf, type: SAMPLE
Source: Yara match	File source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm4.elf, type: SAMPLE
Source: Yara match	File source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm4.elf PID: 6252, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm4.elf PID: 6254, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm4.elf, type: SAMPLE
Source: Yara match	File source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm4.elf, type: SAMPLE
Source: Yara match	File source: 6254.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6252.1.00007ff86c017000.00007ff86c02a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm4.elf PID: 6252, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm4.elf PID: 6254, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.216.71.152:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.arm4.elf	63%	Virustotal		Browse
hidakibest.arm4.elf	68%	ReversingLabs	Linux.Trojan.Mirai
hidakibest.arm4.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.216.71.152:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.arm4.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.arm4.elf	false	unknown
http://fast.no/support/crawler.asp)	hidakibest.arm4.elf	false	unknown
http://feedback.redkolibri.com/	hidakibest.arm4.elf	false	unknown
http://www.baidu.com/search/spider.htm)	hidakibest.arm4.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false
185.216.71.152	unknown	Germany	43659	CLOUDCOMPUTINGDE	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	Space.arm7.elf	Get hash	malicious	Mirai	Browse
	Space.arm.elf	Get hash	malicious	Mirai	Browse
	Space.sh4.elf	Get hash	malicious	Mirai	Browse
	Space.x86.elf	Get hash	malicious	Mirai	Browse
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	vlxx.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	Space.arm7.elf	Get hash	malicious	Mirai	Browse
	Space.arm.elf	Get hash	malicious	Mirai	Browse
	Space.sh4.elf	Get hash	malicious	Mirai	Browse
	Space.x86.elf	Get hash	malicious	Mirai	Browse
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	vlxx.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
185.216.71.152	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
185.216.71.152	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	Space.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	91.189.91.42
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	vlxx.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
CANONICAL-ASGB	Space.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	91.189.91.42
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	vlxx.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
CLOUDCOMPUTINGDE	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	85.31.47.165
	6G4au3vWsI.lnk	Get hash	malicious	Unknown	Browse	80.76.51.231
	tegga.hta	Get hash	malicious	Xmrig	Browse	185.216.68.189
	KzHndnydSG.dll	Get hash	malicious	CobaltStrike	Browse	185.216.71.202
	bot.sh4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	80.76.51.45
INIT7CH	Space.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	109.202.202.202
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	vlxx.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	6.041669298525509
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.arm4.elf
File size:	115'077 bytes
MD5:	0b9c50ac49e202f06421ab0bb325468e
SHA1:	3c3e2fa064f80ef9a9a5580abc747764c2950872
SHA256:	96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f
SHA512:	b6c5fb6a6a5ce7b8575db7b78d26cd24cfa9e3f66a6a0760c5442a5f6422432aec1ca5e79cc121b8a14303ccdaea1fd1aca9378297c3507157ababc90ddee05e
SSDEEP:	3072:vhfviOui5FCRSUaVejY68tu5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtu5hqSr3hGm0Qxu1rWIn
TLSH:	9DB32849F5048653C1D32B7ABB8B434A37226AE597DB33155638BFF03FC269A1D36980
File Content Preview:	.ELF...a..........(.........4....R......4. ...(..........................................0...0...0.......i..........Q.td..................................-...L."....;..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	86780
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xeecc	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x16f7c	0xef7c	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x16f90	0xef90	0x3f0c	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x23000	0x13000	0x4	0x0	0x3	WA	0	0	4
.ctors	PROGBITS	0x23004	0x13004	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x2300c	0x1300c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x23014	0x13014	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x23018	0x13018	0x370	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x23388	0x13388	0x6660	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x13388	0xbb0	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x13f38	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x14058	0x70d	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x14765	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x14819	0x978	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x15194	0xa0	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x15234	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x15244	0xb8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x15644	0x46a0	0x10	0x0		20	622	4
.strtab	STRTAB	0x0	0x19ce4	0x24a1	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x12e9c	0x12e9c	6.2357	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x13000	0x23000	0x23000	0x388	0x69e8	4.0581	0x6	RW	0x8000	.eh_frame .ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x16f7c	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x16f90	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x23000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x23004	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2300c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x23014	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x23018	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x23388	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x16f7c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f88	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x16f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x16f8c	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x94d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x98f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9be0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xade4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb79c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb928	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc268	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc448	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc470	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc49c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc54c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc600	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc65c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc664	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc66c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc724	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc854	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc91c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd10c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd144	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd2e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd32c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd86c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd8a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd960	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdaa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdbb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe13c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe168	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe1c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe1f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe220	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe24c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe2f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe35c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf06c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf3b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf85c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfab8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10154	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1018c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x101d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10478	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x104d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1054c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10554	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10604	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10664	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10690	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10818	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x108d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ae4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10edc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x120a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x126e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13348	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1346c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x138b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14004	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1413c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14198	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14258	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14284	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14370	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14420	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14b50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x153d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15414	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15454	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15924	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15db0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15de0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fe4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x161cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16274	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16898	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16eec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23004	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x2300c	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x16f70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23028	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x94cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x98ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18658	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9bdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9e9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa058	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa9dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xadfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb770	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb91c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc138	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x28	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x48	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0xc6ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc6e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23128	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x197fc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x23130	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x19afc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xc6ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc850	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc860	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc90c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23138	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x19dfc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xd058	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19e30	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xd2dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd83c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23274	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x19e38	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xdb84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdc80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xde74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19ebc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xdef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe090	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe108	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe2ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23278	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf04c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf090	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf184	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23290	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf1fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf288	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf39c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x232a8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf504	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aa28	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf858	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf8dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23354	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf99c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfacc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10090	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x101cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1043c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2336c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10544	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10600	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x106e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23378	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1aaa2	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x108d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1096c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ada4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x295c8	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x10ae0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10e68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x110dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11494	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12084	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1add0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12154	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12318	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1263c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x137bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x137f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1382c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1412c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1479c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14b48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1539c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23380	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x15410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15450	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1581c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23382	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1ae7c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x158c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15fe0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x161c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x50	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x70	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x78	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x98	0	NOTYPE	<unknown>	DEFAULT	16
C.1.3461	.symtab	0x1ada4	24	OBJECT	<unknown>	DEFAULT	4
C.70.5136	.symtab	0x18658	104	OBJECT	<unknown>	DEFAULT	4
C.77.5235	.symtab	0x192ec	1128	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xda68	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xda84	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x233b8	16384	OBJECT	<unknown>	DEFAULT	10
Randhex	.symtab	0x9ea0	444	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x9a40	416	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x9d40	352	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0xc448	40	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x23008	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x23004	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x23128	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x197fc	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x23378	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1aaa2	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x23130	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x19afc	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x23010	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x2300c	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x23000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x23000	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x23128	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower	.symtab	0x23378	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper	.symtab	0x23130	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_b	.symtab	0x2312c	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x2337c	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x23134	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0xc6e4	12	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xc3e4	100	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x12510	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0xdd80	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x10ad8	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xc380	100	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0xe314	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0xe338	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0xe2f0	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x100e8	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1018c	76	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0xdd94	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xc448	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0xf094	256	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0xf6b0	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x137f8	56	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xc470	44	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x10580	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xc49c	44	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x10744	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x10e08	48	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x10e38	52	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x10ae4	804	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xe110	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x295c8	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0xf85c	156	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x10f88	368	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xc380	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x12340	464	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x120a8	188	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x12510	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x12164	156	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12640	148	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x110f8	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xc4c8	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0xd86c	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x13ff8	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x14004	312	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x13830	80	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0xd8a0	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x12510	304	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x105ac	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x105d4	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x105dc	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x105e4	8	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xe0b8	8	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0xe0c0	80	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x130b0	664	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x15924	764	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x15c20	112	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x105ec	24	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xc4f4	8	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x10604	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xe13c	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x10630	8	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x295cc	4	OBJECT	<unknown>	HIDDEN	10
__GI_htonl	.symtab	0xdfb0	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0xdf9c	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0xe094	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x12fc0	240	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xe088	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xe004	132	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x148e4	620	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x145a4	512	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0xf5e8	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xc4fc	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0xdf04	32	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0xc698	24	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xc54c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x15d38	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x12b70	244	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xd970	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x15da0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x12c64	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x12c7c	220	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xd980	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x10478	96	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x13880	48	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x10638	44	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x10664	44	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0xdfe4	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0xdfd0	20	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xc578	92	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x108d4	156	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x15c90	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x13348	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0xf198	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0xf47c	140	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x14370	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xc5d4	44	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x10a04	212	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xe198	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x10690	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xc600	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xe1c4	44	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xc630	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xe1f0	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0xf3b4	200	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x104d8	116	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xe24c	164	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x106e8	48	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0xf8f8	168	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xe220	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0xc6f0	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0xf508	224	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x15cbc	80	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0xde7c	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xdaa0	236	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x12d58	232	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xda20	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xda20	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xdb8c	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x12e40	64	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x15db0	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xda40	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x14420	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0xdbb0	216	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x12f80	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x12e80	68	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x12ec4	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xdc88	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xdef8	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x12f0c	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0xf6bc	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0xfab8	1528	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0xdf24	120	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xc65c	8	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xc6b0	52	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x15d0c	44	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0xc724	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x10718	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xc664	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x10e6c	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x10edc	172	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x10ebc	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xc66c	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x23014	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x23014	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x164a4	736	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x16e74	20	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x16e74	20	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x16e58	48	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x16eec	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x164a4	736	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x16e88	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x16ec4	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x16ed8	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x16eb0	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x16e9c	20	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x16bc0	516	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x16898	808	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x16498	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x164a0	740	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x167d8	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x167ac	44	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x16274	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv0	.symtab	0xc334	4	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1639c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1682c	108	FUNC	<unknown>	HIDDEN	2
__aeabi_ldiv0	.symtab	0xc334	4	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x16784	40	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xc158	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xc250	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x16818	128	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x295c0	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x23354	24	OBJECT	<unknown>	DEFAULT	9
__bss_end__	.symtab	0x299e8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x23388	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x23388	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10154	56	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x15860	124	FUNC	<unknown>	HIDDEN	2
__cmpdf2	.symtab	0x16dd4	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2312c	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x2337c	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x23134	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x295d0	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x23018	0	NOTYPE	<unknown>	DEFAULT	9
__decode_dotted	.symtab	0x14b50	244	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x15ec8	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x10550	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x1054c	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xc334	4	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x16bc0	516	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x16274	296	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x14c44	1936	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x16f40	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x2301c	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x161cc	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x15de0	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x15f7c	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x299e8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x295b8	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x16dd4	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xc6e4	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x295b0	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x167d8	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0xc3e4	100	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x12510	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x23004	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x23004	0	NOTYPE	<unknown>	HIDDEN	6
__fixunsdfsi	.symtab	0x16eec	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1682c	108	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x167ac	44	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x16818	128	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x16784	40	FUNC	<unknown>	HIDDEN	2
__gedf2	.symtab	0x16dc4	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x158dc	72	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x13e98	352	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x105ec	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0xdd80	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x16dc4	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x10ad8	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x23004	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x23004	0	NOTYPE	<unknown>	HIDDEN	6
__ledf2	.symtab	0x16dcc	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xc49c	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xe110	44	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xc380	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xc4c8	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x15d38	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x10664	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xc578	92	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xc5d4	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xe198	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xc600	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xe1c4	44	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x104d8	116	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x295b4	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0xc664	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xc66c	44	FUNC	<unknown>	DEFAULT	2
__local_nameserver	.symtab	0x1ae7c	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x16dcc	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0xecbc	424	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0xe35c	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x23278	24	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x29654	888	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0xec18	164	FUNC	<unknown>	DEFAULT	2
__modsi3	.symtab	0x163b4	228	FUNC	<unknown>	HIDDEN	2
__muldf3	.symtab	0x16898	808	FUNC	<unknown>	HIDDEN	2
__muldi3	.symtab	0xc338	72	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x299dc	4	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x299e0	4	OBJECT	<unknown>	HIDDEN	10
__nedf2	.symtab	0x16dd4	132	FUNC	<unknown>	HIDDEN	2
__open_etc_hosts	.symtab	0x15fd8	12	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x15454	1036	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x295bc	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x23004	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x23004	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x23370	4	OBJECT	<unknown>	DEFAULT	9
__progname_full	.symtab	0x23374	4	OBJECT	<unknown>	DEFAULT	9
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x100b8	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x100b0	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x100b0	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x100b0	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x100b0	8	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x15fe4	488	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x299d4	4	OBJECT	<unknown>	HIDDEN	10
__resolv_attempts	.symtab	0x23383	1	OBJECT	<unknown>	HIDDEN	9
__resolv_lock	.symtab	0x295d8	24	OBJECT	<unknown>	DEFAULT	10
__resolv_timeout	.symtab	0x23382	1	OBJECT	<unknown>	HIDDEN	9
__rtld_fini	.symtab	0x295c4	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x299d8	4	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x299e4	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0xe314	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xe338	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xe2f0	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x23144	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x1413c	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x11104	212	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x14198	192	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x114c4	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0xc854	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4591	.symtab	0x19dfc	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x14258	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x14340	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x14284	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x115fc	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0xc91c	44	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x23148	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x164a0	740	FUNC	<unknown>	HIDDEN	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x10554	44	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x100e8	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1018c	76	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x101d8	672	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2336c	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xc158	248	FUNC	<unknown>	HIDDEN	2
__umodsi3	.symtab	0xc268	204	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0xdd94	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x13bc0	728	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x138b0	784	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x293c0	10	OBJECT	<unknown>	DEFAULT	10
_bss_end__	.symtab	0x299e8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0xc948	80	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x295fc	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_handler	.symtab	0x29624	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_spec	.symtab	0x23274	4	OBJECT	<unknown>	HIDDEN	9
_dl_aux_init	.symtab	0x137d4	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x299cc	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x299d0	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x23388	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x299e8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x295c8	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xc448	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x16f7c	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x273c0	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0xc998	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x11908	1952	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x295cc	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x11700	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x126e0	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0xd074	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0xd32c	1344	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0xd10c	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0xd144	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0xd2e0	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x100c8	32	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x100c0	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2964c	8	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x111d8	748	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0xc7d8	124	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2314c	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x23150	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x12200	320	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x273bc	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x23168	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x273b8	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x23184	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0xc864	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x23180	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0xf6c4	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x11774	64	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x19ecc	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x117b4	340	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0xca18	1628	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0xf094	256	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0xf6b0	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0xf6b0	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0xd950	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x295ac	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x137f8	56	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xe24c	164	FUNC	<unknown>	DEFAULT	2
buf.2915	.symtab	0x293d0	16	OBJECT	<unknown>	DEFAULT	10
buf.5468	.symtab	0x293e0	440	OBJECT	<unknown>	DEFAULT	10
bzero	.symtab	0xd960	12	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x23120	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x16f74	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x13360	268	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0xc470	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x10580	44	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xc49c	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x10744	212	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x23028	4	OBJECT	<unknown>	DEFAULT	9
completed.4916	.symtab	0x23388	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0xe110	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x94d0	640	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x2311c	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x23024	0	NOTYPE	<unknown>	DEFAULT	9
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x2302c	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x295b8	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x295c8	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0xf85c	156	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1add0	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x10f88	368	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xc380	100	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x10818	188	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x10970	148	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x12340	464	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x120a8	188	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x12510	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x12164	156	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12640	148	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1adbc	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x110f8	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x23018	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x23384	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0xc4c8	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0xd86c	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xee64	520	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x13ff8	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x13ff8	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x14004	312	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x13830	80	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0xd8a0	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xade4	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x9198	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	720	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x120a8	188	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x12510	304	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x105ac	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x105d4	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x105dc	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x105e4	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xe0b8	8	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0xe0c0	80	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x130b0	664	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x15924	764	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x15c20	112	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x105ec	24	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xc4f4	8	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x10604	44	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xe13c	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xe168	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x10630	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x295cc	4	OBJECT	<unknown>	DEFAULT	10
hoste.5467	.symtab	0x29598	20	OBJECT	<unknown>	DEFAULT	10
htonl	.symtab	0xdfb0	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xdf9c	20	FUNC	<unknown>	DEFAULT	2
i.4537	.symtab	0x23124	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0xdaa0	236	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xe094	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x12fc0	240	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xe088	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xe004	132	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x148e4	620	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x147a4	320	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x145a4	512	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x144d8	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xb79c	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0xf2a0	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0xf5e8	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xc4fc	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0xdf04	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xc698	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xc54c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5525	.symtab	0x23380	2	OBJECT	<unknown>	DEFAULT	9
last_ns_num.5524	.symtab	0x295d4	4	OBJECT	<unknown>	DEFAULT	10
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9750	420	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x15d38	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x233b0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xb928	2096	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x233a4	4	OBJECT	<unknown>	DEFAULT	10
malloc	.symtab	0xe3d4	2116	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0xf06c	40	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x12b70	244	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xd970	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x15da0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x12c64	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x12c7c	220	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xd980	156	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x10478	96	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x13880	48	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x10638	44	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x23290	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x232a8	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x10664	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1304	.symtab	0x293cc	4	OBJECT	<unknown>	DEFAULT	10
nprocessors_onln	.symtab	0xf9a0	280	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0xdfe4	32	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xdfd0	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x233a8	8	OBJECT	<unknown>	DEFAULT	10
object.4931	.symtab	0x2338c	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0xc578	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x108d4	156	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x295f4	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0xa05c	3464	FUNC	<unknown>	DEFAULT	2
p.4914	.symtab	0x23020	0	OBJECT	<unknown>	DEFAULT	9
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x295f8	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x15c90	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4811	.symtab	0x19e24	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8ce0	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8908	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8af8	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8974	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xae00	2460	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x23374	4	OBJECT	<unknown>	DEFAULT	9
program_invocation_short_name	.symtab	0x23370	4	OBJECT	<unknown>	DEFAULT	9
qual_chars.4820	.symtab	0x19e38	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x13348	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0xf194	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0xf198	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1aa28	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0xf47c	140	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x232d4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x14370	176	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0xc5d4	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x10a04	212	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1346c	872	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0xe198	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x91fc	724	FUNC	<unknown>	DEFAULT	2
resolv_conf_mtime.5510	.symtab	0x295f0	4	OBJECT	<unknown>	DEFAULT	10
rindex	.symtab	0x12e80	68	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x10690	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0xc600	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 15:59:06.967581034 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 15:59:07.279846907 CET	52112	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:07.399888039 CET	4258	52112	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:07.399967909 CET	52112	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:07.401065111 CET	52112	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:07.521181107 CET	4258	52112	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:08.549227953 CET	4258	52112	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:08.549350977 CET	4258	52112	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:08.549572945 CET	52112	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:08.550143003 CET	52112	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:08.550887108 CET	52114	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:08.670300007 CET	4258	52112	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:08.671056032 CET	4258	52114	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:08.671221972 CET	52114	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:08.671324968 CET	52114	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:08.791593075 CET	4258	52114	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:09.836462975 CET	4258	52114	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:09.836512089 CET	4258	52114	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:09.836709023 CET	52114	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:09.836749077 CET	52114	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:09.837296009 CET	52116	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:09.959522963 CET	4258	52114	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:09.959973097 CET	4258	52116	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:09.960042953 CET	52116	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:09.960189104 CET	52116	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:10.081509113 CET	4258	52116	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:11.131076097 CET	4258	52116	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:11.131134033 CET	4258	52116	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:11.131292105 CET	52116	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:11.131496906 CET	52116	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:11.132282019 CET	52118	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:11.251199007 CET	4258	52116	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:11.252074003 CET	4258	52118	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:11.252310991 CET	52118	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:11.252310991 CET	52118	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:11.372484922 CET	4258	52118	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:12.419882059 CET	4258	52118	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:12.420203924 CET	52118	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:12.420336008 CET	4258	52118	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:12.420423031 CET	52118	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:12.421269894 CET	52120	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:12.539974928 CET	4258	52118	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:12.540796041 CET	4258	52120	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:12.540858030 CET	52120	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:12.541064978 CET	52120	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:12.598963022 CET	42836	443	192.168.2.23	91.189.91.43
Dec 22, 2024 15:59:12.661117077 CET	4258	52120	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:13.366903067 CET	42516	80	192.168.2.23	109.202.202.202
Dec 22, 2024 15:59:13.719902039 CET	4258	52120	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:13.720009089 CET	4258	52120	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:13.720143080 CET	52120	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:13.720189095 CET	52120	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:13.720815897 CET	52122	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:13.840944052 CET	4258	52120	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:13.841486931 CET	4258	52122	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:13.841726065 CET	52122	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:13.841726065 CET	52122	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:13.961642027 CET	4258	52122	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:15.020926952 CET	4258	52122	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:15.020993948 CET	4258	52122	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:15.021244049 CET	52122	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:15.021244049 CET	52122	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:15.021929026 CET	52124	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:15.141316891 CET	4258	52122	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:15.141762018 CET	4258	52124	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:15.141849041 CET	52124	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:15.142029047 CET	52124	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:15.261493921 CET	4258	52124	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:16.290815115 CET	4258	52124	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:16.290947914 CET	4258	52124	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:16.291096926 CET	52124	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:16.291098118 CET	52124	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:16.291769981 CET	52126	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:16.410907984 CET	4258	52124	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:16.411581039 CET	4258	52126	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:16.411835909 CET	52126	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:16.411835909 CET	52126	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:16.532613039 CET	4258	52126	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:17.605806112 CET	4258	52126	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:17.605864048 CET	4258	52126	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:17.605978966 CET	52126	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:17.606048107 CET	52126	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:17.606806993 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:17.725810051 CET	4258	52126	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:17.726490974 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:17.726614952 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:17.726679087 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:17.846157074 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:18.891154051 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:18.891330957 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:18.891587973 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:18.891588926 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:18.892086029 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:19.011850119 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:19.011980057 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:19.012195110 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:19.012195110 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:19.131859064 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:20.193525076 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:20.193625927 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:20.193913937 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:20.194060087 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:20.194888115 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:20.313756943 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:20.314508915 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:20.314747095 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:20.314822912 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:20.434530973 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:21.461417913 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:21.461493969 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:21.461843014 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:21.461941957 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:21.462743998 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:21.581515074 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:21.582262039 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:21.582420111 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:21.582743883 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:21.703821898 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:22.731285095 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:22.731421947 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:22.731683016 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:22.731851101 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:22.732892990 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:22.851459026 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:22.852480888 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:22.852670908 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:22.852911949 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:22.972435951 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:24.012537003 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:24.012598991 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:24.012684107 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:24.012943983 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:24.013747931 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:24.132848024 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:24.133807898 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:24.133894920 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:24.134013891 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:24.253834009 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:25.297791004 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:25.297852993 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:25.298086882 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:25.298086882 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:25.298646927 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:25.420062065 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:25.420233011 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:25.420428991 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:25.420428991 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:25.540566921 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:26.598275900 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:26.598332882 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:26.598614931 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:26.598726988 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:26.599514961 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:26.718348026 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:26.719086885 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:26.719283104 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:26.719284058 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:26.839075089 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:27.444942951 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 15:59:27.872693062 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:27.872745991 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:27.873100042 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:27.873100042 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:27.873823881 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:27.993132114 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:27.993844032 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:27.994055986 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:27.994055986 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:28.113944054 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:29.141798019 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:29.141853094 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:29.142050028 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:29.142050028 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:29.142796993 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:29.261888981 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:29.262419939 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:29.262613058 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:29.262613058 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:29.382328033 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:30.433177948 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:30.433232069 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:30.433768988 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:30.433856010 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:30.434670925 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:30.553592920 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:30.554233074 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:30.554316044 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:30.554541111 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:30.674143076 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:31.839095116 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:31.839397907 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:31.840137005 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:31.840240002 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:31.841093063 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:31.960930109 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:31.961427927 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:31.961530924 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:31.961738110 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:32.082943916 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:33.164061069 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:33.164091110 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:33.164477110 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:33.164477110 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:33.165257931 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:33.284181118 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:33.284764051 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:33.285003901 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:33.285003901 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:33.404728889 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:34.482568979 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:34.482641935 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:34.482861996 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:34.483000994 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:34.483985901 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:34.603202105 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:34.604047060 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:34.604167938 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:34.604168892 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:34.723861933 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:35.984065056 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:35.984339952 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:35.984340906 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:35.984472036 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:35.985229969 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:36.104541063 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:36.104994059 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:36.105151892 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:36.105151892 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:36.227348089 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:37.377876997 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:37.377926111 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:37.378063917 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:37.378063917 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:37.378614902 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:37.497680902 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:37.498255014 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:37.498361111 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:37.498517990 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:37.618004084 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:38.778698921 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:38.778762102 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:38.778842926 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:38.778917074 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:38.779546976 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:38.898684978 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:38.899230003 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:38.899511099 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:38.899563074 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:39.019428015 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:39.731220007 CET	42836	443	192.168.2.23	91.189.91.43
Dec 22, 2024 15:59:43.146058083 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:43.146109104 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:43.146307945 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:43.146481037 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:43.147172928 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:43.266047955 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:43.266710043 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:43.266803026 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:43.267060995 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:43.386528969 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:43.826687098 CET	42516	80	192.168.2.23	109.202.202.202
Dec 22, 2024 15:59:44.471110106 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:44.471157074 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:44.471400976 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:44.471507072 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:44.472256899 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:44.591979980 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:44.592711926 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:44.592796087 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:44.593063116 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:44.713063955 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:46.497661114 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:46.497909069 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:46.498632908 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:46.617772102 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:46.618171930 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:46.618263960 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:46.618505955 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:46.738239050 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:47.894629002 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:47.894766092 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:47.894774914 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:47.894927979 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:47.895540953 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:48.014739990 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:48.015180111 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:48.015276909 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:48.015492916 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:48.135724068 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:49.247308969 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:49.247383118 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:49.247528076 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:49.247642040 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:49.248502016 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:49.367366076 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:49.368303061 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:49.368441105 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:49.368565083 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:49.488379955 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:53.689805984 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:53.690006018 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:53.690047026 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:53.690226078 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:53.691078901 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:53.811769962 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:53.812741995 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:53.812856913 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:53.812963009 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:53.932770967 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:58.286940098 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:58.287358046 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:58.288243055 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:58.407021046 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:58.407891989 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:58.408014059 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:58.408154964 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:58.527796984 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:59.874969959 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:59.875336885 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:59.876107931 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:59.995465040 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:59.995919943 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 15:59:59.996040106 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 15:59:59.996150017 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:00.115947008 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:01.240061045 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:01.240108013 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:01.240226030 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:01.240339041 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:01.241096973 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:01.360467911 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:01.360941887 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:01.361141920 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:01.361270905 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:01.481018066 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:02.809314966 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:02.809786081 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:02.810663939 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:02.929703951 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:02.930475950 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:02.930583954 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:02.930696011 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:03.050298929 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:04.137660027 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:04.137720108 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:04.138025999 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:04.138025999 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:04.139178991 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:04.258280039 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:04.259658098 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:04.259912014 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:04.260062933 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:04.380166054 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:08.399360895 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:00:08.430742979 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:08.430792093 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:08.431036949 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:08.431252003 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:08.432351112 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:08.551187992 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:08.552453041 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:08.552710056 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:08.552876949 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:08.672780991 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:09.718288898 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:09.718343019 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:09.718612909 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:09.718794107 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:09.719911098 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:09.838834047 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:09.839687109 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:09.839953899 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:09.840061903 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:09.961158037 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:11.001786947 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:11.001888037 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:11.002249002 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:11.002295971 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:11.003865004 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:11.122692108 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:11.123775005 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:11.124104977 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:11.124196053 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:11.244229078 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:12.302375078 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:12.302423000 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:12.302675009 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:12.302882910 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:12.304112911 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:12.424385071 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:12.425642014 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:12.425710917 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:12.425750017 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:12.545489073 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:13.592130899 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:13.592295885 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:13.592346907 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:13.592489004 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:13.593461990 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:13.712513924 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:13.713594913 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:13.713823080 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:13.714063883 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:13.835393906 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:14.862848043 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:14.862952948 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:14.863130093 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:14.863359928 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:14.864748001 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:14.983530045 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:14.984769106 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:14.984885931 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:14.985146046 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:15.106384039 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:16.146825075 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:16.146883011 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:16.147135973 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:16.147413015 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:16.149321079 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:16.267414093 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:16.269481897 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:16.269860983 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:16.269962072 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:16.390185118 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:17.425430059 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:17.425484896 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:17.425790071 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:17.425895929 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:17.426742077 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:17.546184063 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:17.546462059 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:17.546591997 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:17.546681881 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:17.666866064 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:18.724575996 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:18.724668026 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:18.724898100 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:18.725271940 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:18.726721048 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:18.845822096 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:18.846716881 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:18.846976995 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:18.847250938 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:18.967078924 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:20.025465012 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:20.025518894 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:20.025850058 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:20.025929928 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:20.027493954 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:20.147238016 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:20.148096085 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:20.148324966 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:20.148574114 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:20.268284082 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:21.325511932 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:21.325542927 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:21.325809956 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:21.325953960 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:21.327398062 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:21.445590973 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:21.447072983 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:21.447467089 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:21.447468042 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:21.567490101 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:22.627063990 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:22.627252102 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:22.627598047 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:22.627599001 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:22.628762007 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:22.747411013 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:22.748382092 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:22.748794079 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:22.748884916 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:22.871901989 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:23.900326014 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:23.900351048 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:23.900676966 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:23.900846958 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:23.902539015 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:24.020663977 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:24.022104025 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:24.022466898 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:24.022505999 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:24.142560959 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:25.178163052 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:25.178212881 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:25.178423882 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:25.178423882 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:25.179117918 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:25.298574924 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:25.299189091 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:25.299422979 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:25.299547911 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:25.419125080 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:26.481544018 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:26.481581926 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:26.482062101 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:26.482062101 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:26.483141899 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:26.602855921 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:26.603183031 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:26.603439093 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:26.603580952 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:26.723443031 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:27.768870115 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:27.768990993 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:27.769269943 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:27.769269943 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:27.770804882 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:27.889257908 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:27.890387058 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:27.890563011 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:27.890563011 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:28.010246992 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:29.044399977 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:29.044461966 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:29.044709921 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:29.044894934 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:29.046372890 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:29.165935993 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:29.167192936 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:29.167483091 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:29.167583942 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:29.287189007 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:30.344968081 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:30.344994068 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:30.345339060 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:30.345444918 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:30.346884012 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:30.465436935 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:30.466507912 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:30.466737986 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:30.466737986 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:30.586502075 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:31.629729986 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:31.629785061 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:31.630070925 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:31.630070925 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:31.631088018 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:31.750267982 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:31.750693083 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:31.750791073 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:31.750878096 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:31.872708082 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:33.047549963 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:33.047730923 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:33.047862053 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:33.048160076 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:33.049504042 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:33.169739008 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:33.170670033 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:33.170928955 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:33.171063900 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:33.291078091 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:34.325393915 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:34.325452089 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:34.325823069 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:34.325973988 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:34.327182055 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:34.452474117 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:34.453169107 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:34.453423977 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:34.453423977 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:34.573410988 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:35.630497932 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:35.630558014 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:35.630743980 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:35.630923033 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:35.631886959 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:35.751583099 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:35.752831936 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:35.752928972 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:35.752988100 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:35.880234957 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:36.931169987 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:36.931205034 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:36.931483030 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:36.931679964 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:36.933255911 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:37.052701950 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:37.054301023 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:37.054562092 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:37.054701090 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:37.174362898 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:38.266784906 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:38.266849995 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:38.266968966 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:38.267086983 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:38.268002033 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:38.387204885 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:38.387804985 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:38.387903929 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:38.388015985 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:38.508124113 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:39.541259050 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:39.541286945 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:39.541388988 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:39.541534901 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:39.542253971 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:39.661447048 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:39.662082911 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:39.662389994 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:39.662528038 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:39.782226086 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:40.829945087 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:40.830044031 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:40.830136061 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:40.830250025 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:40.831059933 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:40.950102091 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:40.950792074 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:40.950910091 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:40.950968027 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:41.071194887 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:42.139440060 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:42.139529943 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:42.139667988 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:42.139740944 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:42.140682936 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:42.259507895 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:42.260238886 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:42.260530949 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:42.260675907 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:42.380258083 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:43.453577042 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:43.453638077 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:43.453743935 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:43.453872919 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:43.454687119 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:43.574003935 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:43.574681997 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:43.574858904 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:43.574918032 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:43.696953058 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:44.773073912 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:44.773124933 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:44.773344040 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:44.773415089 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:44.774925947 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:44.894205093 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:44.895456076 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:44.895757914 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:44.896025896 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:45.015568972 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:46.174138069 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:46.174206018 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:46.174499035 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:46.174747944 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:46.176320076 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:46.295464039 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:46.296778917 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:46.297049999 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:46.297405958 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:46.419601917 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:47.449783087 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:47.449877024 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:47.450103045 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:47.450341940 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:47.451734066 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:47.570085049 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:47.571444988 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:47.571697950 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:47.572081089 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:47.691848040 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:48.751101971 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:48.751133919 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:48.751570940 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:48.751765013 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:48.752979994 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:48.871335983 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:48.872618914 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:48.872994900 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:48.873136997 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:48.992939949 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:50.051563978 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:50.051621914 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:50.051794052 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:50.052146912 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:50.053108931 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:50.172369003 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:50.174835920 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:50.175076962 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:50.175343990 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:50.295979023 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:51.404565096 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:51.404622078 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:51.404912949 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:51.405199051 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:51.406810045 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:51.525345087 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:51.526875973 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:51.527149916 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:51.527405977 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:51.647341967 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:52.680960894 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:52.681052923 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:52.681308031 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:52.681593895 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:52.683258057 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:52.801464081 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:52.803384066 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:52.803778887 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:52.803874016 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:52.924066067 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:54.043031931 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:54.043106079 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:54.043236017 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:54.043468952 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:54.044661045 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:54.165798903 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:54.166536093 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:54.166747093 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:54.166892052 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:54.287476063 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:55.348421097 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:55.348476887 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:55.348970890 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:55.348972082 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:55.350373030 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:55.468667030 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:55.469909906 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:55.470133066 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:55.470191002 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:55.590017080 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:56.637155056 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:56.637213945 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:56.637252092 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:56.637326002 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:56.638032913 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:56.758244038 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:56.758899927 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:56.759084940 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:56.759139061 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:56.879031897 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:58.021576881 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:58.021605968 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:58.021723032 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:58.021811962 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:58.023523092 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:58.141572952 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:58.143085003 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:58.143343925 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:58.143457890 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:58.263264894 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:59.363814116 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:59.363868952 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:59.364293098 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:59.364577055 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:59.365991116 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:59.485009909 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:59.486211061 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:00:59.486607075 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:59.486607075 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:00:59.606403112 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:00.931483984 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:00.931843042 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:00.932677031 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:01.051816940 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:01.052290916 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:01.052489996 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:01.052563906 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:01.172663927 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:02.295633078 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:02.295665026 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:02.295823097 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:02.295943022 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:02.297211885 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:02.415765047 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:02.417294979 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:02.417515039 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:02.417644978 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:02.537302017 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:03.655787945 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:03.655927896 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:03.656095028 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:03.656141043 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:03.657913923 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:03.776148081 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:03.777637959 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:03.777828932 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:03.777893066 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:03.897763968 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:04.995666027 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:04.995713949 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:04.995927095 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:04.996056080 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:04.997318029 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:05.116249084 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:05.117222071 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:05.117629051 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:05.117676973 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:05.239001036 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:06.316657066 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:06.316767931 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:06.316965103 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:06.317158937 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:06.318535089 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:06.438649893 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:06.439882994 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:06.440000057 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:06.440108061 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:06.560106993 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:07.687113047 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:07.687156916 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:07.687366962 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:07.687719107 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:07.689202070 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:07.807295084 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:07.808953047 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:07.809211016 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:07.809211016 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:07.928940058 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:09.036007881 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:09.036031008 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:09.036365032 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:09.036530018 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:09.038079977 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:09.156347036 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:09.158364058 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:09.158653021 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:09.158804893 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:09.278852940 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:10.389831066 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:10.389878988 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:10.390131950 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:10.390281916 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:10.391832113 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:10.510363102 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:10.511712074 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:10.511821985 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:10.512082100 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:10.632736921 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:11.752832890 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:11.752890110 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:11.753150940 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:11.753307104 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:11.754709005 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:11.876491070 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:11.877814054 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:11.878180981 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:11.878269911 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:11.999959946 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:13.077159882 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:13.077233076 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:13.077495098 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:13.077739000 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:13.079322100 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:13.197462082 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:13.198966980 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:13.199141026 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:13.199398994 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:13.319089890 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:14.386672974 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:14.386697054 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:14.387193918 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:14.387195110 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:14.387958050 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:14.507272959 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:14.507735014 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:14.507991076 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:14.508105993 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:14.627876043 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:15.668397903 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:15.668421030 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:15.668680906 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:15.668745995 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:15.669651031 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:15.789365053 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:15.790461063 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:15.790693045 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:15.790863991 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:15.910424948 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:16.967324972 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:16.967361927 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:16.967529058 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:16.967720985 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:16.968899012 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:17.087563992 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:17.088577032 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:17.088922977 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:17.089047909 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:17.208731890 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:18.267059088 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:18.267112017 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:18.267584085 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:18.267584085 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:18.268275976 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:18.387562990 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:18.387890100 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:18.388123035 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:18.388200998 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:18.507730961 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:19.539402962 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:19.539450884 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:19.539700985 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:19.539978027 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:19.541116953 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:19.659933090 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:19.660927057 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:19.661114931 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:19.661439896 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:19.781608105 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:20.825555086 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:20.825647116 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:20.825869083 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:20.826076984 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:20.827613115 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:20.945909023 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:20.947200060 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:20.947415113 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:20.947488070 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:21.067568064 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:22.101119041 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:22.101392984 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:22.101504087 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:22.101878881 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:22.103298903 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:22.221898079 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:22.223849058 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:22.224185944 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:22.224325895 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:22.344139099 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:23.378108978 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:23.378153086 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:23.378345966 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:23.378662109 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:23.379443884 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:23.498750925 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:23.499494076 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:23.499783993 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:23.499947071 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:23.620066881 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:24.669996977 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:24.670047998 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:24.670392036 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:24.670515060 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:24.671519995 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:24.790272951 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:24.791269064 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:24.791484118 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:24.791762114 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:24.911830902 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:25.964135885 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:25.964159966 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:25.964428902 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:25.964575052 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:25.965459108 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:26.084563017 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:26.085161924 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:26.085382938 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:26.085658073 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:26.205482960 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:27.232774019 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:27.232796907 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:27.233093023 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:27.233130932 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:27.233771086 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:27.353001118 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:27.353437901 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:27.353534937 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:27.353595972 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:27.473381042 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:28.514399052 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:28.514574051 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:28.514895916 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:28.514992952 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:28.516598940 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:28.636058092 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:28.637444019 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:28.637645960 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:28.637690067 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:28.757558107 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:29.799264908 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:29.799457073 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:29.799679995 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:29.799770117 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:29.800817966 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:29.923511982 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:29.924690962 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:29.924812078 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:29.924886942 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:30.047414064 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:31.096631050 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:31.096899033 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:31.096971035 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:31.097249031 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:31.098351002 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:31.216903925 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:31.218452930 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:31.218720913 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:31.218816042 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:31.338654041 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:32.395416975 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:32.395562887 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:32.395688057 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:32.395761967 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:32.396481037 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:32.516602039 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:32.518898964 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:32.518979073 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:32.519046068 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:32.641079903 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:33.701241970 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:33.701258898 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:33.701543093 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:33.701709986 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:33.703095913 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:33.821573019 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:33.823208094 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:33.823278904 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:33.823362112 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:33.943654060 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:34.984982967 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:34.985148907 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:34.985430956 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:34.985538006 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:34.986500025 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:35.105360031 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:35.106184959 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:35.106437922 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:35.106583118 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:35.228318930 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:36.283210039 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:36.283298016 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:36.283508062 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:36.283699989 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:36.285130024 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:36.403326035 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:36.404989958 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:36.405216932 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:36.405349970 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:36.524889946 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:37.552704096 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:37.552782059 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:37.553152084 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:37.553381920 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:37.554812908 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:37.673069954 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:37.674493074 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:37.674698114 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:37.674954891 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:37.795126915 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:38.853359938 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:38.853384018 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:38.853477955 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:38.853548050 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:38.854588985 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:38.973625898 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:38.974361897 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:38.974622011 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:38.974925041 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:39.094990015 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:40.126019955 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:40.126049995 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:40.126190901 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:40.126343012 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:40.127346039 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:40.246542931 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:40.246922970 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:40.247123957 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:40.247169018 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:40.367121935 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:41.560256958 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:41.560285091 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:41.560628891 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:41.560628891 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:41.562618971 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:41.680644035 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:41.682652950 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:41.683042049 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:41.683042049 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:41.802980900 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:42.916419029 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:42.916450977 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:42.916677952 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:42.916764975 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:42.918215990 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:43.036457062 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:43.038115978 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:43.038345098 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:43.038552999 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:43.158463001 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:47.242187977 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:47.242213964 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:47.242439985 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:47.242520094 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:47.243752003 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:47.362441063 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:47.363419056 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:47.363594055 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:47.363720894 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:47.483350992 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:48.552895069 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:48.553045988 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:48.553257942 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:48.553375959 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:48.554378986 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:48.672960043 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:48.674119949 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:48.674490929 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:48.674535036 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:48.794981003 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:49.884430885 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:49.884877920 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:49.884938955 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:49.885349989 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:49.885932922 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:50.005106926 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:50.005458117 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:50.005688906 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:50.005835056 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:50.126804113 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:54.220252991 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:54.220284939 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:54.220525980 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:54.220525980 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:54.236242056 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:54.341613054 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:54.356087923 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:54.361387968 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:54.361387968 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:54.481098890 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:55.532711029 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:55.532757998 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:55.532840967 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:55.532913923 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:55.533866882 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:55.653023005 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:55.653515100 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:55.653584003 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:55.653637886 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:55.773266077 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:56.859899044 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:56.859929085 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:56.860219002 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:56.860219955 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:56.860821009 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:56.980163097 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:56.980494022 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:56.980575085 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:56.980633020 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:57.100429058 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:58.138586044 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:58.138616085 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:58.138806105 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:58.138897896 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:58.139839888 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:58.258696079 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:58.259435892 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:58.259533882 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:58.259596109 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:58.379395962 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:59.424113989 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:59.424143076 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:59.424370050 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:59.424370050 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:59.425343037 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:59.545348883 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:59.545531034 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:01:59.545700073 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:59.545700073 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:01:59.665935993 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:00.748207092 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:00.748240948 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:00.748352051 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:00.748434067 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:00.748961926 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:00.868722916 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:00.869252920 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:00.869359016 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:00.869443893 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:00.989389896 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:02.128632069 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:02.128686905 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:02.128958941 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:02.129059076 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:02.129654884 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:02.248925924 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:02.249438047 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:02.249525070 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:02.249610901 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:02.370554924 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:03.486109018 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:03.486167908 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:03.486327887 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:03.486536980 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:03.487588882 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:03.606540918 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:03.607464075 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:03.607549906 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:03.607644081 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:03.727844954 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:04.772245884 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:04.772341967 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:04.772587061 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:04.772788048 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:04.774480104 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:04.892792940 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:04.894449949 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:04.894589901 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:04.894700050 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:05.014563084 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:06.087893963 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:06.088116884 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:06.088255882 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:06.088365078 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:06.089540005 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:06.208148956 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:06.209579945 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:06.209733009 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:06.209841013 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:06.329564095 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:07.378103018 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:07.378155947 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:07.378422976 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:07.378422976 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:07.379179001 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:07.498394966 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:07.498907089 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:07.498990059 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:07.499119997 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:07.618853092 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:08.689539909 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:08.689589977 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:08.689691067 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:08.689786911 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:08.691637993 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:08.811029911 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:08.812870979 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:08.812967062 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:08.813195944 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:08.932848930 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:10.139074087 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:10.139101028 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:10.139431953 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:10.139476061 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:10.140943050 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:10.259385109 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:10.260533094 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:10.260660887 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:10.260792017 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:10.380541086 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:11.527079105 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:11.527105093 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:11.527425051 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:11.527425051 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:11.528585911 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:11.647327900 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:11.648277044 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:11.648595095 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:11.648595095 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:11.768582106 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:12.867091894 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:12.867119074 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:12.867362976 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:12.867363930 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:12.867979050 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:12.987059116 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:12.987637043 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:12.987732887 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:12.987879038 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:13.107800007 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:14.252438068 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:14.252461910 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:14.252585888 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:14.252690077 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:14.254065037 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:14.372467995 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:14.373653889 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:14.373722076 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:14.373883009 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:14.493588924 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:15.553128004 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:15.553188086 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:15.553484917 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:15.553512096 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:15.554528952 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:15.673188925 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:15.674036980 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:15.674310923 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:15.674546957 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:15.794281006 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:16.824870110 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:16.825103045 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:16.825135946 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:16.825387001 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:16.827956915 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:16.944865942 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:16.947972059 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:16.948221922 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:16.948357105 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:17.067943096 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:18.113852978 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:18.113918066 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:18.114145041 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:18.114213943 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:18.115406036 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:18.234088898 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:18.235203981 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:18.235395908 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:18.235593081 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:18.355212927 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:19.389998913 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:19.390049934 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:19.390259981 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:19.390425920 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:19.392954111 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:19.510363102 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:19.512907028 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:19.513236046 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:19.513467073 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:19.634704113 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:20.668668985 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:20.668720961 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:20.669008017 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:20.669096947 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:20.670840025 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:20.789474964 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:20.790841103 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:20.790921926 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:20.790966988 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:20.911052942 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:21.944137096 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:21.944185972 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:21.944439888 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:21.944658041 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:21.946645975 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:22.064892054 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:22.067126036 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:22.067362070 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:22.067542076 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:22.187278032 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:23.243470907 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:23.243520975 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:23.243794918 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:23.243979931 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:23.246346951 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:23.363871098 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:23.366256952 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:23.366678953 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:23.366811991 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:23.487044096 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:24.524308920 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:24.524359941 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:24.524729967 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:24.524730921 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:24.526052952 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:24.644638062 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:24.645704985 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:24.645817995 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:24.645917892 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:24.766644955 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:25.811871052 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:25.811894894 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:25.812052965 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:25.812144995 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:25.813555956 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:25.931690931 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:25.933145046 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:25.933238029 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:25.933434010 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:26.052968025 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:27.088275909 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:27.088299990 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:27.088490009 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:27.088629961 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:27.089576006 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:27.208607912 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:27.209260941 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:27.209507942 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:27.209650040 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:27.329401016 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:28.363980055 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:28.364002943 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:28.364285946 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:28.364419937 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:28.366009951 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:28.484288931 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:28.485634089 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:28.486089945 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:28.486090899 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:28.606044054 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:29.659548998 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:29.659599066 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:29.659939051 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:29.660028934 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:29.661539078 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:29.779937983 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:29.781585932 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:29.781908989 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:29.781909943 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:29.901843071 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:30.929785967 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:30.929837942 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:30.930161953 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:30.930536032 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:30.932364941 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:31.050307035 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:31.052025080 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:31.052304029 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:31.052464962 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:31.172334909 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:32.220758915 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:32.220782995 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:32.221060038 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:32.221204996 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:32.223227978 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:32.341396093 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:32.342885017 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:32.343131065 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:32.343250990 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:32.463047981 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:33.498580933 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:33.498631954 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:33.498853922 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:33.498930931 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:33.500670910 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:33.620762110 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:33.622684002 CET	4258	52396	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:33.623003006 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:33.623003960 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:33.855575085 CET	4258	52396	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:34.801229000 CET	4258	52396	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:34.801420927 CET	4258	52396	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:34.801707983 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:34.801817894 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:34.803898096 CET	52398	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:34.921538115 CET	4258	52396	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:34.923719883 CET	4258	52398	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:34.924206972 CET	52398	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:34.924206972 CET	52398	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:35.044173956 CET	4258	52398	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:36.089303017 CET	4258	52398	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:36.089569092 CET	4258	52398	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:36.089687109 CET	52398	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:36.089850903 CET	52398	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:36.091691017 CET	52400	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:36.210334063 CET	4258	52398	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:36.212265968 CET	4258	52400	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:36.212439060 CET	52400	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:36.212544918 CET	52400	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:36.334825039 CET	4258	52400	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:37.394368887 CET	4258	52400	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:37.394438982 CET	4258	52400	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:37.394680977 CET	52400	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:37.394850016 CET	52400	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:37.396528959 CET	52402	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:37.515819073 CET	4258	52400	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:37.516849995 CET	4258	52402	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:37.517116070 CET	52402	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:37.517252922 CET	52402	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:37.637155056 CET	4258	52402	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:38.674699068 CET	4258	52402	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:38.674747944 CET	4258	52402	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:38.675134897 CET	52402	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:38.675228119 CET	52402	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:38.677450895 CET	52404	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:38.796255112 CET	4258	52402	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:38.797827959 CET	4258	52404	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:38.798098087 CET	52404	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:38.798239946 CET	52404	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:38.918108940 CET	4258	52404	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:39.969693899 CET	4258	52404	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:39.969840050 CET	4258	52404	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:39.970004082 CET	52404	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:39.970172882 CET	52404	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:39.971842051 CET	52406	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:40.090931892 CET	4258	52404	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:40.091491938 CET	4258	52406	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:40.091696024 CET	52406	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:40.091783047 CET	52406	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:40.212275982 CET	4258	52406	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:41.274183989 CET	4258	52406	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:41.274271011 CET	4258	52406	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:41.274415970 CET	52406	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:41.274620056 CET	52406	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:41.276457071 CET	52408	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:41.394210100 CET	4258	52406	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:41.396032095 CET	4258	52408	185.216.71.152	192.168.2.23
Dec 22, 2024 16:02:41.396445990 CET	52408	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:41.396605968 CET	52408	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:02:41.516314030 CET	4258	52408	185.216.71.152	192.168.2.23

System Behavior

Analysis Process: hidakibest.arm4.elf PID: 6252, Parent PID: 6179

General

Start time (UTC):	14:59:05
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm4.elf
Arguments:	/tmp/hidakibest.arm4.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm4.elf PID: 6254, Parent PID: 6252

General

Start time (UTC):	14:59:05
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm4.elf PID: 6256, Parent PID: 6254

General

Start time (UTC):	14:59:05
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.arm4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: hidakibest.arm4.elf PID: 6252, Parent PID: 6179

General

Chronological Activities

Analysis Process: hidakibest.arm4.elf PID: 6254, Parent PID: 6252

General

Chronological Activities

Analysis Process: hidakibest.arm4.elf PID: 6256, Parent PID: 6254

General

Chronological Activities

Linux Analysis Report
hidakibest.arm4.elf