Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
Space.mips.elf

Overview

General Information

Sample name:Space.mips.elf
Analysis ID:1580588
MD5:6cab63028ef5fd2bac408f0ab5cf16e5
SHA1:a984671f085075be3323e58181a19c862f23257b
SHA256:f385391a7252cd586a0b575d08d535aefa36df27e7ea2dde44a572c5a4bb8182
Tags:elfuser-abuse_ch
Infos:

Detection

Score:60
Range:0 - 100
Whitelisted:false

Signatures

Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Enumerates processes within the "proc" file system
Sample contains only a LOAD segment without any section mappings
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1580588
Start date and time:2024-12-25 11:25:06 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 45s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Space.mips.elf
Detection:MAL
Classification:mal60.evad.linELF@0/0@0/0

Runtime Messages

Command:/tmp/Space.mips.elf
PID:5465
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

Memory Dumps

SourceRuleDescriptionAuthorStrings
5467.1.00007fe730400000.00007fe73042c000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x28f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29000:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29014:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29028:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2903c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2908c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5469.1.00007fe730400000.00007fe73042c000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x28f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29000:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29014:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29028:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2903c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2908c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5479.1.00007fe730400000.00007fe73042c000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x28f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29000:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29014:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29028:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2903c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2908c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5465.1.00007fe730400000.00007fe73042c000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x28f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28f9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x28fec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29000:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29014:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29028:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2903c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29050:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29064:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x29078:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x2908c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x290dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.mips.elf PID: 5465Linux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xb1c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb1dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb1f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb204:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb218:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb22c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb240:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb254:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb268:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb27c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb290:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb2a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb2b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb2cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb2e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb2f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb308:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb31c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb330:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb344:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xb358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for submitted file
Source: Space.mips.elfVirustotal: Detection: 49%Perma Link
Source: Space.mips.elfReversingLabs: Detection: 50%
Source: global trafficTCP traffic: 192.168.2.13:37004 -> 154.216.20.216:3778
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: Space.mips.elfString found in binary or memory: http://upx.sf.net

System Summary

barindex
Malicious sample detected (through community Yara rule)
Source: 5467.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5469.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5479.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5465.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.mips.elf PID: 5465, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.mips.elf PID: 5467, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.mips.elf PID: 5469, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.mips.elf PID: 5479, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: LOAD without section mappingsProgram segment: 0x100000
Source: 5467.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5469.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5479.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5465.1.00007fe730400000.00007fe73042c000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.mips.elf PID: 5465, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.mips.elf PID: 5467, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.mips.elf PID: 5469, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.mips.elf PID: 5479, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: classification engineClassification label: mal60.evad.linELF@0/0@0/0

Data Obfuscation

barindex
Sample is packed with UPX
Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sampleString containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/230/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/110/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/231/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/111/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/232/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/112/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/233/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/113/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/234/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/114/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/235/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/115/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/236/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/116/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/237/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/117/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/238/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/118/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/239/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/119/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/3633/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/914/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/10/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/917/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/11/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/12/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/13/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/14/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/15/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/16/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/17/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/18/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/19/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/240/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/3095/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/120/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/241/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/121/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/242/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/122/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/243/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/2/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/123/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/244/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/3/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/124/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/245/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1588/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/125/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/4/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/246/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/126/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/5/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/247/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/127/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/6/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/248/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/128/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/7/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/249/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/129/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/8/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/800/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/9/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1906/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/802/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/803/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/20/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/21/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/22/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/23/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/24/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/25/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/26/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/27/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/28/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/29/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/3420/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1482/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/490/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1480/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/250/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/371/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/130/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/251/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/131/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/252/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/132/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/253/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/254/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1238/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/134/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/255/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/256/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/257/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/378/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/3413/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/258/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/259/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/1475/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/936/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/30/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/816/statusJump to behavior
Source: /tmp/Space.mips.elf (PID: 5465)File opened: /proc/35/statusJump to behavior
Source: Space.mips.elfSubmission file: segment LOAD with 7.9486 entropy (max. 8.0)
Source: /tmp/Space.mips.elf (PID: 5465)Queries kernel information via 'uname': Jump to behavior
Source: Space.mips.elf, 5465.1.00005617bd163000.00005617bd20b000.rw-.sdmp, Space.mips.elf, 5467.1.00005617bd163000.00005617bd20b000.rw-.sdmp, Space.mips.elf, 5469.1.00005617bd163000.00005617bd20b000.rw-.sdmp, Space.mips.elf, 5479.1.00005617bd163000.00005617bd20b000.rw-.sdmpBinary or memory string: V!/etc/qemu-binfmt/mips
Source: Space.mips.elf, 5465.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmp, Space.mips.elf, 5467.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmp, Space.mips.elf, 5469.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmp, Space.mips.elf, 5479.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmpBinary or memory string: >x86_64/usr/bin/qemu-mips/tmp/Space.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Space.mips.elf
Source: Space.mips.elf, 5465.1.00005617bd163000.00005617bd20b000.rw-.sdmp, Space.mips.elf, 5467.1.00005617bd163000.00005617bd20b000.rw-.sdmp, Space.mips.elf, 5469.1.00005617bd163000.00005617bd20b000.rw-.sdmp, Space.mips.elf, 5479.1.00005617bd163000.00005617bd20b000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/mips
Source: Space.mips.elf, 5465.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmp, Space.mips.elf, 5467.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmp, Space.mips.elf, 5469.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmp, Space.mips.elf, 5479.1.00007ffc12d0d000.00007ffc12d2e000.rw-.sdmpBinary or memory string: /usr/bin/qemu-mips

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception11
Obfuscated Files or Information		1
OS Credential Dumping		11
Security Software Discovery		Remote ServicesData from Local System1
Non-Standard Port		Exfiltration Over Other Network MediumAbuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1580588 Sample: Space.mips.elf Startdate: 25/12/2024 Architecture: LINUX Score: 60 20 154.216.20.216, 37004, 37006, 37008 SKHT-ASShenzhenKatherineHengTechnologyInformationCo Seychelles 2->20 22 Malicious sample detected (through community Yara rule) 2->22 24 Multi AV Scanner detection for submitted file 2->24 26 Sample is packed with UPX 2->26 8 Space.mips.elf 2->8         started        signatures3 process4 process5 10 Space.mips.elf 8->10         started        12 Space.mips.elf 8->12         started        14 Space.mips.elf 8->14         started        process6 16 Space.mips.elf 10->16         started        18 Space.mips.elf 10->18         started       

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
Space.mips.elf49%VirustotalBrowse
Space.mips.elf50%ReversingLabsLinux.Trojan.Multiverze

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
http://upx.sf.netSpace.mips.elffalse
    		high

    World Map of Contacted IPs

    • No. of IPs < 25%
    • 25% < No. of IPs < 50%
    • 50% < No. of IPs < 75%
    • 75% < No. of IPs

    Public IPs

    IPDomainCountryFlagASNASN NameMalicious
    154.216.20.216
    		unknownSeychelles
    		135357SKHT-ASShenzhenKatherineHengTechnologyInformationCofalse

    Joe Sandbox View / Context

    IPs

    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
    154.216.20.216Space.mpsl.elfGet hashmaliciousUnknownBrowse
      Space.m68k.elfGet hashmaliciousMiraiBrowse
        Space.i686.elfGet hashmaliciousUnknownBrowse

          Domains

          ⊘No context

          ASNs

          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
          SKHT-ASShenzhenKatherineHengTechnologyInformationCoSpace.mpsl.elfGet hashmaliciousUnknownBrowse
          • 154.216.20.216
          Space.m68k.elfGet hashmaliciousMiraiBrowse
          • 154.216.20.216
          Space.i686.elfGet hashmaliciousUnknownBrowse
          • 154.216.20.216
          byte.x86.elfGet hashmaliciousMirai, OkiruBrowse
          • 154.216.19.138
          zerarm7.elfGet hashmaliciousUnknownBrowse
          • 154.216.16.250
          nabm68k.elfGet hashmaliciousUnknownBrowse
          • 154.216.16.244
          nabarm.elfGet hashmaliciousUnknownBrowse
          • 154.216.16.244
          zerppc.elfGet hashmaliciousUnknownBrowse
          • 154.216.16.250
          zerarm5.elfGet hashmaliciousUnknownBrowse
          • 154.216.16.244
          nabx86.elfGet hashmaliciousUnknownBrowse
          • 154.216.16.244

          JA3 Fingerprints

          ⊘No context

          Dropped Files

          ⊘No context

          Created / dropped Files

          ⊘No created / dropped files found

          Static File Info

          General

          File type:ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
          Entropy (8bit):7.946352390082971
          TrID:
          • ELF Executable and Linkable format (Linux) (4029/14) 50.16%
          • ELF Executable and Linkable format (generic) (4004/1) 49.84%
          File name:Space.mips.elf
          File size:44'188 bytes
          MD5:6cab63028ef5fd2bac408f0ab5cf16e5
          SHA1:a984671f085075be3323e58181a19c862f23257b
          SHA256:f385391a7252cd586a0b575d08d535aefa36df27e7ea2dde44a572c5a4bb8182
          SHA512:31f0572bc4fd2d005cecb674ffa5ad47f058bfd09d3894d2c1b83c52a1e16c635a13b221a1e3548695258f8ace42c6e7d1bd83c046529ede891a33497dd4f84c
          SSDEEP:768:M9DfzzMwdu3W4CbuznqQd8eYkGyJfH6QhjS0jlDGnHMhgNSRxUkCkHhVeg527Bna:qDEwdu3ubuznqreGyJfH6QhjDGnHMhgq
          TLSH:6613F198371201E9C75AD4F08BF443637F761FF8518A8C1978A5EB92A9D144CBCE5BC8
          File Content Preview:.ELF.......................(...4.........4. ...(.......................l...l.................C...C......................UPX!.d.....................V.......?.E.h4...@b..) ..]....E..`..........@4#.Y..~.9....b...Q".|.H.%Q.z....6u.."....cLw...................

          Static ELF Info

          ELF header

          Class:ELF32
          Data:2's complement, big endian
          Version:1 (current)
          Machine:MIPS R3000
          Version Number:0x1
          Type:EXEC (Executable file)
          OS/ABI:UNIX - System V
          ABI Version:0
          Entry Point Address:0x109828
          Flags:0x1007
          ELF Header Size:52
          Program Header Offset:52
          Program Header Size:32
          Number of Program Headers:2
          Section Header Offset:0
          Section Header Size:40
          Number of Section Headers:0
          Header String Table Index:0

          Program Segments

          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
          LOAD0x00x1000000x1000000xab6c0xab6c7.94860x5R E0x10000
          LOAD0xcffc0x43cffc0x43cffc0x00x00.00000x6RW 0x10000

          Network Behavior

          Network Port Distribution

          TCP Packets

          TimestampSource PortDest PortSource IPDest IP
          Dec 25, 2024 11:26:05.171375036 CET370043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:05.291243076 CET377837004154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:05.291347980 CET370043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:05.316544056 CET370043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:05.436199903 CET377837004154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:05.436252117 CET370043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:05.555819035 CET377837004154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:06.589227915 CET377837004154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:06.589379072 CET370043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:06.589685917 CET370043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:06.590528011 CET370063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:06.710062981 CET377837006154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:06.710236073 CET370063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:06.713790894 CET370063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:06.834417105 CET377837006154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:06.834556103 CET370063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:06.954507113 CET377837006154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:08.009953976 CET377837006154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:08.010098934 CET370063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:08.010237932 CET370063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:08.010962009 CET370083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:08.130835056 CET377837008154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:08.130930901 CET370083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:08.132186890 CET370083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:08.251671076 CET377837008154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:08.251759052 CET370083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:08.371357918 CET377837008154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:09.441868067 CET377837008154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:09.442008972 CET370083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:09.442054987 CET370083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:09.445127010 CET370103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:09.564913034 CET377837010154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:09.564995050 CET370103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:09.566005945 CET370103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:09.685473919 CET377837010154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:09.685544968 CET370103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:09.805088997 CET377837010154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:10.864985943 CET377837010154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:10.865127087 CET370103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:10.865170956 CET370103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:10.865663052 CET370123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:10.985107899 CET377837012154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:10.985430956 CET370123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:10.986085892 CET370123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:11.024271011 CET370143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:11.105598927 CET377837012154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:11.105673075 CET370123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:11.143812895 CET377837014154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:11.143872976 CET370143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:11.145879984 CET370143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:11.225245953 CET377837012154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:11.265372992 CET377837014154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:11.265458107 CET370143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:11.385008097 CET377837014154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.291126966 CET377837012154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.291357994 CET370123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.291434050 CET370123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.292052031 CET370163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.412072897 CET377837016154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.412143946 CET370163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.413103104 CET370163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.442029953 CET377837014154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.442353010 CET370143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.442579031 CET370143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.443082094 CET370183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.533575058 CET377837016154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.533684969 CET370163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.562582016 CET377837018154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.562654972 CET370183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.563955069 CET370183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.653307915 CET377837016154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.683451891 CET377837018154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:12.683615923 CET370183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:12.803220034 CET377837018154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:13.712516069 CET377837016154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:13.712778091 CET370163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.712778091 CET370163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.713258028 CET370203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.832832098 CET377837020154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:13.832916975 CET370203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.833801031 CET370203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.862520933 CET377837018154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:13.862724066 CET370183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.862724066 CET370183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.863078117 CET370223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.953345060 CET377837020154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:13.953463078 CET370203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.982629061 CET377837022154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:13.982812881 CET370223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:13.983807087 CET370223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:14.073206902 CET377837020154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:14.103401899 CET377837022154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:14.103586912 CET370223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:14.223115921 CET377837022154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.132632971 CET377837020154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.132782936 CET370203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.132957935 CET370203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.133282900 CET370243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.252790928 CET377837024154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.252964973 CET370243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.253663063 CET370243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.279405117 CET377837022154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.279531956 CET370223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.279603958 CET370223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.279942036 CET370263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.373140097 CET377837024154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.373207092 CET370243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.399415970 CET377837026154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.399682999 CET370263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.400584936 CET370263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.492743015 CET377837024154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.520062923 CET377837026154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:15.520262003 CET370263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:15.639870882 CET377837026154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.551951885 CET377837024154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.552198887 CET370243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.552198887 CET370243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.552654982 CET370283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.672255039 CET377837028154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.672466993 CET370283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.673122883 CET370283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.701304913 CET377837026154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.701370955 CET370263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.701412916 CET370263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.701900959 CET370303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.792625904 CET377837028154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.792695045 CET370283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.821508884 CET377837030154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.821721077 CET370303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.822467089 CET370303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:16.912221909 CET377837028154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.942114115 CET377837030154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:16.942293882 CET370303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:17.061846972 CET377837030154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:17.972768068 CET377837028154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:17.972979069 CET370283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:17.973068953 CET370283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:17.973637104 CET370323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.093133926 CET377837032154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:18.093216896 CET370323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.094082117 CET370323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.119590044 CET377837030154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:18.119659901 CET370303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.119735956 CET370303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.120165110 CET370343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.213527918 CET377837032154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:18.213584900 CET370323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.239603996 CET377837034154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:18.239768982 CET370343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.240833044 CET370343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.333087921 CET377837032154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:18.360337019 CET377837034154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:18.360434055 CET370343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:18.479923964 CET377837034154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.392462969 CET377837032154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.392708063 CET370323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.392752886 CET370323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.393279076 CET370363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.512768984 CET377837036154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.512943029 CET370363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.513684988 CET370363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.538060904 CET377837034154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.538153887 CET370343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.538398027 CET370343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.538877964 CET370383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.633157969 CET377837036154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.633338928 CET370363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.658428907 CET377837038154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.658642054 CET370383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.660084963 CET370383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.752891064 CET377837036154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.780122042 CET377837038154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:19.780246973 CET370383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:19.899818897 CET377837038154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:20.812263966 CET377837036154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:20.812426090 CET370363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.812494993 CET370363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.813290119 CET370403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.932832003 CET377837040154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:20.932971954 CET370403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.933962107 CET370403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.960973978 CET377837038154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:20.961064100 CET370383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.961149931 CET370383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:20.961821079 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:21.053483009 CET377837040154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:21.053577900 CET370403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:21.081497908 CET377837042154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:21.081659079 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:21.173126936 CET377837040154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:21.981041908 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.100703001 CET377837042154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:22.100877047 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.102515936 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.221946001 CET377837042154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:22.222069979 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.239595890 CET377837040154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:22.239706993 CET370403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.239789009 CET370403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.240417004 CET370443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.341595888 CET377837042154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:22.359906912 CET377837044154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:22.360050917 CET370443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.361346006 CET370443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.480824947 CET377837044154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:22.480907917 CET370443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:22.600399017 CET377837044154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.399897099 CET377837042154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.400131941 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.400193930 CET370423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.401218891 CET370463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.520649910 CET377837046154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.520812035 CET370463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.522013903 CET370463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.641479969 CET377837046154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.641585112 CET370463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.658968925 CET377837044154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.659099102 CET370443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.659188032 CET370443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.659775972 CET370483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.761086941 CET377837046154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.779305935 CET377837048154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.779424906 CET370483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.780646086 CET370483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:23.900130987 CET377837048154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:23.900312901 CET370483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:24.019946098 CET377837048154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:24.819963932 CET377837046154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:24.820137024 CET370463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:24.820173025 CET370463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:24.820907116 CET370503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:24.940418959 CET377837050154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:24.940562010 CET370503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:24.942015886 CET370503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.061499119 CET377837050154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:25.061644077 CET370503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.079111099 CET377837048154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:25.079204082 CET370483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.079298019 CET370483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.079957008 CET370523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.181349039 CET377837050154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:25.199471951 CET377837052154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:25.199755907 CET370523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.201142073 CET370523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.320674896 CET377837052154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:25.320986986 CET370523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:25.440550089 CET377837052154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.241636038 CET377837050154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.241924047 CET370503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.241987944 CET370503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.242712021 CET370543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.362210035 CET377837054154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.362359047 CET370543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.363715887 CET370543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.483252048 CET377837054154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.483364105 CET370543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.499001980 CET377837052154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.499169111 CET370523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.499218941 CET370523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.499793053 CET370563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.602921963 CET377837054154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.619396925 CET377837056154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.619664907 CET370563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.620564938 CET370563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.740120888 CET377837056154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:26.740427017 CET370563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:26.860012054 CET377837056154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:27.662755966 CET377837054154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:27.663002968 CET370543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.663096905 CET370543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.663914919 CET370583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.783437014 CET377837058154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:27.783674002 CET370583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.784856081 CET370583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.904431105 CET377837058154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:27.904532909 CET370583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.918075085 CET377837056154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:27.918302059 CET370563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.918342113 CET370563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:27.918823004 CET370603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:28.024244070 CET377837058154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:28.038403988 CET377837060154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:28.038506985 CET370603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:28.039347887 CET370603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:28.158854961 CET377837060154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:28.158931971 CET370603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:28.278570890 CET377837060154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.081018925 CET377837058154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.081142902 CET370583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.081219912 CET370583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.082009077 CET370623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.201508045 CET377837062154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.201620102 CET370623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.202758074 CET370623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.322302103 CET377837062154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.322482109 CET370623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.338690996 CET377837060154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.338809013 CET370603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.338893890 CET370603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.339493990 CET370643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.442167997 CET377837062154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.458966970 CET377837064154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.459048033 CET370643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.460119009 CET370643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.579583883 CET377837064154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:29.579690933 CET370643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:29.699361086 CET377837064154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.501068115 CET377837062154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.501319885 CET370623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.501319885 CET370623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.502090931 CET370663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.621669054 CET377837066154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.621818066 CET370663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.623374939 CET370663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.742921114 CET377837066154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.743294001 CET370663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.755880117 CET377837064154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.755985975 CET370643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.756097078 CET370643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.756970882 CET370683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.862921953 CET377837066154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.876727104 CET377837068154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.876884937 CET370683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.878165007 CET370683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:30.997802973 CET377837068154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:30.997904062 CET370683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:31.117680073 CET377837068154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:31.922676086 CET377837066154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:31.923016071 CET370663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:31.923016071 CET370663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:31.923866987 CET370703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.043360949 CET377837070154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:32.043584108 CET370703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.044862032 CET370703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.164786100 CET377837070154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:32.164904118 CET370703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.177675009 CET377837068154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:32.177910089 CET370683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.177910089 CET370683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.178700924 CET370723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.284471035 CET377837070154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:32.298130035 CET377837072154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:32.298342943 CET370723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.299685001 CET370723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.419224977 CET377837072154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:32.419341087 CET370723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:32.538952112 CET377837072154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.341304064 CET377837070154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.341475964 CET370703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.341653109 CET370703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.342437983 CET370743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.461890936 CET377837074154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.462116003 CET370743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.462949038 CET370743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.582389116 CET377837074154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.582473040 CET370743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.595747948 CET377837072154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.595931053 CET370723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.595931053 CET370723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.596520901 CET370763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.702049971 CET377837074154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.716103077 CET377837076154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.716372013 CET370763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.717849016 CET370763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.837461948 CET377837076154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:33.837574959 CET370763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:33.957175970 CET377837076154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:34.763602018 CET377837074154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:34.763861895 CET370743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:34.763986111 CET370743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:34.764693975 CET370783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:34.884299040 CET377837078154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:34.884476900 CET370783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:34.885641098 CET370783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.005135059 CET377837078154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:35.005244970 CET370783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.015845060 CET377837076154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:35.016187906 CET370763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.016187906 CET370763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.016736031 CET370803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.125056982 CET377837078154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:35.136250019 CET377837080154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:35.136331081 CET370803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.137734890 CET370803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.257328033 CET377837080154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:35.257492065 CET370803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:35.377141953 CET377837080154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.182914019 CET377837078154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.183161020 CET370783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.183161974 CET370783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.183897972 CET370823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.303395033 CET377837082154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.303781986 CET370823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.305022955 CET370823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.424535036 CET377837082154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.424654961 CET370823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.433748007 CET377837080154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.433918953 CET370803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.433918953 CET370803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.434470892 CET370843778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.544265032 CET377837082154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.553951979 CET377837084154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.554162025 CET370843778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.555274010 CET370843778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.674890995 CET377837084154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:36.675195932 CET370843778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:36.794835091 CET377837084154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.603430986 CET377837082154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.603576899 CET370823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.603624105 CET370823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.604403019 CET370863778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.725578070 CET377837086154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.725759029 CET370863778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.727119923 CET370863778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.846672058 CET377837086154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.846893072 CET370863778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.853007078 CET377837084154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.853117943 CET370843778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.853167057 CET370843778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.853964090 CET370883778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.966553926 CET377837086154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.973501921 CET377837088154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:37.973606110 CET370883778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:37.974982023 CET370883778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:38.094535112 CET377837088154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:38.094680071 CET370883778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:38.215786934 CET377837088154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.024197102 CET377837086154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.024394035 CET370863778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.024569035 CET370863778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.025111914 CET370903778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.144718885 CET377837090154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.144968987 CET370903778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.146017075 CET370903778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.265608072 CET377837090154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.265928030 CET370903778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.275273085 CET377837088154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.275374889 CET370883778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.275599003 CET370883778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.276279926 CET370923778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.385445118 CET377837090154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.395777941 CET377837092154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.395909071 CET370923778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.397463083 CET370923778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.517043114 CET377837092154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:39.517343998 CET370923778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:39.637048006 CET377837092154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.444566011 CET377837090154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.444778919 CET370903778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.444818974 CET370903778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.445648909 CET370943778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.566184998 CET377837094154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.566302061 CET370943778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.567509890 CET370943778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.687024117 CET377837094154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.687275887 CET370943778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.702661037 CET377837092154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.702841997 CET370923778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.702841997 CET370923778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.703486919 CET370963778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.806855917 CET377837094154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.823513985 CET377837096154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.823621035 CET370963778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.825021029 CET370963778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:40.944523096 CET377837096154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:40.944766045 CET370963778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:41.064351082 CET377837096154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:41.866460085 CET377837094154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:41.866837025 CET370943778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:41.866837025 CET370943778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:41.867327929 CET370983778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:41.986777067 CET377837098154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:41.986850977 CET370983778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:41.987777948 CET370983778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.107497931 CET377837098154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:42.107670069 CET370983778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.122102976 CET377837096154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:42.122359037 CET370963778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.122359037 CET370963778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.122832060 CET371003778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.227467060 CET377837098154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:42.242362022 CET377837100154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:42.242566109 CET371003778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.243462086 CET371003778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.363039017 CET377837100154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:42.363121033 CET371003778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:42.482671022 CET377837100154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.283740997 CET377837098154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.284014940 CET370983778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.284014940 CET370983778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.284569979 CET371023778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.404115915 CET377837102154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.404195070 CET371023778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.405308008 CET371023778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.524863958 CET377837102154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.525054932 CET371023778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.541102886 CET377837100154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.541289091 CET371003778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.541289091 CET371003778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.541697979 CET371043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.644639015 CET377837102154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.661289930 CET377837104154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.661375046 CET371043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.662408113 CET371043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.782097101 CET377837104154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:43.782294989 CET371043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:43.902339935 CET377837104154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:44.706872940 CET377837102154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:44.707072020 CET371023778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.707196951 CET371023778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.707963943 CET371063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.827486992 CET377837106154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:44.827774048 CET371063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.828957081 CET371063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.948451996 CET377837106154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:44.948760033 CET371063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.962781906 CET377837104154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:44.962903023 CET371043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.963006973 CET371043778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:44.963732958 CET371083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:45.068403959 CET377837106154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:45.083307028 CET377837108154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:45.083425045 CET371083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:45.084295988 CET371083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:45.203783989 CET377837108154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:45.203947067 CET371083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:45.323713064 CET377837108154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.127661943 CET377837106154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.127927065 CET371063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.128047943 CET371063778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.128750086 CET371103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.248214006 CET377837110154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.248450994 CET371103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.249625921 CET371103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.369133949 CET377837110154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.369417906 CET371103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.385396004 CET377837108154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.385515928 CET371083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.385588884 CET371083778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.386284113 CET371123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.488949060 CET377837110154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.505808115 CET377837112154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.505928993 CET371123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.507482052 CET371123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.626938105 CET377837112154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:46.627082109 CET371123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:46.746759892 CET377837112154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.550273895 CET377837110154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.550584078 CET371103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.550719976 CET371103778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.551335096 CET371143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.670862913 CET377837114154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.671020031 CET371143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.672192097 CET371143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.791739941 CET377837114154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.791866064 CET371143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.810051918 CET377837112154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.810277939 CET371123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.810379982 CET371123778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.811086893 CET371163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.911407948 CET377837114154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.930586100 CET377837116154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:47.930831909 CET371163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:47.932216883 CET371163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:48.051704884 CET377837116154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:48.051974058 CET371163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:48.171551943 CET377837116154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:48.970401049 CET377837114154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:48.970525980 CET371143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:48.970629930 CET371143778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:48.971180916 CET371183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.091903925 CET377837118154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:49.091986895 CET371183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.092880964 CET371183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.212424994 CET377837118154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:49.212692976 CET371183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.231153965 CET377837116154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:49.231220007 CET371163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.231271029 CET371163778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.231937885 CET371203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.332202911 CET377837118154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:49.351422071 CET377837120154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:49.351690054 CET371203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.352951050 CET371203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.472491026 CET377837120154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:49.472760916 CET371203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:49.592370987 CET377837120154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.390919924 CET377837118154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.391016006 CET371183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.391055107 CET371183778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.391685009 CET371223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.511140108 CET377837122154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.511220932 CET371223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.512298107 CET371223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.631805897 CET377837122154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.631874084 CET371223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.653207064 CET377837120154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.653450966 CET371203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.653549910 CET371203778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.654217958 CET371243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.751545906 CET377837122154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.774018049 CET377837124154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.774272919 CET371243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.775584936 CET371243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:50.895078897 CET377837124154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:50.895349026 CET371243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:51.014883041 CET377837124154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:51.810322046 CET377837122154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:51.810447931 CET371223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:51.810503006 CET371223778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:51.811146975 CET371263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:51.930787086 CET377837126154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:51.930921078 CET371263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:51.931796074 CET371263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.051254988 CET377837126154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:52.051397085 CET371263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.074274063 CET377837124154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:52.074393988 CET371243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.074475050 CET371243778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.075098991 CET371283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.170922041 CET377837126154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:52.194613934 CET377837128154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:52.194713116 CET371283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.195781946 CET371283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.315395117 CET377837128154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:52.315517902 CET371283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:52.435247898 CET377837128154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.229796886 CET377837126154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.230115891 CET371263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.230209112 CET371263778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.231260061 CET371303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.350847006 CET377837130154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.350956917 CET371303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.352488995 CET371303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.472079039 CET377837130154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.472323895 CET371303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.493092060 CET377837128154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.493246078 CET371283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.493381023 CET371283778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.494777918 CET371323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.591959000 CET377837130154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.614372969 CET377837132154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.614516020 CET371323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.616152048 CET371323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.735836029 CET377837132154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:53.736012936 CET371323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:53.855571985 CET377837132154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:54.649458885 CET377837130154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:54.649609089 CET371303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.649708033 CET371303778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.650506020 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.770077944 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:54.770150900 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.771482944 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.891103029 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:54.891195059 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.915951967 CET377837132154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:54.916197062 CET371323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.916230917 CET371323778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:54.916851997 CET371363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:55.010687113 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:55.036320925 CET377837136154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:55.036396027 CET371363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:55.037950039 CET371363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:55.159672976 CET377837136154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:55.159776926 CET371363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:55.279522896 CET377837136154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:56.334594011 CET377837136154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:56.334952116 CET371363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:56.335014105 CET371363778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:56.336057901 CET371383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:56.455564976 CET377837138154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:56.455713987 CET371383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:56.457479000 CET371383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:56.576894045 CET377837138154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:56.577121973 CET371383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:56.696759939 CET377837138154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:57.756539106 CET377837138154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:57.756839991 CET371383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:57.756839991 CET371383778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:57.757390022 CET371403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:57.876966000 CET377837140154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:57.877175093 CET371403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:57.878432989 CET371403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:57.997903109 CET377837140154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:57.998086929 CET371403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:58.118066072 CET377837140154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:59.177300930 CET377837140154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:59.177546978 CET371403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:59.177546978 CET371403778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:59.178251028 CET371423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:59.297732115 CET377837142154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:59.297863007 CET371423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:59.299732924 CET371423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:59.419331074 CET377837142154.216.20.216192.168.2.13
          Dec 25, 2024 11:26:59.419397116 CET371423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:26:59.539295912 CET377837142154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:00.597625971 CET377837142154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:00.597798109 CET371423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:00.597799063 CET371423778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:00.598421097 CET371443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:00.718117952 CET377837144154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:00.718374968 CET371443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:00.719541073 CET371443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:00.839143038 CET377837144154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:00.839385986 CET371443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:00.960803032 CET377837144154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:02.015722990 CET377837144154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:02.015907049 CET371443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:02.015945911 CET371443778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:02.016901016 CET371463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:02.136480093 CET377837146154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:02.136697054 CET371463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:02.138062954 CET371463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:02.257738113 CET377837146154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:02.257956982 CET371463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:02.377522945 CET377837146154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:03.435961008 CET377837146154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:03.436230898 CET371463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:03.436230898 CET371463778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:03.437252045 CET371483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:03.556787968 CET377837148154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:03.556941986 CET371483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:03.558070898 CET371483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:03.677598953 CET377837148154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:03.677824974 CET371483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:03.797398090 CET377837148154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:04.782032967 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:04.857028008 CET377837148154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:04.857259035 CET371483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:04.857357025 CET371483778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:04.858498096 CET371503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:04.902239084 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:04.978158951 CET377837150154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:04.978517056 CET371503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:04.980228901 CET371503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:05.099827051 CET377837150154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:05.100112915 CET371503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:05.203303099 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:05.203452110 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:05.219719887 CET377837150154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:06.278661013 CET377837150154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:06.278887033 CET371503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:06.278979063 CET371503778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:06.279934883 CET371523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:06.399521112 CET377837152154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:06.399615049 CET371523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:06.401103020 CET371523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:06.520631075 CET377837152154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:06.520706892 CET371523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:06.640482903 CET377837152154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:07.696846008 CET377837152154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:07.697189093 CET371523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:07.697381020 CET371523778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:07.698577881 CET371543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:07.818120956 CET377837154154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:07.818309069 CET371543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:07.819829941 CET371543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:08.145108938 CET377837154154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:08.145319939 CET371543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:08.264908075 CET377837154154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:09.328250885 CET377837154154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:09.328624964 CET371543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:09.328716993 CET371543778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:09.329554081 CET371563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:09.449172974 CET377837156154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:09.449425936 CET371563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:09.451215029 CET371563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:09.570781946 CET377837156154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:09.571003914 CET371563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:09.690669060 CET377837156154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:10.748615026 CET377837156154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:10.748800039 CET371563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:10.748919964 CET371563778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:10.749680042 CET371583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:10.869426012 CET377837158154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:10.869651079 CET371583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:10.870929003 CET371583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:10.990520000 CET377837158154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:10.990704060 CET371583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:11.110460043 CET377837158154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:12.170838118 CET377837158154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:12.171302080 CET371583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:12.171420097 CET371583778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:12.172544003 CET371603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:12.292608023 CET377837160154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:12.293076992 CET371603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:12.294878006 CET371603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:12.414570093 CET377837160154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:12.415074110 CET371603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:12.534774065 CET377837160154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:13.592736006 CET377837160154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:13.593100071 CET371603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:13.593219995 CET371603778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:13.594284058 CET371623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:13.714044094 CET377837162154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:13.714257956 CET371623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:13.715847969 CET371623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:13.835402012 CET377837162154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:13.835467100 CET371623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:13.956090927 CET377837162154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:15.016455889 CET377837162154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:15.016710997 CET371623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:15.016710997 CET371623778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:15.017812014 CET371643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:15.137408972 CET377837164154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:15.137501001 CET371643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:15.138945103 CET371643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:15.259062052 CET377837164154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:15.259232044 CET371643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:15.378928900 CET377837164154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:16.448719025 CET377837164154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:16.448937893 CET371643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:16.449035883 CET371643778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:16.450160980 CET371663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:16.569888115 CET377837166154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:16.570009947 CET371663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:16.571475029 CET371663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:16.691158056 CET377837166154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:16.691404104 CET371663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:16.811348915 CET377837166154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:17.871110916 CET377837166154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:17.871572018 CET371663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:17.871665001 CET371663778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:17.872759104 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:17.992849112 CET377837168154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:17.993130922 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:17.994904995 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:18.114581108 CET377837168154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:18.114748001 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:18.234541893 CET377837168154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:19.295046091 CET377837168154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:19.295241117 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.295351982 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.296226978 CET371703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.564877987 CET377837168154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:19.565078974 CET371683778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.565145969 CET377837170154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:19.565248013 CET371703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.566730022 CET371703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.686302900 CET377837170154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:19.686408997 CET371703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:19.806175947 CET377837170154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:20.868216991 CET377837170154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:20.868451118 CET371703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:20.868525982 CET371703778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:20.869565010 CET371723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:20.989237070 CET377837172154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:20.989347935 CET371723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:20.990741968 CET371723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:21.110546112 CET377837172154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:21.110627890 CET371723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:21.230226040 CET377837172154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:22.287805080 CET377837172154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:22.288028955 CET371723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:22.288105011 CET371723778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:22.289212942 CET371743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:22.409336090 CET377837174154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:22.409459114 CET371743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:22.410872936 CET371743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:22.530504942 CET377837174154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:22.530621052 CET371743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:22.653295994 CET377837174154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:23.705265999 CET377837174154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:23.705436945 CET371743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:23.705495119 CET371743778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:23.706336021 CET371763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:23.826069117 CET377837176154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:23.826225042 CET371763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:23.827552080 CET371763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:23.947258949 CET377837176154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:23.947428942 CET371763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:24.067161083 CET377837176154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:25.124296904 CET377837176154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:25.124547958 CET371763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:25.124630928 CET371763778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:25.125638008 CET371783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:25.245232105 CET377837178154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:25.245402098 CET371783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:25.247062922 CET371783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:25.368065119 CET377837178154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:25.368298054 CET371783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:25.487998962 CET377837178154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:26.547573090 CET377837178154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:26.547760010 CET371783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:26.547857046 CET371783778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:26.548741102 CET371803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:26.668344021 CET377837180154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:26.668629885 CET371803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:26.670469999 CET371803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:26.790085077 CET377837180154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:26.790240049 CET371803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:26.909883976 CET377837180154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:27.967142105 CET377837180154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:27.967603922 CET371803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:27.967765093 CET371803778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:27.968807936 CET371823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:28.088787079 CET377837182154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:28.088915110 CET371823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:28.090109110 CET371823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:28.209804058 CET377837182154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:28.209996939 CET371823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:28.329662085 CET377837182154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:38.100620985 CET371823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:27:38.220460892 CET377837182154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:38.523792982 CET377837182154.216.20.216192.168.2.13
          Dec 25, 2024 11:27:38.524032116 CET371823778192.168.2.13154.216.20.216
          Dec 25, 2024 11:28:05.264617920 CET371343778192.168.2.13154.216.20.216
          Dec 25, 2024 11:28:05.385132074 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:28:05.685760021 CET377837134154.216.20.216192.168.2.13
          Dec 25, 2024 11:28:05.685909033 CET371343778192.168.2.13154.216.20.216

          System Behavior

          General

          Start time (UTC):10:26:04
          Start date (UTC):25/12/2024
          Path:/tmp/Space.mips.elf
          Arguments:/tmp/Space.mips.elf
          File size:5777432 bytes
          MD5 hash:0083f1f0e77be34ad27f849842bbb00c

          Chronological Activities


          General

          Start time (UTC):10:26:04
          Start date (UTC):25/12/2024
          Path:/tmp/Space.mips.elf
          Arguments:-
          File size:5777432 bytes
          MD5 hash:0083f1f0e77be34ad27f849842bbb00c

          Chronological Activities


          General

          Start time (UTC):10:26:04
          Start date (UTC):25/12/2024
          Path:/tmp/Space.mips.elf
          Arguments:-
          File size:5777432 bytes
          MD5 hash:0083f1f0e77be34ad27f849842bbb00c

          Chronological Activities


          General

          Start time (UTC):10:26:04
          Start date (UTC):25/12/2024
          Path:/tmp/Space.mips.elf
          Arguments:-
          File size:5777432 bytes
          MD5 hash:0083f1f0e77be34ad27f849842bbb00c

          Chronological Activities


          General

          Start time (UTC):10:26:10
          Start date (UTC):25/12/2024
          Path:/tmp/Space.mips.elf
          Arguments:-
          File size:5777432 bytes
          MD5 hash:0083f1f0e77be34ad27f849842bbb00c

          Chronological Activities


          General

          Start time (UTC):10:26:10
          Start date (UTC):25/12/2024
          Path:/tmp/Space.mips.elf
          Arguments:-
          File size:5777432 bytes
          MD5 hash:0083f1f0e77be34ad27f849842bbb00c

          Chronological Activities