Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
Space.sh4.elf

Overview

General Information

Sample name:Space.sh4.elf
Analysis ID:1580592
MD5:3e2e366ae1e66793ef32068662aa75ef
SHA1:707383790cc42ff299d66bd7b17054f537545ade
SHA256:bfdfe95f698a21b109fad1db66a60a798c5e8cb52e17780f24830007590abaf6
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1580592
Start date and time:2024-12-25 11:29:17 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 48s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Space.sh4.elf
Detection:MAL
Classification:mal64.linELF@0/0@0/0

Runtime Messages

Command:/tmp/Space.sh4.elf
PID:5555
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
Space.sh4.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

SourceRuleDescriptionAuthorStrings
5555.1.00007f534c400000.00007f534c414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5559.1.00007f534c400000.00007f534c414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5557.1.00007f534c400000.00007f534c414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5565.1.00007f534c400000.00007f534c414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.sh4.elf PID: 5555Linux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x48d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x48e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x48fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4910:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4924:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4938:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x494c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4960:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4974:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4988:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x499c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x49b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x49c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x49d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x49ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4a00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4a14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4a28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4a3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4a50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4a64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Antivirus / Scanner detection for submitted sample
Source: Space.sh4.elfAvira: detected
Multi AV Scanner detection for submitted file
Source: Space.sh4.elfVirustotal: Detection: 65%Perma Link
Source: Space.sh4.elfReversingLabs: Detection: 65%
Source: global trafficTCP traffic: 192.168.2.14:59144 -> 154.216.20.216:3778
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216
Source: unknownTCP traffic detected without corresponding DNS query: 154.216.20.216

System Summary

barindex
Malicious sample detected (through community Yara rule)
Source: Space.sh4.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5555.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5559.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5557.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5565.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5555, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5557, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5559, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5565, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Initial sampleString containing 'busybox' found: /bin/busybox
Source: Initial sampleString containing 'busybox' found: /proc/net/tcp.x86.x86_64.arm.arm5.arm6.arm7.mips.mipsel.sh4.ppc/proc/proc/%d/exe/proc/%s/statusrName:%s/bin/busybox/bin/systemd/usr/bintest/tmp/condi/tmp/zxcr9999/tmp/condinetwork/var/condibot/var/zxcr9999/var/CondiBot/var/condinet/bin/watchdog154.216.20.216
Source: ELF static info symbol of initial sample.symtab present: no
Source: Space.sh4.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5555.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5559.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5557.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5565.1.00007f534c400000.00007f534c414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5555, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5557, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5559, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5565, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: classification engineClassification label: mal64.linELF@0/0@0/0
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3760/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1583/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/2672/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/110/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3759/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/111/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/112/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/113/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/234/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1577/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/114/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/235/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/115/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/116/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/117/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/118/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/119/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3874/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3757/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/10/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/917/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3758/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/11/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/12/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/13/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/14/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/15/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/16/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/17/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/18/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/19/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1593/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/5390/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/240/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/120/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3094/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/121/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/242/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3406/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/122/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/243/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/2/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/123/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/244/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1589/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/124/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/245/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1588/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/125/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/4/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/246/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3402/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/126/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/5/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/247/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/127/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/6/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/248/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/128/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/7/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/249/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/8/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/129/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/800/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/9/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/801/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/803/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/20/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/806/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/21/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/807/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/928/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/22/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/23/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/24/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/25/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/26/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/27/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/28/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/29/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3420/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/490/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/250/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/130/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/251/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/131/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/252/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/132/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/253/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/254/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/255/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/135/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/256/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1599/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/257/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/378/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/258/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/3412/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/259/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/30/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/35/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/1371/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)File opened: /proc/260/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5555)Queries kernel information via 'uname': Jump to behavior
Source: Space.sh4.elf, 5555.1.00007ffc85819000.00007ffc8583a000.rw-.sdmp, Space.sh4.elf, 5557.1.00007ffc85819000.00007ffc8583a000.rw-.sdmp, Space.sh4.elf, 5559.1.00007ffc85819000.00007ffc8583a000.rw-.sdmp, Space.sh4.elf, 5565.1.00007ffc85819000.00007ffc8583a000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
Source: Space.sh4.elf, 5555.1.000056195a3e3000.000056195a46d000.rw-.sdmp, Space.sh4.elf, 5557.1.000056195a3e3000.000056195a446000.rw-.sdmp, Space.sh4.elf, 5559.1.000056195a3e3000.000056195a446000.rw-.sdmp, Space.sh4.elf, 5565.1.000056195a3e3000.000056195a46d000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4
Source: Space.sh4.elf, 5555.1.00007ffc85819000.00007ffc8583a000.rw-.sdmp, Space.sh4.elf, 5557.1.00007ffc85819000.00007ffc8583a000.rw-.sdmp, Space.sh4.elf, 5559.1.00007ffc85819000.00007ffc8583a000.rw-.sdmp, Space.sh4.elf, 5565.1.00007ffc85819000.00007ffc8583a000.rw-.sdmpBinary or memory string: >x86_64/usr/bin/qemu-sh4/tmp/Space.sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Space.sh4.elf
Source: Space.sh4.elf, 5555.1.000056195a3e3000.000056195a46d000.rw-.sdmp, Space.sh4.elf, 5557.1.000056195a3e3000.000056195a446000.rw-.sdmp, Space.sh4.elf, 5559.1.000056195a3e3000.000056195a446000.rw-.sdmp, Space.sh4.elf, 5565.1.000056195a3e3000.000056195a46d000.rw-.sdmpBinary or memory string: V5!/etc/qemu-binfmt/sh4

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume Access1
OS Credential Dumping		11
Security Software Discovery		Remote ServicesData from Local System1
Non-Standard Port		Exfiltration Over Other Network MediumAbuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1580592 Sample: Space.sh4.elf Startdate: 25/12/2024 Architecture: LINUX Score: 64 20 154.216.20.216, 3778, 59144, 59146 SKHT-ASShenzhenKatherineHengTechnologyInformationCo Seychelles 2->20 22 Malicious sample detected (through community Yara rule) 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 8 Space.sh4.elf 2->8         started        signatures3 process4 process5 10 Space.sh4.elf 8->10         started        12 Space.sh4.elf 8->12         started        14 Space.sh4.elf 8->14         started        process6 16 Space.sh4.elf 10->16         started        18 Space.sh4.elf 10->18         started       

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
Space.sh4.elf65%VirustotalBrowse
Space.sh4.elf66%ReversingLabsLinux.Backdoor.Mirai
Space.sh4.elf100%AviraLINUX/Mirai.bonb

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Public IPs

IPDomainCountryFlagASNASN NameMalicious
154.216.20.216
unknownSeychelles
135357SKHT-ASShenzhenKatherineHengTechnologyInformationCofalse

Joe Sandbox View / Context

IPs

MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
154.216.20.216Space.arm.elfGet hashmaliciousMiraiBrowse
    Space.mips.elfGet hashmaliciousUnknownBrowse
      Space.mpsl.elfGet hashmaliciousUnknownBrowse
        Space.m68k.elfGet hashmaliciousMiraiBrowse
          Space.i686.elfGet hashmaliciousUnknownBrowse

            Domains

            ⊘No context

            ASNs

            MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
            SKHT-ASShenzhenKatherineHengTechnologyInformationCoSpace.arm.elfGet hashmaliciousMiraiBrowse
            • 154.216.20.216
            Space.mips.elfGet hashmaliciousUnknownBrowse
            • 154.216.20.216
            Space.mpsl.elfGet hashmaliciousUnknownBrowse
            • 154.216.20.216
            Space.m68k.elfGet hashmaliciousMiraiBrowse
            • 154.216.20.216
            Space.i686.elfGet hashmaliciousUnknownBrowse
            • 154.216.20.216
            byte.x86.elfGet hashmaliciousMirai, OkiruBrowse
            • 154.216.19.138
            zerarm7.elfGet hashmaliciousUnknownBrowse
            • 154.216.16.250
            nabm68k.elfGet hashmaliciousUnknownBrowse
            • 154.216.16.244
            nabarm.elfGet hashmaliciousUnknownBrowse
            • 154.216.16.244
            zerppc.elfGet hashmaliciousUnknownBrowse
            • 154.216.16.250

            JA3 Fingerprints

            ⊘No context

            Dropped Files

            ⊘No context

            Created / dropped Files

            ⊘No created / dropped files found

            Static File Info

            General

            File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
            Entropy (8bit):6.603190867229362
            TrID:
            • ELF Executable and Linkable format (generic) (4004/1) 100.00%
            File name:Space.sh4.elf
            File size:82'652 bytes
            MD5:3e2e366ae1e66793ef32068662aa75ef
            SHA1:707383790cc42ff299d66bd7b17054f537545ade
            SHA256:bfdfe95f698a21b109fad1db66a60a798c5e8cb52e17780f24830007590abaf6
            SHA512:693f5218876a431270b4d733ae615480d521a100da55bce55825b72276f0d6f5d5df6f63f91d266da9a9ad59240fb31343b629363830c281824af74007e87fdb
            SSDEEP:1536:DWRU/uih+nyazXUcMnYVohwH5wX6SNmTdEyRMr:DR/F+nyazXenY66L5dRk
            TLSH:F6839E61F0146CE5C8660674F0F8ED35471369F123A52CB26EEEE9A188F368DF44AF94
            File Content Preview:.ELF..............*.......@.4...LA......4. ...(...............@...@.L4..L4...............@...@B..@B.0...............Q.td..............................././"O.n......#.*@........#.*@L...&O.n.l..................................././.../.a"O.!...n...a.b("...q.

            Static ELF Info

            ELF header

            Class:ELF32
            Data:2's complement, little endian
            Version:1 (current)
            Machine:<unknown>
            Version Number:0x1
            Type:EXEC (Executable file)
            OS/ABI:UNIX - System V
            ABI Version:0
            Entry Point Address:0x4001a0
            Flags:0xc
            ELF Header Size:52
            Program Header Offset:52
            Program Header Size:32
            Number of Program Headers:3
            Section Header Offset:82252
            Section Header Size:40
            Number of Section Headers:10
            Header String Table Index:9

            Sections

            NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
            NULL0x00x00x00x00x0000
            .initPROGBITS0x4000940x940x2e0x00x6AX004
            .textPROGBITS0x4000e00xe00x10e600x00x6AX0032
            .finiPROGBITS0x410f400x10f400x220x00x6AX004
            .rodataPROGBITS0x410f640x10f640x24e80x00x2A004
            .ctorsPROGBITS0x4240dc0x140dc0x80x00x3WA004
            .dtorsPROGBITS0x4240e40x140e40x80x00x3WA004
            .dataPROGBITS0x4240f00x140f00x1c0x00x3WA004
            .bssNOBITS0x42410c0x1410c0xaec0x00x3WA004
            .shstrtabSTRTAB0x00x1410c0x3e0x00x0001

            Program Segments

            TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
            LOAD0x00x4000000x4000000x1344c0x1344c6.77540x5R E0x10000.init .text .fini .rodata
            LOAD0x140dc0x4240dc0x4240dc0x300xb1c2.47110x6RW 0x10000.ctors .dtors .data .bss
            GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

            Network Behavior

            Network Port Distribution

            TCP Packets

            TimestampSource PortDest PortSource IPDest IP
            Dec 25, 2024 11:30:16.201803923 CET591443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:16.321923018 CET377859144154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:16.321990967 CET591443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:16.345577002 CET591443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:16.465604067 CET377859144154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:16.465660095 CET591443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:16.585241079 CET377859144154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:17.622679949 CET377859144154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:17.622812033 CET591443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:17.623548031 CET591443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:17.624862909 CET591463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:17.744517088 CET377859146154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:17.744731903 CET591463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:17.746002913 CET591463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:17.865577936 CET377859146154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:17.865726948 CET591463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:17.985398054 CET377859146154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:19.043036938 CET377859146154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:19.043270111 CET591463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:19.043270111 CET591463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:19.044028044 CET591483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:19.163579941 CET377859148154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:19.163821936 CET591483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:19.164980888 CET591483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:19.284713030 CET377859148154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:19.284967899 CET591483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:19.405450106 CET377859148154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:20.465468884 CET377859148154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:20.465725899 CET591483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:20.465765953 CET591483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:20.466578960 CET591503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:20.587459087 CET377859150154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:20.587568045 CET591503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:20.588619947 CET591503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:20.711504936 CET377859150154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:20.711606026 CET591503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:20.831144094 CET377859150154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:21.889874935 CET377859150154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:21.890027046 CET591503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:21.890027046 CET591503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:21.890655041 CET591523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.010365963 CET377859152154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:22.010591984 CET591523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.011744976 CET591523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.131362915 CET377859152154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:22.131583929 CET591523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.251085997 CET377859152154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:22.343873978 CET591543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.463687897 CET377859154154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:22.463756084 CET591543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.484947920 CET591543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.871440887 CET591543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:22.963383913 CET377859154154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:22.991528988 CET377859154154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:23.319242954 CET377859152154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:23.319437027 CET591523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:23.319510937 CET591523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:23.320276022 CET591563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:23.439810038 CET377859156154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:23.440027952 CET591563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:23.441539049 CET591563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:23.561244011 CET377859156154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:23.561378002 CET591563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:23.681014061 CET377859156154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.139898062 CET377859154154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.140126944 CET591543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.140403032 CET591543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.140985966 CET591583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.260627985 CET377859158154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.260833025 CET591583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.262057066 CET591583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.381696939 CET377859158154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.381927013 CET591583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.501630068 CET377859158154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.737289906 CET377859156154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.737445116 CET591563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.737445116 CET591563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.737917900 CET591603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.857542992 CET377859160154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.857616901 CET591603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.858747959 CET591603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:24.978282928 CET377859160154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:24.978451967 CET591603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.098138094 CET377859160154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:25.562077999 CET377859158154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:25.562196016 CET591583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.562292099 CET591583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.563018084 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.682485104 CET377859162154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:25.682667971 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.684068918 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.803742886 CET377859162154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:25.803891897 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:25.923667908 CET377859162154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:26.158788919 CET377859160154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:26.159060001 CET591603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.159060001 CET591603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.159811974 CET591643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.279452085 CET377859164154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:26.279594898 CET591643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.280580044 CET591643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.400259018 CET377859164154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:26.400372028 CET591643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.519979000 CET377859164154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:26.980750084 CET377859162154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:26.981040955 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.981077909 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:26.981735945 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.477046967 CET377859162154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.477125883 CET377859162154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.477416992 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.477416992 CET591623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.477466106 CET377859166154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.477591038 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.478950024 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.579092979 CET377859164154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.579191923 CET591643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.579330921 CET591643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.580029011 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.598464012 CET377859166154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.598560095 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.699836969 CET377859168154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.700001955 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.701320887 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.718669891 CET377859166154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.820965052 CET377859168154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:27.821273088 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:27.940963030 CET377859168154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.204248905 CET377859166154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.204307079 CET377859168154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.204391956 CET377859166154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.204427958 CET377859166154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.204567909 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.204567909 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.204567909 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.204596043 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.204653978 CET591663778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.204840899 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.206151962 CET591703778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.206502914 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.238903999 CET377859168154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.239023924 CET591683778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.325711012 CET377859170154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.326049089 CET591703778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.326066971 CET377859172154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.326147079 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.328027964 CET591703778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.328142881 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.449882984 CET377859170154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.449918985 CET377859172154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.450094938 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.450109005 CET591703778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:29.570776939 CET377859172154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:29.570815086 CET377859170154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:30.874119997 CET377859170154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:30.874178886 CET377859172154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:30.874324083 CET591703778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.874358892 CET377859172154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:30.874464989 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.874473095 CET591703778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.874464989 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.874464989 CET591723778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.875293970 CET591743778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.875734091 CET591763778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.994848013 CET377859174154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:30.995064974 CET591743778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.995301008 CET377859176154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:30.995378017 CET591763778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.997317076 CET591743778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:30.997486115 CET591763778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:31.116843939 CET377859174154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:31.116930008 CET377859176154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:31.117105961 CET591763778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:31.117110968 CET591743778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:31.236710072 CET377859176154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:31.236876965 CET377859174154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.292462111 CET377859176154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.292658091 CET591763778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.292697906 CET591763778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.293441057 CET591783778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.293767929 CET377859174154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.293834925 CET591743778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.293901920 CET591743778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.294356108 CET591803778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.413075924 CET377859178154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.413278103 CET591783778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.413856030 CET377859180154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.413928986 CET591803778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.414736032 CET591783778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.415478945 CET591803778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.534178019 CET377859178154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.534363985 CET591783778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.534919977 CET377859180154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.535027981 CET591803778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:32.653990984 CET377859178154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:32.654489040 CET377859180154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:33.711018085 CET377859180154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:33.711253881 CET591803778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.711288929 CET377859178154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:33.711344957 CET591803778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.711378098 CET591783778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.711584091 CET591783778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.712497950 CET591823778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.712836027 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.832026958 CET377859182154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:33.832262039 CET591823778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.832340956 CET377859184154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:33.832441092 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.833520889 CET591823778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:33.953146935 CET377859182154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:33.953325033 CET591823778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:34.072875977 CET377859182154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:34.743293047 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:34.863039017 CET377859184154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:34.863365889 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:34.864912033 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:34.984565020 CET377859184154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:34.984755993 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.104500055 CET377859184154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:35.131030083 CET377859182154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:35.131299973 CET591823778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.131299973 CET591823778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.132169962 CET591863778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.252144098 CET377859186154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:35.252398968 CET591863778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.253776073 CET591863778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.373375893 CET377859186154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:35.373678923 CET591863778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:35.493220091 CET377859186154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.162621021 CET377859184154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.162841082 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.162841082 CET591843778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.163583040 CET591883778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.283143997 CET377859188154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.283334017 CET591883778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.284720898 CET591883778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.404217958 CET377859188154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.404417038 CET591883778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.524255037 CET377859188154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.551343918 CET377859186154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.551518917 CET591863778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.551619053 CET591863778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.552290916 CET591903778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.671842098 CET377859190154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.672126055 CET591903778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.673455000 CET591903778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.794090033 CET377859190154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:36.794203043 CET591903778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:36.913721085 CET377859190154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:37.582849026 CET377859188154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:37.583143950 CET591883778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.583143950 CET591883778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.583822966 CET591923778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.703398943 CET377859192154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:37.703598022 CET591923778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.704801083 CET591923778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.824387074 CET377859192154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:37.824561119 CET591923778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.944188118 CET377859192154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:37.970952988 CET377859190154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:37.971059084 CET591903778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.971165895 CET591903778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:37.972064972 CET591943778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:38.091675997 CET377859194154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:38.091803074 CET591943778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:38.093018055 CET591943778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:38.212587118 CET377859194154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:38.212671995 CET591943778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:38.332278013 CET377859194154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.004396915 CET377859192154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.004568100 CET591923778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.004643917 CET591923778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.005539894 CET591963778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.125144005 CET377859196154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.125427961 CET591963778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.127114058 CET591963778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.246803999 CET377859196154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.246958017 CET591963778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.366552114 CET377859196154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.392110109 CET377859194154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.392204046 CET591943778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.392242908 CET591943778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.392854929 CET591983778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.512377024 CET377859198154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.512473106 CET591983778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.513720989 CET591983778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.633198023 CET377859198154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:39.633266926 CET591983778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:39.753020048 CET377859198154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.424132109 CET377859196154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.424273968 CET591963778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.424501896 CET591963778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.425190926 CET592003778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.544828892 CET377859200154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.544955969 CET592003778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.546531916 CET592003778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.666140079 CET377859200154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.666253090 CET592003778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.785860062 CET377859200154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.810019970 CET377859198154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.810108900 CET591983778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.810168982 CET591983778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.810719967 CET592023778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.930227041 CET377859202154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:40.930438995 CET592023778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:40.931660891 CET592023778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:41.051292896 CET377859202154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:41.051412106 CET592023778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:41.171042919 CET377859202154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:41.843415976 CET377859200154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:41.843661070 CET592003778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:41.843749046 CET592003778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:41.844639063 CET592043778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:41.964174032 CET377859204154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:41.964459896 CET592043778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:41.965913057 CET592043778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.085392952 CET377859204154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:42.085618973 CET592043778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.205251932 CET377859204154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:42.229285002 CET377859202154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:42.229576111 CET592023778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.229576111 CET592023778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.230319977 CET592063778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.349852085 CET377859206154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:42.349971056 CET592063778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.351391077 CET592063778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.470896959 CET377859206154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:42.471066952 CET592063778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:42.590677023 CET377859206154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.265678883 CET377859204154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.265865088 CET592043778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.265865088 CET592043778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.266555071 CET592083778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.386117935 CET377859208154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.386226892 CET592083778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.387541056 CET592083778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.507086039 CET377859208154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.507181883 CET592083778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.626764059 CET377859208154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.656819105 CET377859206154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.656930923 CET592063778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.656950951 CET592063778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.657681942 CET592103778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.777708054 CET377859210154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.777868032 CET592103778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.779273033 CET592103778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:43.898745060 CET377859210154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:43.898929119 CET592103778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:44.018537998 CET377859210154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:44.687782049 CET377859208154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:44.688112974 CET592083778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:44.688112974 CET592083778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:44.688882113 CET592123778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:44.808566093 CET377859212154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:44.808839083 CET592123778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:44.810137033 CET592123778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:44.931287050 CET377859212154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:44.931576967 CET592123778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.051232100 CET377859212154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:45.076951981 CET377859210154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:45.077322006 CET592103778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.077322006 CET592103778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.077980995 CET592143778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.197585106 CET377859214154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:45.197735071 CET592143778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.198884010 CET592143778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.318597078 CET377859214154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:45.318747997 CET592143778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:45.438476086 CET377859214154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.108967066 CET377859212154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.109071970 CET592123778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.109123945 CET592123778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.109988928 CET592163778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.229600906 CET377859216154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.229886055 CET592163778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.231226921 CET592163778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.350807905 CET377859216154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.350893974 CET592163778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.470688105 CET377859216154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.497961998 CET377859214154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.498068094 CET592143778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.498250008 CET592143778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.498822927 CET592183778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.618552923 CET377859218154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.618825912 CET592183778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.620214939 CET592183778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.739732981 CET377859218154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:46.740040064 CET592183778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:46.859874010 CET377859218154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:47.530668974 CET377859216154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:47.531038046 CET592163778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.531080961 CET592163778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.531893015 CET592203778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.651506901 CET377859220154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:47.651705027 CET592203778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.653135061 CET592203778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.772783041 CET377859220154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:47.773065090 CET592203778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.892705917 CET377859220154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:47.920008898 CET377859218154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:47.920233965 CET592183778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.920288086 CET592183778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:47.920994997 CET592223778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:48.040539980 CET377859222154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:48.040715933 CET592223778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:48.042184114 CET592223778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:48.161705017 CET377859222154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:48.161776066 CET592223778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:48.281408072 CET377859222154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:48.952006102 CET377859220154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:48.952302933 CET592203778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:48.952302933 CET592203778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:48.953093052 CET592243778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.072964907 CET377859224154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:49.073261023 CET592243778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.074543953 CET592243778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.194160938 CET377859224154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:49.194313049 CET592243778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.313946962 CET377859224154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:49.341757059 CET377859222154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:49.342025995 CET592223778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.342026949 CET592223778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.342771053 CET592263778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.462332964 CET377859226154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:49.462536097 CET592263778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.463872910 CET592263778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.583434105 CET377859226154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:49.583539009 CET592263778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:49.703140974 CET377859226154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.371818066 CET377859224154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.372128010 CET592243778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.372205973 CET592243778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.372983932 CET592283778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.492527008 CET377859228154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.492679119 CET592283778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.494177103 CET592283778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.613657951 CET377859228154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.613873005 CET592283778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.733515024 CET377859228154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.769785881 CET377859226154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.770066023 CET592263778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.770155907 CET592263778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.771122932 CET592303778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.890815973 CET377859230154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:50.891181946 CET592303778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:50.892395973 CET592303778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:51.012058973 CET377859230154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:51.012351990 CET592303778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:51.132049084 CET377859230154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:51.793782949 CET377859228154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:51.794003010 CET592283778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:51.794138908 CET592283778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:51.795010090 CET592323778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:51.914726973 CET377859232154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:51.914895058 CET592323778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:51.916373014 CET592323778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.035888910 CET377859232154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:52.036027908 CET592323778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.155872107 CET377859232154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:52.190448046 CET377859230154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:52.190610886 CET592303778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.190648079 CET592303778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.191374063 CET592343778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.311014891 CET377859234154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:52.311299086 CET592343778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.312648058 CET592343778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.432215929 CET377859234154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:52.432512045 CET592343778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:52.552309036 CET377859234154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.212342024 CET377859232154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.212526083 CET592323778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.212599039 CET592323778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.213498116 CET592363778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.333148003 CET377859236154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.333293915 CET592363778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.334736109 CET592363778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.454197884 CET377859236154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.454400063 CET592363778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.574033022 CET377859236154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.611538887 CET377859234154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.611840963 CET592343778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.611932039 CET592343778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.612935066 CET592383778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.732625008 CET377859238154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.732943058 CET592383778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.734488010 CET592383778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.854008913 CET377859238154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:53.854127884 CET592383778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:53.973828077 CET377859238154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:54.639605999 CET377859236154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:54.639801979 CET592363778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:54.639899969 CET592363778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:54.640732050 CET592403778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:54.760289907 CET377859240154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:54.760443926 CET592403778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:54.761925936 CET592403778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:54.881896973 CET377859240154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:54.882047892 CET592403778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.001781940 CET377859240154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:55.029032946 CET377859238154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:55.029366970 CET592383778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.029366970 CET592383778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.029928923 CET592423778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.149523973 CET377859242154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:55.149781942 CET592423778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.151331902 CET592423778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.270915031 CET377859242154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:55.271116972 CET592423778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:55.390712976 CET377859242154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.063436985 CET377859240154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.063633919 CET592403778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.063693047 CET592403778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.064650059 CET592443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.184531927 CET377859244154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.184637070 CET592443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.186055899 CET592443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.306461096 CET377859244154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.306567907 CET592443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.426292896 CET377859244154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.455482006 CET377859242154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.455732107 CET592423778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.455773115 CET592423778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.456679106 CET592463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.576232910 CET377859246154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.576450109 CET592463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.577810049 CET592463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.697422028 CET377859246154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:56.697536945 CET592463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:56.817101002 CET377859246154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.481970072 CET377859244154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.482285023 CET592443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.482378960 CET592443778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.483330965 CET592483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.602813005 CET377859248154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.603085995 CET592483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.604798079 CET592483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.724313974 CET377859248154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.724569082 CET592483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.844491959 CET377859248154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.875442982 CET377859246154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.875575066 CET592463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.875621080 CET592463778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.876477003 CET592503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.996244907 CET377859250154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:57.996500969 CET592503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:57.998420000 CET592503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:58.118046999 CET377859250154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:58.118292093 CET592503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:58.237916946 CET377859250154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:58.904459953 CET377859248154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:58.904795885 CET592483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:58.904889107 CET592483778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:58.905674934 CET592523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.025363922 CET377859252154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:59.025681019 CET592523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.027152061 CET592523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.146732092 CET377859252154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:59.147011995 CET592523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.266768932 CET377859252154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:59.295615911 CET377859250154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:59.295722961 CET592503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.295780897 CET592503778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.296401978 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.416476011 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:59.416620970 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.417948961 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.537544012 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:30:59.537740946 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:30:59.657285929 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:00.333461046 CET377859252154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:00.333842039 CET592523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:00.333842039 CET592523778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:00.334546089 CET592563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:00.454092979 CET377859256154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:00.454363108 CET592563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:00.455701113 CET592563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:00.576477051 CET377859256154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:00.576648951 CET592563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:00.696326971 CET377859256154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:01.751060963 CET377859256154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:01.751270056 CET592563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:01.751410007 CET592563778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:01.752262115 CET592583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:01.871826887 CET377859258154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:01.872025967 CET592583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:01.873569965 CET592583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:01.993035078 CET377859258154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:01.993267059 CET592583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:02.113078117 CET377859258154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:03.171247005 CET377859258154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:03.171473026 CET592583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:03.171622038 CET592583778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:03.172537088 CET592603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:03.292119026 CET377859260154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:03.292273998 CET592603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:03.293850899 CET592603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:03.413641930 CET377859260154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:03.413950920 CET592603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:03.533667088 CET377859260154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:04.591341972 CET377859260154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:04.591552973 CET592603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:04.591634989 CET592603778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:04.592622042 CET592623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:04.712321043 CET377859262154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:04.712562084 CET592623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:04.714289904 CET592623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:04.833831072 CET377859262154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:04.833956957 CET592623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:04.953525066 CET377859262154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:06.013552904 CET377859262154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:06.013644934 CET592623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:06.013842106 CET592623778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:06.014260054 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:06.133877039 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:06.134042025 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:06.135250092 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:06.255094051 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:06.255417109 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:06.375086069 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:09.428035975 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:09.547616005 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:09.848732948 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:09.848956108 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:16.145102024 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:31:16.264807940 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:16.566800117 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:31:16.566998959 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:32:09.897836924 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:32:10.017647028 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:32:10.318749905 CET377859254154.216.20.216192.168.2.14
            Dec 25, 2024 11:32:10.319031954 CET592543778192.168.2.14154.216.20.216
            Dec 25, 2024 11:32:16.621953964 CET592643778192.168.2.14154.216.20.216
            Dec 25, 2024 11:32:16.741688967 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:32:17.046478033 CET377859264154.216.20.216192.168.2.14
            Dec 25, 2024 11:32:17.046648026 CET592643778192.168.2.14154.216.20.216

            System Behavior

            General

            Start time (UTC):10:30:15
            Start date (UTC):25/12/2024
            Path:/tmp/Space.sh4.elf
            Arguments:/tmp/Space.sh4.elf
            File size:4139976 bytes
            MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

            Chronological Activities


            General

            Start time (UTC):10:30:15
            Start date (UTC):25/12/2024
            Path:/tmp/Space.sh4.elf
            Arguments:-
            File size:4139976 bytes
            MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

            Chronological Activities


            General

            Start time (UTC):10:30:15
            Start date (UTC):25/12/2024
            Path:/tmp/Space.sh4.elf
            Arguments:-
            File size:4139976 bytes
            MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

            Chronological Activities


            General

            Start time (UTC):10:30:15
            Start date (UTC):25/12/2024
            Path:/tmp/Space.sh4.elf
            Arguments:-
            File size:4139976 bytes
            MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

            Chronological Activities


            General

            Start time (UTC):10:30:21
            Start date (UTC):25/12/2024
            Path:/tmp/Space.sh4.elf
            Arguments:-
            File size:4139976 bytes
            MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

            Chronological Activities


            General

            Start time (UTC):10:30:21
            Start date (UTC):25/12/2024
            Path:/tmp/Space.sh4.elf
            Arguments:-
            File size:4139976 bytes
            MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

            Chronological Activities