Edit tour

Linux Analysis Report
fnkea7.elf

Overview

General Information

Sample name:	fnkea7.elf
Analysis ID:	1580785
MD5:	37f3dd6f97e8fe474cb0ae0f48d21ad3
SHA1:	340ee3b74b9b9affae20b9d475fc059830812e14
SHA256:	9685134005bcc071d32aed5be4152611270a021afdca690803ae5bab6b025615
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample deletes itself

Sends malformed DNS queries

Detected TCP or UDP traffic on non-standard ports

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580785
Start date and time:	2024-12-26 05:52:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	fnkea7.elf
Detection:	MAL
Classification:	mal80.troj.evad.linELF@0/1@161/0

Runtime Messages

Command:	/tmp/fnkea7.elf
PID:	6238
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

fnkea7.elf (PID: 6238, Parent: 6161, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/fnkea7.elf

fnkea7.elf New Fork (PID: 6240, Parent: 6238)

fnkea7.elf New Fork (PID: 6242, Parent: 6240)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
fnkea7.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
fnkea7.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x19eb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a00c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6238.1.00007f157c017000.00007f157c034000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6238.1.00007f157c017000.00007f157c034000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x19eb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19fe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a00c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: fnkea7.elf PID: 6238	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: fnkea7.elf PID: 6238	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3d97:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dbf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dd3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3de7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dfb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e73:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3e9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3eaf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ec3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ed7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3eeb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3eff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3f13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3f27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: fnkea7.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: fnkea7.elf	Virustotal: Detection: 36%			Perma Link
Source: fnkea7.elf	ReversingLabs: Detection: 44%

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.cardiacpure.ru. [malformed]

Source: global traffic

TCP traffic: 192.168.2.23:38198 -> 178.215.238.25:33966

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru
Source: global traffic	DNS traffic detected: DNS query: raw.cardiacpure.ru. [malformed]

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: fnkea7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6238.1.00007f157c017000.00007f157c034000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: fnkea7.elf PID: 6238, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: fnkea7.elf

ELF static info symbol of initial sample: __gnu_unwind_execute

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/telnetsshwatchdogsshd/usr/compress/bin//compress/bin/compress/usr/bashmain_x86main_x86_64main_mipsmain_mipselmain_armmain_arm5main_arm6main_arm7main_ppcmain_m68kmain_sh4main_spchttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt//tmp/var/mnt/boot/home/dev/..//root(deleted)raw.cardiacpure.ruabcdefghijklmnopqrstuvwxyz/proc/%d/cmdline/proc/%d/proc/self/proc/self/exe

Source: fnkea7.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6238.1.00007f157c017000.00007f157c034000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: fnkea7.elf PID: 6238, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.troj.evad.linELF@0/1@161/0

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/fnkea7.elf (PID: 6240)

File: /tmp/fnkea7.elf

Jump to behavior

Source: /tmp/fnkea7.elf (PID: 6238)

Queries kernel information via 'uname':

Jump to behavior

Source: fnkea7.elf, 6238.1.00007ffe344db000.00007ffe344fc000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.zCimgV
Source: fnkea7.elf, 6238.1.00007ffe344db000.00007ffe344fc000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.zCimgV:
Source: fnkea7.elf, 6238.1.000055ba9b62b000.000055ba9b77d000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: fnkea7.elf, 6238.1.00007ffe344db000.00007ffe344fc000.rw-.sdmp	Binary or memory string: K?]C6"x86_64/usr/bin/qemu-arm/tmp/fnkea7.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/fnkea7.elf
Source: fnkea7.elf, 6238.1.000055ba9b62b000.000055ba9b77d000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: fnkea7.elf, 6238.1.00007ffe344db000.00007ffe344fc000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: fnkea7.elf, type: SAMPLE
Source: Yara match	File source: 6238.1.00007f157c017000.00007f157c034000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: fnkea7.elf PID: 6238, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: fnkea7.elf, type: SAMPLE
Source: Yara match	File source: 6238.1.00007f157c017000.00007f157c034000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: fnkea7.elf PID: 6238, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
fnkea7.elf	37%	Virustotal		Browse
fnkea7.elf	45%	ReversingLabs	Linux.Backdoor.Mirai
fnkea7.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.cardiacpure.ru	178.215.238.25	true	false		high
raw.cardiacpure.ru. [malformed]	unknown	unknown	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
178.215.238.25	raw.cardiacpure.ru	Germany	10753	LVLT-10753US	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
178.215.238.25	wkb86.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	wiewa64.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	xd.arm5.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	woega6.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	bin.sh.elf	Get hash	malicious	Unknown	Browse
	main_x86_64.elf	Get hash	malicious	Mirai	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	.i.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.cardiacpure.ru	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	kqibeps.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wiewa64.elf	Get hash	malicious	Mirai	Browse	178.215.238.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	xd.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	wkb86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	woega6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wlw68k.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	njvwa4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	xd.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	wkb86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	woega6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wlw68k.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	njvwa4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	bin.sh.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	main_arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
LVLT-10753US	wkb86.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wlw68k.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	njvwa4.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	178.215.238.25
	armv6l.elf	Get hash	malicious	Mirai	Browse	217.22.7.57
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	94.154.174.150
	nshmpsl.elf	Get hash	malicious	Mirai	Browse	45.129.149.6
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	147.207.230.32
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	178.215.238.74
INIT7CH	xd.arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	telnet.arm7.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	wkb86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	woega6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	njvwa4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	bin.sh.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	main_arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_x86_64.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.zCimgV (deleted)

Download File

Process:	/tmp/fnkea7.elf
File Type:	data
Category:	dropped
Size (bytes):	26
Entropy (8bit):	4.056020968057881
Encrypted:	false
SSDEEP:	3:TgA78HJN:TgAKJN
MD5:	DDA8A2C2CDBED8242E6613F9F91554AD
SHA1:	B2173D9FBA6CE0674B1BB8C895DFFCD31F046BBC
SHA-256:	5F294B98DEF330F44076FC4698C77B36A72A1F12859E29DE92098CE92361A6CE
SHA-512:	2BFFB04D993D23ECEF225B6AAA9BB7DC3E7A10754ECBF497932C06E0DA7C9A1C95E1617FE01E0685242E4AC9B46EC2BB47AC0F5B20A7F3AE5DDB3A692B336ADC
Malicious:	false
Reputation:	low
Preview:	/tmp/fnkea7.elf.nwlrbbmqbh

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.994795437095742
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	fnkea7.elf
File size:	193'891 bytes
MD5:	37f3dd6f97e8fe474cb0ae0f48d21ad3
SHA1:	340ee3b74b9b9affae20b9d475fc059830812e14
SHA256:	9685134005bcc071d32aed5be4152611270a021afdca690803ae5bab6b025615
SHA512:	f6e074285f84a2c252c6a68b685775001d917b9df75b70c932f91b4ebdce9707003bf7e97a553165c52fd545b2853a42b6440e519400ef2086dda8afb79e11e5
SSDEEP:	3072:TcTMH6p+JwnVIEWEPi7Na+L5tFz+cIDA1i4IWT6iPhDVoFM/RJJkxhO+w:TcTMM+JwyEWS6Na+L5tFp0N4Iy6iP5ik
TLSH:	82142946EA414B13C0D727BAF6DF02453323A79493EB73069524AFB43F8679E4E23A05
File Content Preview:	.ELF..............(.........4....Q......4. ...(........px...xF..xF..p...p...........................................................,...0V..........................................Q.td..................................-...L..................@-.,@...0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8194
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	151984
Section Header Size:	40
Number of Section Headers:	30
Header String Table Index:	27

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80d4	0xd4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80f0	0xf0	0x19cd4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x21dc4	0x19dc4	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x21dd8	0x19dd8	0x2888	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x24660	0x1c660	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x24678	0x1c678	0x170	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x2c7e8	0x1c7e8	0x4	0x0	0x3	WA	0	0	4
.tdata	PROGBITS	0x2c7ec	0x1c7ec	0x4	0x0	0x403	WAT	0	0	4
.tbss	NOBITS	0x2c7f0	0x1c7f0	0x8	0x0	0x403	WAT	0	0	4
.init_array	INIT_ARRAY	0x2c7f0	0x1c7f0	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x2c7f4	0x1c7f4	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x2c7f8	0x1c7f8	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x2c7fc	0x1c7fc	0xc0	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2c8bc	0x1c8bc	0x358	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x2cc14	0x1cc14	0x5204	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1cc14	0xf34	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x1db48	0x160	0x0	0x0		0	0	8
.debug_pubnames	PROGBITS	0x0	0x1dca8	0x23e	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x1dee6	0x29df	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x208c5	0x986	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x2124b	0x10da	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x22328	0x33c	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x22664	0xabc	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x23120	0x182a	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x2494a	0x730	0x0	0x0		0	0	1
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x2507a	0x16	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x25090	0x11e	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x25660	0x6620	0x10	0x0		29	948	4
.strtab	STRTAB	0x0	0x2bc80	0x38e3	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x1c678	0x24678	0x24678	0x170	0x170	4.7081	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x1c7e8	0x1c7e8	6.1224	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x1c7e8	0x2c7e8	0x2c7e8	0x42c	0x5630	4.6763	0x6	RW	0x8000	.eh_frame .tdata .tbss .init_array .fini_array .jcr .got .data .bss
TLS	0x1c7ec	0x2c7ec	0x2c7ec	0x4	0xc	2.0000	0x4	R	0x4	.tdata .tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80f0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x21dc4	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x21dd8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x24660	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x24678	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2c7e8	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x2c7ec	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2c7f0	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x2c7f0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x2c7f4	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2c7f8	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x2c7fc	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x2c8bc	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x2cc14	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	24
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	25
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	26
$a	.symtab	0x80d4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x21dc4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80e0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x21dd0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8194	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x822c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8544	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x85b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8620	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8f1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x96d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9e90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb32c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xba1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xbd78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc0d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc22c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc974	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcba0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xce40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd2e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd8b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeeb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf13c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf2e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf33c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf3b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf40c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1023c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10790	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x108f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ccc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10dcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1111c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1113c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11504	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bdc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x121dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x123cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1339c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13950	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14208	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14540	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14670	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1488c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15030	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1527c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1556c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15680	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x157d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15824	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15870	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15878	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1587c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15ae0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15c4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15cac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15dd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15df0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1647c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16484	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1648c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16cf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ee0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17014	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1703c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17050	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x170c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x171e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17218	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17258	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17318	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17474	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1755c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17624	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1765c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1769c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17728	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17798	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x178a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17978	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17a3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17aec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17bd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17c08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17ffc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1802c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1855c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x185dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18740	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x188b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19164	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x198d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x199f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19ca4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a050	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a0f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a200	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a2b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a4f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a604	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a710	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a744	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a768	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a7e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a80c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a850	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a894	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a94c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a994	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a9d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aa48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aa90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ab18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ab5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1abcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aca0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ace8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ad90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ae54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b870	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1b9b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1bd70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c4ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c5ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c6e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c7b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c8b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c99c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c9bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1c9d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cbb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cc74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1cdc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d3e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d434	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d8a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1d90c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1da94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dadc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dbcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dc74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dca4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dcfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dd04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dd34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dd8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dd94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ddc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1de50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ded8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1dfb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e02c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e094	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e2e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e2f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e32c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e444	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e4e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e540	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e664	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e6fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e7fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e8e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e918	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1e970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ea30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ea84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eadc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eec8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1eef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ef7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1efe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f0fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f1ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f1c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f338	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f7c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f81c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f840	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f8fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1f9d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fb18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fbf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fc68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fc94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1fdf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x205e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20728	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20880	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20b3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20b80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20bd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20c1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20d54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20ef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x20f18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x210d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21130	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x211f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x212cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21308	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21378	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21c30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x21d70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c7f4	0	NOTYPE	<unknown>	DEFAULT	11
$d	.symtab	0x8180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c7f0	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x81c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x96cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9e8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa584	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb328	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xba18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc0cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc884	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd2dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd8ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe4e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe828	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xee5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22b64	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf120	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf2c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c8bc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2c978	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0xf338	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf3ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf404	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfde8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c9a0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2c9a4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2c9a8	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0xfe88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfef4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10060	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x100f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1022c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1078c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10838	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x108e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c9ac	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x110bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11138	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x111e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x114f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x116f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1199c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x119f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11b30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11bd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11cfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x123c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12dfc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12fdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x131f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2c9fc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x23408	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x2ca00	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x13394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1394c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13b88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x141ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1432c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14668	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x147b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14cf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2ca14	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x15188	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15520	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x26	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x2c	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x4c	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x53	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x15ac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1646c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x58	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	24
$d	.symtab	0x23c	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0xe39	0	NOTYPE	<unknown>	DEFAULT	24
$d	.symtab	0x16d98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16ed8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17010	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17034	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17084	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x170c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17198	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x171dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17254	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17294	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x172d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17314	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17370	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x173b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x173f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17470	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x174b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x174e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17520	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1759c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1761c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17658	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17698	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17724	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17794	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1788c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17970	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17a30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17ae4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x235a4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17bc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17c04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17fbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x180f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18528	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x185cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18724	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2ca20	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2ca1c	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1905c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23620	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x19310	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1935c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x198a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cb04	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x23628	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x19c88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a038	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a1e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a41c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a4e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a700	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x236ac	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1a7e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a848	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a88c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a900	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a944	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a98c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a9d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aa40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1aa8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ab10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ab54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1abc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ac98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ace0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ad24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ad78	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ae48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b84c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cb08	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1b994	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bd50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c1f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c248	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c364	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cb20	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1c418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c4d0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c590	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c634	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cb38	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2cbd0	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1c6dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c7ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c8a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c990	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24218	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1cba0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1cc54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cbe4	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1cd9c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d3b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d83c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d89c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1d904	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1da84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dbc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dc00	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dc10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dca0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dd30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ddc0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1dfac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e014	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e084	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e2c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e320	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e430	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e4e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e658	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e6ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e7e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e8c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1e90c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cbfc	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1ea1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ea7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ead0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ee7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2cc00	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x1eef0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1ef74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1efdc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f07c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f13c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f1a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f7c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f8f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1f9d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1fbf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x205c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x24618	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x2084c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20968	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20a48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20b34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20d0c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20da0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x20eec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x210d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x211f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x212c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x21374	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2ca10	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x2b8	0	NOTYPE	<unknown>	DEFAULT	22
$d	.symtab	0x118f	0	NOTYPE	<unknown>	DEFAULT	24
$d	.symtab	0x0	0	TLS	<unknown>	DEFAULT	8
$d	.symtab	0x2cc0c	0	NOTYPE	<unknown>	DEFAULT	14
$d	.symtab	0x24300	0	NOTYPE	<unknown>	DEFAULT	4
C.11.5548	.symtab	0x24284	12	OBJECT	<unknown>	DEFAULT	4
C.44.6085	.symtab	0x22b64	1024	OBJECT	<unknown>	DEFAULT	4
C.5.5083	.symtab	0x235a4	24	OBJECT	<unknown>	DEFAULT	4
C.7.5370	.symtab	0x24290	12	OBJECT	<unknown>	DEFAULT	4
C.7.6078	.symtab	0x235c8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6109	.symtab	0x235f8	12	OBJECT	<unknown>	DEFAULT	4
C.7.6182	.symtab	0x235d4	12	OBJECT	<unknown>	DEFAULT	4
C.8.6110	.symtab	0x235ec	12	OBJECT	<unknown>	DEFAULT	4
C.9.6119	.symtab	0x235e0	12	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x31920	4	OBJECT	<unknown>	DEFAULT	15
LOCAL_ADDR2	.symtab	0x31934	4	OBJECT	<unknown>	DEFAULT	15
Laligned	.symtab	0x1a2d8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x1a2f4	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x1ef14	104	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x2c7fc	0	OBJECT	<unknown>	HIDDEN	13
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_Unwind_Complete	.symtab	0x15878	4	FUNC	<unknown>	HIDDEN	2
_Unwind_DeleteException	.symtab	0x1587c	44	FUNC	<unknown>	HIDDEN	2
_Unwind_ForcedUnwind	.symtab	0x1652c	36	FUNC	<unknown>	HIDDEN	2
_Unwind_GetCFA	.symtab	0x15870	8	FUNC	<unknown>	HIDDEN	2
_Unwind_GetDataRelBase	.symtab	0x158b4	12	FUNC	<unknown>	HIDDEN	2
_Unwind_GetLanguageSpecificData	.symtab	0x16550	68	FUNC	<unknown>	HIDDEN	2
_Unwind_GetRegionStart	.symtab	0x16cf0	52	FUNC	<unknown>	HIDDEN	2
_Unwind_GetTextRelBase	.symtab	0x158a8	12	FUNC	<unknown>	HIDDEN	2
_Unwind_RaiseException	.symtab	0x164c0	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume	.symtab	0x164e4	36	FUNC	<unknown>	HIDDEN	2
_Unwind_Resume_or_Rethrow	.symtab	0x16508	36	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Get	.symtab	0x157d8	76	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Pop	.symtab	0x15df0	324	FUNC	<unknown>	HIDDEN	2
_Unwind_VRS_Set	.symtab	0x15824	76	FUNC	<unknown>	HIDDEN	2
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x2cc0c	4	OBJECT	<unknown>	DEFAULT	14
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x24300	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x2c7e8	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x2c7e8	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x2cc0c	4	OBJECT	<unknown>	HIDDEN	14
__GI___close	.symtab	0x1dc30	100	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x1dc14	24	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x2cc10	4	OBJECT	<unknown>	HIDDEN	14
__GI___errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__GI___fcntl_nocancel	.symtab	0x16e48	152	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x20728	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1a5ec	24	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x1dc30	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x16ee0	244	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x1dcc0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x1dde0	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x1dd50	100	FUNC	<unknown>	HIDDEN	2
__GI___longjmp	.symtab	0x1eef4	20	FUNC	<unknown>	HIDDEN	2
__GI___nptl_create_event	.symtab	0x15028	4	FUNC	<unknown>	HIDDEN	2
__GI___nptl_death_event	.symtab	0x1502c	4	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x1dcc0	100	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x1dca4	24	FUNC	<unknown>	HIDDEN	2
__GI___pthread_cleanup_upto	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__GI___pthread_keys	.symtab	0x2cc74	8192	OBJECT	<unknown>	HIDDEN	15
__GI___pthread_unwind	.symtab	0x141a4	84	FUNC	<unknown>	HIDDEN	2
__GI___pthread_unwind_next	.symtab	0x141f8	16	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x1dde0	100	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x1ddc4	24	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x1d90c	392	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x1ae78	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x1ae9c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x1ae54	36	FUNC	<unknown>	HIDDEN	2
__GI___stack_user	.symtab	0x2cc54	8	OBJECT	<unknown>	HIDDEN	15
__GI___uClibc_fini	.symtab	0x1e9b4	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1ea84	88	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x1dd50	100	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x1dd34	24	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1a604	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x1ef14	104	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1c250	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x1c99c	32	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x1a80c	68	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x20d54	88	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x1dc30	100	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x17798	272	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1f74c	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1f780	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x1f424	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x1a894	116	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x1cbb0	196	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x17c08	816	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x16ee0	244	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x19ca4	940	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x205e4	324	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x20728	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x198d8	284	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1a050	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x17f38	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x1d498	972	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x17fcc	48	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1a0f0	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x20ef4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x20f18	448	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1ef7c	100	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x1a128	188	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x20728	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x1f080	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1f0ac	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1f0c0	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1f0d4	20	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x17014	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1da94	72	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x17050	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1a908	68	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0x17088	64	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1f0e8	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x1a7e4	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x20c1c	248	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x1c7b8	248	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x170c8	224	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1a744	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x171a8	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x21308	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x20880	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x1a1f0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1a200	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1a310	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x20970	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x1a210	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x16d24	124	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1f0fc	68	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x17298	64	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x17318	96	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x1dcc0	100	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x17978	196	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x17f58	116	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1dadc	240	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x1c390	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1c650	144	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x1dde0	100	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x17aec	232	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x1f338	236	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x173bc	64	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x1a9d8	112	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x1aa90	136	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1f140	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x175a0	132	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x1ab5c	112	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x1ac18	136	FUNC	<unknown>	HIDDEN	2
__GI_setpgid	.symtab	0x17624	56	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x1765c	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x1aca0	72	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1c8b0	236	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x16da0	136	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x1ad2c	80	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x1ad7c	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x1ad90	196	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1769c	140	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x17ffc	48	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x1ace8	68	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x1c6e0	216	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x1a334	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x20a50	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x20860	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x20860	28	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x20b3c	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1a710	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1a2b0	96	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1a424	204	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x20b80	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x20bd0	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x1a4f0	252	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1c9bc	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x1cdc0	1572	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x1a768	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x17728	48	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x1f1ac	20	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x17758	64	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x18770	324	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1802c	208	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1f7c8	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1f840	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1f81c	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x1dd50	100	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x2c7f8	0	OBJECT	<unknown>	DEFAULT	12
__JCR_LIST__	.symtab	0x2c7f8	0	OBJECT	<unknown>	DEFAULT	12
___Unwind_ForcedUnwind	.symtab	0x1652c	36	FUNC	<unknown>	HIDDEN	2
___Unwind_RaiseException	.symtab	0x164c0	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume	.symtab	0x164e4	36	FUNC	<unknown>	HIDDEN	2
___Unwind_Resume_or_Rethrow	.symtab	0x16508	36	FUNC	<unknown>	HIDDEN	2
__adddf3	.symtab	0x21384	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x21ce0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x21ce0	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x21cc4	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x21d70	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x21384	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x21cf8	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x21d40	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x21d58	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x21d28	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x21d10	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x21a24	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x21794	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x21378	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x21380	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x216e0	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x216b8	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x15680	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x157ac	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x21734	96	FUNC	<unknown>	HIDDEN	2
__aeabi_read_tp	.symtab	0x110c0	8	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x21694	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x1556c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x15668	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x21720	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x1648c	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr1	.symtab	0x16484	8	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr2	.symtab	0x1647c	8	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x31914	4	OBJECT	<unknown>	HIDDEN	15
__atexit_lock	.symtab	0x2cbe4	24	OBJECT	<unknown>	DEFAULT	14
__bss_end__	.symtab	0x31e18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x2cc14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x2cc14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x1ea30	84	FUNC	<unknown>	DEFAULT	2
__clone	.symtab	0x1d434	100	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x1dc30	100	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x1dc14	24	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x21c40	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x2cc10	4	OBJECT	<unknown>	DEFAULT	14
__curbrk	.symtab	0x3191c	4	OBJECT	<unknown>	HIDDEN	15
__cxa_begin_cleanup	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_call_unexpected	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__cxa_type_match	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__data_start	.symtab	0x2c8bc	0	NOTYPE	<unknown>	DEFAULT	14
__deallocate_stack	.symtab	0x11bdc	304	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x16e40	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x16e34	0	FUNC	<unknown>	DEFAULT	2
__default_stacksize	.symtab	0x2ca10	4	OBJECT	<unknown>	HIDDEN	14
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x157c4	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x21a24	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x15680	300	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x80f0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x2c7f4	0	OBJECT	<unknown>	DEFAULT	11
__end__	.symtab	0x31e18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x3190c	4	OBJECT	<unknown>	DEFAULT	15
__eqdf2	.symtab	0x21c40	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x1111c	32	FUNC	<unknown>	DEFAULT	2
__error	.symtab	0x1d494	0	NOTYPE	<unknown>	DEFAULT	2
__exidx_end	.symtab	0x247e8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x24678	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x30e80	4	OBJECT	<unknown>	HIDDEN	15
__extendsfdf2	.symtab	0x216e0	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x16e48	152	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x20728	300	FUNC	<unknown>	DEFAULT	2
__find_in_stack_list	.symtab	0x113d0	308	FUNC	<unknown>	HIDDEN	2
__fini_array_end	.symtab	0x2c7f8	0	NOTYPE	<unknown>	HIDDEN	11
__fini_array_start	.symtab	0x2c7f4	0	NOTYPE	<unknown>	HIDDEN	11
__fixunsdfsi	.symtab	0x21d70	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x21734	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x216b8	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x21720	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x21694	36	FUNC	<unknown>	HIDDEN	2
__fork	.symtab	0x10f98	24	FUNC	<unknown>	DEFAULT	2
__fork_generation	.symtab	0x31a00	4	OBJECT	<unknown>	HIDDEN	15
__fork_generation_pointer	.symtab	0x31de4	4	OBJECT	<unknown>	HIDDEN	15
__fork_handlers	.symtab	0x31de8	4	OBJECT	<unknown>	HIDDEN	15
__fork_lock	.symtab	0x30e84	4	OBJECT	<unknown>	HIDDEN	15
__frame_dummy_init_array_entry	.symtab	0x2c7f0	0	OBJECT	<unknown>	DEFAULT	10
__free_stacks	.symtab	0x11b38	164	FUNC	<unknown>	HIDDEN	2
__free_tcb	.symtab	0x11d0c	116	FUNC	<unknown>	HIDDEN	2
__gedf2	.symtab	0x21c30	148	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x1efe0	160	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x20dac	328	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x17014	40	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x1da94	72	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x1a5ec	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gnu_Unwind_Find_exidx	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__gnu_Unwind_ForcedUnwind	.symtab	0x15c30	28	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_RaiseException	.symtab	0x15d18	184	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Restore_VFP	.symtab	0x164b0	0	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume	.symtab	0x15cac	108	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Resume_or_Rethrow	.symtab	0x15dd0	32	FUNC	<unknown>	HIDDEN	2
__gnu_Unwind_Save_VFP	.symtab	0x164b8	0	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_execute	.symtab	0x16594	1812	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_frame	.symtab	0x16ca8	72	FUNC	<unknown>	HIDDEN	2
__gnu_unwind_pr_common	.symtab	0x15f34	1352	FUNC	<unknown>	DEFAULT	2
__gtdf2	.symtab	0x21c30	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x2c7f4	0	NOTYPE	<unknown>	HIDDEN	10
__init_array_start	.symtab	0x2c7f0	0	NOTYPE	<unknown>	HIDDEN	10
__init_sched_fifo_prio	.symtab	0x149d4	76	FUNC	<unknown>	HIDDEN	2
__is_smp	.symtab	0x319f8	4	OBJECT	<unknown>	HIDDEN	15
__ledf2	.symtab	0x21c38	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x1dc30	100	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x1a894	116	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1de50	136	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x1ded8	220	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	9
__libc_fcntl	.symtab	0x16ee0	244	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x1d498	972	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x8	4	TLS	<unknown>	HIDDEN	9
__libc_longjmp	.symtab	0x171e0	56	FUNC	<unknown>	DEFAULT	2
__libc_multiple_threads	.symtab	0x31dec	4	OBJECT	<unknown>	HIDDEN	15
__libc_multiple_threads_ptr	.symtab	0x319f4	4	OBJECT	<unknown>	HIDDEN	15
__libc_nanosleep	.symtab	0x17318	96	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x1dcc0	100	FUNC	<unknown>	DEFAULT	2
__libc_pthread_init	.symtab	0x1d864	68	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x1dde0	100	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x1a9d8	112	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x1aa90	136	FUNC	<unknown>	DEFAULT	2
__libc_resp	.symtab	0x0	4	TLS	<unknown>	HIDDEN	8
__libc_select	.symtab	0x175a0	132	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x1ab5c	112	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x1ac18	136	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1e0b8	560	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x16da0	136	FUNC	<unknown>	DEFAULT	2
__libc_siglongjmp	.symtab	0x171e0	56	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x31908	4	OBJECT	<unknown>	DEFAULT	15
__libc_write	.symtab	0x1dd50	100	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x1d8a8	100	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait	.symtab	0x143cc	156	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x14334	152	FUNC	<unknown>	HIDDEN	2
__lll_robust_lock_wait	.symtab	0x147bc	208	FUNC	<unknown>	HIDDEN	2
__lll_robust_timedlock_wait	.symtab	0x14670	332	FUNC	<unknown>	HIDDEN	2
__lll_timedlock_wait	.symtab	0x14540	304	FUNC	<unknown>	HIDDEN	2
__lll_timedwait_tid	.symtab	0x14468	216	FUNC	<unknown>	HIDDEN	2
__longjmp	.symtab	0x1eef4	20	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x21c38	140	FUNC	<unknown>	HIDDEN	2
__make_stacks_executable	.symtab	0x119fc	8	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x1be20	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x1aec0	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x2cb08	24	OBJECT	<unknown>	DEFAULT	14
__malloc_state	.symtab	0x31a6c	888	OBJECT	<unknown>	DEFAULT	15
__malloc_trim	.symtab	0x1bd70	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x21794	656	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x21c40	132	FUNC	<unknown>	HIDDEN	2
__nptl_create_event	.symtab	0x15028	4	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x11a04	308	FUNC	<unknown>	HIDDEN	2
__nptl_death_event	.symtab	0x1502c	4	FUNC	<unknown>	DEFAULT	2
__nptl_initial_report_events	.symtab	0x2ec78	1	OBJECT	<unknown>	DEFAULT	15
__nptl_last_event	.symtab	0x2cc68	4	OBJECT	<unknown>	DEFAULT	15
__nptl_nthreads	.symtab	0x2c9fc	4	OBJECT	<unknown>	DEFAULT	14
__nptl_setxid	.symtab	0x11704	688	FUNC	<unknown>	HIDDEN	2
__nptl_threads_events	.symtab	0x2cc60	8	OBJECT	<unknown>	DEFAULT	15
__open	.symtab	0x1dcc0	100	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x1dca4	24	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x31910	4	OBJECT	<unknown>	DEFAULT	15
__preinit_array_end	.symtab	0x2c7f0	0	NOTYPE	<unknown>	HIDDEN	9
__preinit_array_start	.symtab	0x2c7f0	0	NOTYPE	<unknown>	HIDDEN	9
__progname	.symtab	0x2cc04	4	OBJECT	<unknown>	DEFAULT	14
__progname_full	.symtab	0x2cc08	4	OBJECT	<unknown>	DEFAULT	14
__pthread_cleanup_pop	.symtab	0x14e5c	56	FUNC	<unknown>	HIDDEN	2
__pthread_cleanup_pop_restore	.symtab	0x14f38	240	FUNC	<unknown>	DEFAULT	2
__pthread_cleanup_push	.symtab	0x14e94	40	FUNC	<unknown>	HIDDEN	2
__pthread_cleanup_push_defer	.symtab	0x14ebc	124	FUNC	<unknown>	DEFAULT	2
__pthread_create_2_1	.symtab	0x123cc	2692	FUNC	<unknown>	DEFAULT	2
__pthread_current_priority	.symtab	0x14894	320	FUNC	<unknown>	HIDDEN	2
__pthread_debug	.symtab	0x319f0	4	OBJECT	<unknown>	HIDDEN	15
__pthread_disable_asynccancel	.symtab	0x14d0c	136	FUNC	<unknown>	HIDDEN	2
__pthread_enable_asynccancel	.symtab	0x14d94	200	FUNC	<unknown>	HIDDEN	2
__pthread_init_static_tls	.symtab	0x12e50	412	FUNC	<unknown>	HIDDEN	2
__pthread_initialize_minimal	.symtab	0x1527c	752	FUNC	<unknown>	DEFAULT	2
__pthread_initialize_minimal_internal	.symtab	0x1527c	752	FUNC	<unknown>	HIDDEN	2
__pthread_keys	.symtab	0x2cc74	8192	OBJECT	<unknown>	DEFAULT	15
__pthread_multiple_threads	.symtab	0x319fc	4	OBJECT	<unknown>	HIDDEN	15
__pthread_mutex_lock	.symtab	0x13950	576	FUNC	<unknown>	PROTECTED	2
__pthread_mutex_lock_full	.symtab	0x1339c	1460	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock_internal	.symtab	0x13950	576	FUNC	<unknown>	HIDDEN	2
__pthread_mutex_unlock	.symtab	0x1419c	8	FUNC	<unknown>	PROTECTED	2
__pthread_mutex_unlock_full	.symtab	0x13b90	1264	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock_internal	.symtab	0x1419c	8	FUNC	<unknown>	HIDDEN	2
__pthread_mutex_unlock_usercnt	.symtab	0x14080	284	FUNC	<unknown>	HIDDEN	2
__pthread_return_0	.symtab	0x1e970	8	FUNC	<unknown>	DEFAULT	2
__pthread_tpp_change_priority	.symtab	0x14a20	748	FUNC	<unknown>	HIDDEN	2
__pthread_unwind	.symtab	0x141a4	84	FUNC	<unknown>	DEFAULT	2
__pthread_unwind_next	.symtab	0x141f8	16	FUNC	<unknown>	DEFAULT	2
__read	.symtab	0x1dde0	100	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x1ddc4	24	FUNC	<unknown>	DEFAULT	2
__reclaim_stacks	.symtab	0x12fec	548	FUNC	<unknown>	HIDDEN	2
__register_atfork	.symtab	0x1d90c	392	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resp	.symtab	0x0	4	TLS	<unknown>	DEFAULT	8
__restore_core_regs	.symtab	0x16494	28	FUNC	<unknown>	HIDDEN	2
__rtld_fini	.symtab	0x31918	4	OBJECT	<unknown>	HIDDEN	15
__sched_fifo_max_prio	.symtab	0x2ca18	4	OBJECT	<unknown>	HIDDEN	14
__sched_fifo_min_prio	.symtab	0x2ca14	4	OBJECT	<unknown>	HIDDEN	14
__set_robust_list_avail	.symtab	0x31a0c	4	OBJECT	<unknown>	HIDDEN	15
__sigaction	.symtab	0x110d0	76	FUNC	<unknown>	DEFAULT	2
__sigaddset	.symtab	0x1ae78	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x1ae9c	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x1ae54	36	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x20d14	64	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1ef08	12	FUNC	<unknown>	DEFAULT	2
__stack_user	.symtab	0x2cc54	8	OBJECT	<unknown>	DEFAULT	15
__static_tls_align_m1	.symtab	0x31a04	4	OBJECT	<unknown>	HIDDEN	15
__static_tls_size	.symtab	0x31a08	4	OBJECT	<unknown>	HIDDEN	15
__stdin	.symtab	0x2ca2c	4	OBJECT	<unknown>	DEFAULT	14
__stdio_READ	.symtab	0x210d8	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1f8fc	220	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x21130	200	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1f9d8	320	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x211f8	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x212cc	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x21228	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1fb18	220	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x18740	48	FUNC	<unknown>	HIDDEN	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 05:52:52.338695049 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2024 05:52:53.432003021 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:53.551513910 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:53.551595926 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:53.553889036 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:53.673829079 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:53.673909903 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:53.793387890 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:54.816708088 CET	33966	38198	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:54.816776991 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:54.817011118 CET	38198	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:56.057446957 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:56.177185059 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:56.177272081 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:56.178888083 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:56.298429966 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:56.298485041 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:56.417958021 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:57.442756891 CET	33966	38200	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:57.442944050 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:57.442944050 CET	38200	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:57.969907999 CET	42836	443	192.168.2.23	91.189.91.43
Dec 26, 2024 05:52:58.677948952 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:58.737798929 CET	42516	80	192.168.2.23	109.202.202.202
Dec 26, 2024 05:52:58.797528028 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:58.797719955 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:58.798357964 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:58.917880058 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 05:52:58.917984962 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:52:59.037472963 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:00.067471027 CET	33966	38202	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:00.067616940 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:00.067616940 CET	38202	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:01.303083897 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:01.423631907 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:01.423814058 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:01.424571037 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:01.544097900 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:01.544281960 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:01.664623022 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:02.687216997 CET	33966	38204	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:02.687273979 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:02.687300920 CET	38204	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:03.921977997 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:04.041482925 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:04.041666985 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:04.042529106 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:04.161986113 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:04.162045956 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:04.281868935 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:05.307252884 CET	33966	38206	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:05.307306051 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:05.307334900 CET	38206	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:06.545128107 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:06.664702892 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:06.664875031 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:06.665539980 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:06.785048962 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:06.785226107 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:06.904864073 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:07.929889917 CET	33966	38208	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:07.930156946 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:07.930232048 CET	38208	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:09.163690090 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:09.283211946 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:09.283277035 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:09.284657001 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:09.404107094 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:09.404287100 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:09.524003029 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:10.555449009 CET	33966	38210	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:10.555681944 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:10.555681944 CET	38210	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:11.789675951 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:11.909291029 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:11.909343004 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:11.910732031 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:12.030235052 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:12.030385017 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:12.150027037 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:13.071907043 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2024 05:53:13.175111055 CET	33966	38212	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:13.175229073 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:13.175250053 CET	38212	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:14.408003092 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:14.527714968 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:14.527959108 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:14.528821945 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:14.648241043 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:14.648391008 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:14.768173933 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:15.793402910 CET	33966	38214	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:15.793453932 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:15.793512106 CET	38214	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:17.026685953 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:17.146198034 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:17.146275997 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:17.146927118 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:17.266493082 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:17.266666889 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:17.386137009 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:18.413336992 CET	33966	38216	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:18.413402081 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:18.413467884 CET	38216	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:19.645658970 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:19.765290976 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:19.765445948 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:19.766134977 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:19.885663033 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:19.885761023 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:20.005405903 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:21.030436993 CET	33966	38218	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:21.030539036 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:21.030684948 CET	38218	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:22.263000965 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:22.382519960 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:22.382567883 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:22.383335114 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:22.502799988 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:22.502958059 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:22.622438908 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:23.647773027 CET	33966	38220	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:23.648040056 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:23.648123980 CET	38220	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:24.882164955 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:25.001735926 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:25.001838923 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:25.002624035 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:25.122098923 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:25.122270107 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:25.241775036 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:25.358272076 CET	42836	443	192.168.2.23	91.189.91.43
Dec 26, 2024 05:53:26.267479897 CET	33966	38222	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:26.267734051 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:26.267734051 CET	38222	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:27.502799988 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:27.622587919 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:27.622828960 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:27.623555899 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:27.743174076 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:27.743269920 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:27.862991095 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:28.889595985 CET	33966	38224	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:28.889832020 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:28.889832020 CET	38224	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:29.453744888 CET	42516	80	192.168.2.23	109.202.202.202
Dec 26, 2024 05:53:30.126570940 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:30.246352911 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:30.246536016 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:30.247942924 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:30.367580891 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:30.367809057 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:30.487603903 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:31.522911072 CET	33966	38226	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:31.523164034 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:31.523164034 CET	38226	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:32.765302896 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:32.885087013 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:32.885210037 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:32.885899067 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:33.005373001 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:33.005467892 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:33.125241995 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:34.151268005 CET	33966	38228	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:34.151505947 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:34.151743889 CET	38228	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:35.389806032 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:35.509459972 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:35.509674072 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:35.510422945 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:35.629853010 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:35.630055904 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:35.749509096 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:36.775041103 CET	33966	38230	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:36.775177002 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:36.775300980 CET	38230	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:38.011567116 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:38.131156921 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:38.131422043 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:38.132534981 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:38.251970053 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:38.252188921 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:38.371680975 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:39.396383047 CET	33966	38232	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:39.396548033 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:39.396656990 CET	38232	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:40.634124994 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:40.753652096 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:40.753890991 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:40.754883051 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:40.874525070 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:40.874609947 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:40.994201899 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:42.019499063 CET	33966	38234	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:42.019675016 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:42.019900084 CET	38234	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:43.257136106 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:43.376962900 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:43.377532005 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:43.378947020 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:43.498404980 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:43.498676062 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:43.618227005 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:44.641606092 CET	33966	38236	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:44.641961098 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:44.641961098 CET	38236	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:45.879093885 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:45.998728037 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:45.998811960 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:46.000040054 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:46.119545937 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:46.119659901 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:46.239384890 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:47.264856100 CET	33966	38238	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:47.265079975 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:47.265183926 CET	38238	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:48.501833916 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:48.621362925 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:48.621620893 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:48.622817039 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:48.742240906 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:48.742328882 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:48.862219095 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:49.887617111 CET	33966	38240	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:49.887798071 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:49.888021946 CET	38240	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:51.123840094 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:51.243386030 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:51.243509054 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:51.244663954 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:51.364284039 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:51.364422083 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:51.483899117 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:52.510013103 CET	33966	38242	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:52.510281086 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:52.510390997 CET	38242	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:53.747373104 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:53.866991043 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:53.867136955 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:53.868093967 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:53.987615108 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 05:53:53.987719059 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:53:54.026369095 CET	43928	443	192.168.2.23	91.189.91.42
Dec 26, 2024 05:53:54.107415915 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:34.536777973 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:34.537251949 CET	38244	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:34.656800032 CET	33966	38244	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:37.447797060 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:37.567271948 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:37.567394972 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:37.568752050 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:37.688297987 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:37.688426018 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:37.809041977 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:38.832273006 CET	33966	38246	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:38.832410097 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:38.832468987 CET	38246	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:40.070671082 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:40.190340996 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:40.190537930 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:40.191649914 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:40.311369896 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:40.311505079 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:40.431046009 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:41.457375050 CET	33966	38248	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:41.457499027 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:41.457837105 CET	38248	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:43.137686014 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:43.257503033 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:43.257649899 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:43.259469986 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:43.379044056 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:43.379328966 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:43.498811960 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:44.522655964 CET	33966	38250	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:44.522773981 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:44.522834063 CET	38250	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:45.761910915 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:45.881474972 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:45.881697893 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:45.883008003 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:46.002455950 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:46.002671957 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:46.122175932 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:47.147727013 CET	33966	38252	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:47.147871971 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:47.147975922 CET	38252	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:48.553509951 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:48.673706055 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:48.673877001 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:48.675364971 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:48.794859886 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:48.794960022 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:48.915230036 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:49.941030025 CET	33966	38254	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:49.941335917 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:49.941436052 CET	38254	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:51.180497885 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:51.300097942 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:51.300169945 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:51.301064014 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:51.420504093 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:51.420675993 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:51.540796041 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:52.565360069 CET	33966	38256	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:52.565429926 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:52.565516949 CET	38256	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:53.802095890 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:53.921715975 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:53.921981096 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:53.922817945 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:54.042363882 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:54.042635918 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:54.162348986 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:55.186507940 CET	33966	38258	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:55.186674118 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:55.186753988 CET	38258	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:56.425282001 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:56.544743061 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:56.544845104 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:56.545928955 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:56.665538073 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:56.665620089 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:56.785536051 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:57.810147047 CET	33966	38260	178.215.238.25	192.168.2.23
Dec 26, 2024 05:54:57.810225010 CET	38260	33966	192.168.2.23	178.215.238.25
Dec 26, 2024 05:54:57.810297012 CET	38260	33966	192.168.2.23	178.215.238.25

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 26, 2024 05:52:52.571557999 CET	42149	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:52.810726881 CET	53	42149	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:52.812721014 CET	33263	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:52.935012102 CET	53	33263	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:52.935983896 CET	49134	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:53.058399916 CET	53	49134	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:53.059688091 CET	55572	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:53.181883097 CET	53	55572	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:53.184225082 CET	38755	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:53.306428909 CET	53	38755	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:53.308504105 CET	41607	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:53.430804968 CET	53	41607	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:54.819094896 CET	38609	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:54.941349030 CET	53	38609	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:54.943450928 CET	37119	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.066004038 CET	53	37119	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.067008018 CET	40404	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.189491034 CET	53	40404	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.190817118 CET	44001	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.313024998 CET	53	44001	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.314944983 CET	39400	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.437262058 CET	53	39400	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.439467907 CET	32864	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.561845064 CET	53	32864	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.563837051 CET	58107	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.686022043 CET	53	58107	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.687130928 CET	60687	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.809324980 CET	53	60687	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.810844898 CET	43423	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:55.933120012 CET	53	43423	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:55.934408903 CET	56445	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:56.056607008 CET	53	56445	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:57.444284916 CET	37082	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:57.566639900 CET	53	37082	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:57.568152905 CET	39622	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:57.690320969 CET	53	39622	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:57.691296101 CET	32968	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:57.813541889 CET	53	32968	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:57.815105915 CET	57782	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:57.937479019 CET	53	57782	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:57.938857079 CET	34529	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:58.061197042 CET	53	34529	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:58.062118053 CET	42590	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:58.184437990 CET	53	42590	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:58.185594082 CET	55236	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:58.307832003 CET	53	55236	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:58.308969021 CET	49657	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:58.431154966 CET	53	49657	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:58.431927919 CET	34385	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:58.554260015 CET	53	34385	8.8.8.8	192.168.2.23
Dec 26, 2024 05:52:58.555104017 CET	43180	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:52:58.677288055 CET	53	43180	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.068571091 CET	45416	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.190917969 CET	53	45416	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.191694975 CET	45745	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.314229012 CET	53	45745	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.315150023 CET	49601	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.438019991 CET	53	49601	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.438916922 CET	35888	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.561708927 CET	53	35888	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.562501907 CET	56144	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.684798956 CET	53	56144	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.685843945 CET	57850	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.808109999 CET	53	57850	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.809168100 CET	38294	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:00.931474924 CET	53	38294	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:00.932415962 CET	54837	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:01.054622889 CET	53	54837	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:01.055629969 CET	33114	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:01.178091049 CET	53	33114	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:01.179192066 CET	34516	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:01.302351952 CET	53	34516	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:02.688363075 CET	41364	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:02.810609102 CET	53	41364	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:02.811544895 CET	46222	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:02.933913946 CET	53	46222	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:02.935030937 CET	51360	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.057440996 CET	53	51360	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.058397055 CET	55517	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.180840969 CET	53	55517	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.182065010 CET	43578	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.304436922 CET	53	43578	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.305630922 CET	50696	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.427933931 CET	53	50696	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.429013014 CET	40001	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.551328897 CET	53	40001	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.552503109 CET	33840	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.674755096 CET	53	33840	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.675811052 CET	40802	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.797988892 CET	53	40802	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:03.799036026 CET	39279	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:03.921341896 CET	53	39279	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:05.308190107 CET	35926	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:05.430429935 CET	53	35926	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:05.431230068 CET	42408	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:05.554121971 CET	53	42408	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:05.554908037 CET	35140	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:05.678016901 CET	53	35140	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:05.678749084 CET	50073	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:05.801095963 CET	53	50073	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:05.802023888 CET	48699	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:05.926404953 CET	53	48699	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:05.927336931 CET	48489	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:06.051471949 CET	53	48489	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:06.052114010 CET	38109	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:06.174664021 CET	53	38109	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:06.175756931 CET	37452	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:06.298000097 CET	53	37452	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:06.298919916 CET	39314	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:06.421447992 CET	53	39314	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:06.422106028 CET	57808	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:06.544663906 CET	53	57808	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:07.931097031 CET	40665	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.053468943 CET	53	40665	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.054353952 CET	49362	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.176660061 CET	53	49362	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.177566051 CET	60252	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.299942970 CET	53	60252	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.301258087 CET	36127	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.423660040 CET	53	36127	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.424556017 CET	51080	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.546916962 CET	53	51080	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.547856092 CET	37209	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.670237064 CET	53	37209	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.671072960 CET	51558	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.793390989 CET	53	51558	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.794090986 CET	35146	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:08.916377068 CET	53	35146	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:08.917449951 CET	39537	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:09.039694071 CET	53	39537	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:09.040592909 CET	59563	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:09.163008928 CET	53	59563	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:10.556370974 CET	49616	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:10.678594112 CET	53	49616	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:10.679529905 CET	34584	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:10.802056074 CET	53	34584	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:10.802850962 CET	36945	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:10.925152063 CET	53	36945	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:10.926692963 CET	51991	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.049000978 CET	53	51991	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:11.049967051 CET	59640	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.172444105 CET	53	59640	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:11.173214912 CET	50472	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.295670986 CET	53	50472	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:11.296483994 CET	37303	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.418673992 CET	53	37303	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:11.419651031 CET	49115	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.542012930 CET	53	49115	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:11.542901993 CET	38125	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.665318966 CET	53	38125	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:11.666291952 CET	38656	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:11.788714886 CET	53	38656	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.175986052 CET	59649	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:13.298273087 CET	53	59649	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.299217939 CET	53488	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:13.421477079 CET	53	53488	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.422483921 CET	52268	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:13.544895887 CET	53	52268	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.545547009 CET	54337	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:13.667841911 CET	53	54337	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.668760061 CET	33016	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:13.791335106 CET	53	33016	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.792272091 CET	52446	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:13.914535999 CET	53	52446	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:13.915425062 CET	54386	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:14.037694931 CET	53	54386	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:14.038646936 CET	42370	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:14.160830975 CET	53	42370	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:14.161808014 CET	55287	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:14.284181118 CET	53	55287	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:14.285164118 CET	36223	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:14.407388926 CET	53	36223	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:15.794877052 CET	59152	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:15.917056084 CET	53	59152	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:15.917769909 CET	38437	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.040024042 CET	53	38437	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.040690899 CET	44406	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.163270950 CET	53	44406	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.164267063 CET	35973	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.286505938 CET	53	35973	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.287489891 CET	47358	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.409771919 CET	53	47358	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.410671949 CET	52159	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.533001900 CET	53	52159	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.533940077 CET	49118	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.656213045 CET	53	49118	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.657126904 CET	38305	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.779500961 CET	53	38305	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.780860901 CET	41298	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:16.903181076 CET	53	41298	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:16.903989077 CET	44513	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:17.026273966 CET	53	44513	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:18.414061069 CET	45713	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:18.536341906 CET	53	45713	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:18.537152052 CET	35678	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:18.659538984 CET	53	35678	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:18.660233974 CET	33172	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:18.782432079 CET	53	33172	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:18.783202887 CET	57180	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:18.905483007 CET	53	57180	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:18.906435966 CET	55861	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:19.028978109 CET	53	55861	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:19.029814005 CET	50157	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:19.152266026 CET	53	50157	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:19.153023005 CET	59906	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:19.275481939 CET	53	59906	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:19.276416063 CET	43854	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:19.398720980 CET	53	43854	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:19.399540901 CET	43236	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:19.521979094 CET	53	43236	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:19.522938013 CET	34003	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:19.645127058 CET	53	34003	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.031331062 CET	39745	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.153610945 CET	53	39745	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.154406071 CET	38954	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.276665926 CET	53	38954	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.277546883 CET	49169	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.399946928 CET	53	49169	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.400799036 CET	52630	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.523149014 CET	53	52630	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.523883104 CET	36546	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.646286964 CET	53	36546	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.647376060 CET	41246	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.769634962 CET	53	41246	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.770536900 CET	48067	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:21.892762899 CET	53	48067	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:21.893539906 CET	48786	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:22.015892029 CET	53	48786	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:22.016654968 CET	41442	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:22.139249086 CET	53	41442	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:22.140104055 CET	55067	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:22.262526035 CET	53	55067	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:23.648926973 CET	46141	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:23.771328926 CET	53	46141	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:23.772417068 CET	38011	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:23.894876957 CET	53	38011	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:23.895903111 CET	44525	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.018418074 CET	53	44525	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.019078016 CET	50672	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.141468048 CET	53	50672	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.142493963 CET	48013	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.264797926 CET	53	48013	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.265544891 CET	60868	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.388031960 CET	53	60868	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.388757944 CET	58919	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.510952950 CET	53	58919	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.511627913 CET	54054	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.633878946 CET	53	54054	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.634742975 CET	59874	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.757016897 CET	53	59874	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:24.757791996 CET	51073	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:24.881469011 CET	53	51073	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:26.268789053 CET	53982	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:26.391016006 CET	53	53982	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:26.392246962 CET	56657	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:26.514535904 CET	53	56657	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:26.515894890 CET	41992	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:26.638185978 CET	53	41992	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:26.639630079 CET	38302	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:26.761981964 CET	53	38302	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:26.762676954 CET	55234	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:26.884974957 CET	53	55234	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:26.886212111 CET	47099	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:27.008447886 CET	53	47099	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:27.009316921 CET	33216	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:27.131702900 CET	53	33216	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:27.132689953 CET	41807	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:27.255072117 CET	53	41807	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:27.256109953 CET	55819	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:27.378583908 CET	53	55819	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:27.379333019 CET	55309	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:27.502049923 CET	53	55309	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:28.890511036 CET	58678	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.012867928 CET	53	58678	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.014182091 CET	49295	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.136451960 CET	53	49295	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.137767076 CET	60814	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.260039091 CET	53	60814	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.261106014 CET	39175	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.383418083 CET	53	39175	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.384763956 CET	48006	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.507112980 CET	53	48006	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.508692026 CET	42105	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.630940914 CET	53	42105	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.632379055 CET	43335	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.754647017 CET	53	43335	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.755822897 CET	35688	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:29.878288984 CET	53	35688	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:29.879354000 CET	39471	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:30.002052069 CET	53	39471	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:30.003442049 CET	47513	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:30.125837088 CET	53	47513	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:31.524291992 CET	60792	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:31.650499105 CET	53	60792	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:31.652017117 CET	60010	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:31.774426937 CET	53	60010	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:31.775945902 CET	54368	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:31.898370028 CET	53	54368	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:31.899709940 CET	33191	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.022358894 CET	53	33191	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:32.023608923 CET	35703	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.146132946 CET	53	35703	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:32.147535086 CET	38179	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.270036936 CET	53	38179	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:32.271433115 CET	53676	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.393749952 CET	53	53676	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:32.394505978 CET	56773	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.517080069 CET	53	56773	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:32.518496037 CET	44903	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.640722990 CET	53	44903	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:32.642134905 CET	50181	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:32.764393091 CET	53	50181	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.152893066 CET	37425	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:34.275279999 CET	53	37425	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.276365042 CET	37726	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:34.398665905 CET	53	37726	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.399874926 CET	47430	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:34.522649050 CET	53	47430	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.523848057 CET	54364	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:34.646123886 CET	53	54364	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.647293091 CET	33985	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:34.769527912 CET	53	33985	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.770967007 CET	36904	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:34.893241882 CET	53	36904	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:34.894958019 CET	36067	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:35.017236948 CET	53	36067	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:35.018802881 CET	53626	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:35.141158104 CET	53	53626	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:35.142482996 CET	53249	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:35.264764071 CET	53	53249	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:35.266228914 CET	60091	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:35.389015913 CET	53	60091	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:36.776428938 CET	47449	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:36.898674011 CET	53	47449	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:36.900031090 CET	59382	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.022586107 CET	53	59382	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.024046898 CET	52717	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.146429062 CET	53	52717	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.147854090 CET	48199	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.270190001 CET	53	48199	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.271574974 CET	40849	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.393769979 CET	53	40849	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.395096064 CET	38633	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.517622948 CET	53	38633	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.518965960 CET	37905	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.641124010 CET	53	37905	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.641876936 CET	52979	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.764050007 CET	53	52979	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.764863968 CET	42012	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:37.887166977 CET	53	42012	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:37.887996912 CET	51214	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:38.010741949 CET	53	51214	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:39.397809029 CET	34791	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:39.520162106 CET	53	34791	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:39.521464109 CET	44198	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:39.643738985 CET	53	44198	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:39.644821882 CET	53851	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:39.767503977 CET	53	53851	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:39.768250942 CET	60246	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:39.891529083 CET	53	60246	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:39.892805099 CET	58259	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:40.015100002 CET	53	58259	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:40.016375065 CET	48319	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:40.138632059 CET	53	48319	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:40.139769077 CET	44849	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:40.262094975 CET	53	44849	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:40.263660908 CET	49949	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:40.386106014 CET	53	49949	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:40.387285948 CET	50402	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:40.509716988 CET	53	50402	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:40.510880947 CET	34613	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:40.633274078 CET	53	34613	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.021054983 CET	54052	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.143306017 CET	53	54052	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.144658089 CET	40051	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.267097950 CET	53	40051	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.268385887 CET	52068	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.390793085 CET	53	52068	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.391530037 CET	46248	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.513818979 CET	53	46248	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.515026093 CET	42909	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.637401104 CET	53	42909	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.638895035 CET	53396	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.761142969 CET	53	53396	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.762413979 CET	51250	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:42.884831905 CET	53	51250	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:42.886147976 CET	35814	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:43.008719921 CET	53	35814	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:43.010252953 CET	48624	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:43.132597923 CET	53	48624	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:43.134094954 CET	46814	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:43.256369114 CET	53	46814	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:44.642966032 CET	46595	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:44.765264988 CET	53	46595	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:44.766421080 CET	50733	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:44.888694048 CET	53	50733	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:44.889838934 CET	49119	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.012331009 CET	53	49119	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.013912916 CET	58735	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.136209965 CET	53	58735	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.137409925 CET	60373	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.259733915 CET	53	60373	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.261049032 CET	33564	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.383455992 CET	53	33564	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.384803057 CET	33185	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.507005930 CET	53	33185	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.508361101 CET	40814	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.630542040 CET	53	40814	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.631869078 CET	39783	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.754205942 CET	53	39783	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:45.756036997 CET	43105	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:45.878240108 CET	53	43105	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:47.266326904 CET	47002	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:47.388508081 CET	53	47002	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:47.389779091 CET	42468	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:47.512147903 CET	53	42468	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:47.513472080 CET	37656	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:47.635782003 CET	53	37656	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:47.637037039 CET	39136	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:47.759515047 CET	53	39136	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:47.760616064 CET	58791	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:47.883003950 CET	53	58791	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:47.884299040 CET	40201	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:48.006784916 CET	53	40201	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:48.008025885 CET	57044	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:48.130417109 CET	53	57044	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:48.131797075 CET	49752	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:48.253976107 CET	53	49752	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:48.255367041 CET	35194	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:48.377691031 CET	53	35194	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:48.378808975 CET	55663	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:48.501056910 CET	53	55663	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:49.889394045 CET	49616	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.011732101 CET	53	49616	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.012852907 CET	36213	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.135207891 CET	53	36213	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.136486053 CET	59305	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.258709908 CET	53	59305	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.259824038 CET	46957	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.382093906 CET	53	46957	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.383368015 CET	42608	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.505665064 CET	53	42608	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.506889105 CET	45115	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.629043102 CET	53	45115	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.630354881 CET	50886	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.752541065 CET	53	50886	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.753683090 CET	44266	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.875881910 CET	53	44266	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:50.877083063 CET	48354	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:50.999284983 CET	53	48354	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:51.000619888 CET	41560	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:51.122840881 CET	53	41560	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:52.511552095 CET	40922	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:52.633902073 CET	53	40922	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:52.635268927 CET	52337	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:52.757496119 CET	53	52337	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:52.758533001 CET	44828	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:52.880799055 CET	53	44828	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:52.882010937 CET	45300	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.004285097 CET	53	45300	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:53.005520105 CET	46740	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.127826929 CET	53	46740	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:53.129066944 CET	38818	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.251296043 CET	53	38818	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:53.252602100 CET	58025	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.375375986 CET	53	58025	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:53.376621962 CET	40513	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.499038935 CET	53	40513	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:53.500488997 CET	57864	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.622736931 CET	53	57864	8.8.8.8	192.168.2.23
Dec 26, 2024 05:53:53.624175072 CET	38366	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:53:53.746700048 CET	53	38366	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:35.540299892 CET	35227	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:35.662636042 CET	53	35227	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:35.664228916 CET	50921	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:35.786542892 CET	53	50921	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:35.787972927 CET	55578	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:35.910229921 CET	53	55578	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:35.911719084 CET	57729	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:36.035685062 CET	53	57729	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:36.036696911 CET	58076	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:36.827770948 CET	53	58076	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:36.829371929 CET	50260	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:36.951756954 CET	53	50260	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:36.953038931 CET	48079	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:37.075328112 CET	53	48079	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:37.076591015 CET	60445	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:37.198782921 CET	53	60445	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:37.200026989 CET	59484	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:37.323746920 CET	53	59484	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:37.324587107 CET	52538	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:37.446857929 CET	53	52538	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:38.833601952 CET	59711	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:38.955976963 CET	53	59711	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:38.957395077 CET	41786	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.079698086 CET	53	41786	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.080967903 CET	47434	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.203253031 CET	53	47434	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.204544067 CET	55519	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.326800108 CET	53	55519	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.328288078 CET	57482	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.451617002 CET	53	57482	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.453087091 CET	58274	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.575547934 CET	53	58274	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.577033997 CET	36171	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.699187994 CET	53	36171	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.700325966 CET	55334	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.823369980 CET	53	55334	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.824429989 CET	50834	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:39.946626902 CET	53	50834	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:39.947758913 CET	53516	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:40.070002079 CET	53	53516	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:41.459610939 CET	49045	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:41.582006931 CET	53	49045	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:41.584078074 CET	44110	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.140909910 CET	53	44110	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.143055916 CET	58801	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.265846014 CET	53	58801	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.267819881 CET	48888	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.390083075 CET	53	48888	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.391222000 CET	40598	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.513494015 CET	53	40598	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.515434027 CET	47526	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.637723923 CET	53	47526	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.639429092 CET	60519	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.761775017 CET	53	60519	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.763362885 CET	58414	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:42.885637045 CET	53	58414	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:42.887182951 CET	54373	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:43.009649992 CET	53	54373	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:43.011758089 CET	44530	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:43.136523008 CET	53	44530	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:44.524424076 CET	45270	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:44.646709919 CET	53	45270	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:44.648180962 CET	59101	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:44.770495892 CET	53	59101	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:44.772209883 CET	35683	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:44.894484043 CET	53	35683	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:44.896042109 CET	33160	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.018337965 CET	53	33160	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:45.020006895 CET	60900	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.142323017 CET	53	60900	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:45.144021988 CET	49657	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.266227007 CET	53	49657	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:45.267517090 CET	51387	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.389745951 CET	53	51387	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:45.391510963 CET	55893	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.513648033 CET	53	55893	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:45.515269995 CET	51087	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.637435913 CET	53	51087	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:45.638879061 CET	57893	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:45.761115074 CET	53	57893	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.149555922 CET	45984	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:47.271838903 CET	53	45984	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.273372889 CET	56924	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:47.396492958 CET	53	56924	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.397880077 CET	45275	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:47.520154953 CET	53	45275	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.521752119 CET	48202	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:47.644043922 CET	53	48202	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.645626068 CET	55826	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:47.768491030 CET	53	55826	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.769851923 CET	48570	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:47.892039061 CET	53	48570	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:47.893218994 CET	40426	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:48.015537024 CET	53	40426	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:48.016904116 CET	36570	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:48.142519951 CET	53	36570	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:48.143770933 CET	50844	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:48.266248941 CET	53	50844	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:48.268157005 CET	50715	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:48.552803040 CET	53	50715	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:49.942996025 CET	57819	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.065787077 CET	53	57819	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.067092896 CET	38129	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.189297915 CET	53	38129	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.190964937 CET	53156	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.313201904 CET	53	53156	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.314599991 CET	59028	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.436894894 CET	53	59028	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.438502073 CET	36752	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.560697079 CET	53	36752	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.562155962 CET	44794	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.684360981 CET	53	44794	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.685591936 CET	57822	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.807832956 CET	53	57822	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.809288979 CET	44611	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:50.931585073 CET	53	44611	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:50.933232069 CET	43942	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:51.055597067 CET	53	43942	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:51.056924105 CET	44644	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:51.179478884 CET	53	44644	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:52.566420078 CET	44649	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:52.688761950 CET	53	44649	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:52.690068960 CET	33876	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:52.812324047 CET	53	33876	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:52.813718081 CET	46036	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:52.936050892 CET	53	46036	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:52.937378883 CET	49212	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.059664965 CET	53	49212	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:53.060956001 CET	49603	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.183454990 CET	53	49603	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:53.184562922 CET	58085	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.306879997 CET	53	58085	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:53.308207035 CET	48112	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.430651903 CET	53	48112	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:53.432189941 CET	38870	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.554487944 CET	53	38870	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:53.555803061 CET	38076	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.677988052 CET	53	38076	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:53.679299116 CET	44926	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:53.801567078 CET	53	44926	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.187908888 CET	49741	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:55.310280085 CET	53	49741	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.311640024 CET	44600	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:55.433994055 CET	53	44600	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.435259104 CET	49150	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:55.557491064 CET	53	49150	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.559087992 CET	55625	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:55.681941032 CET	53	55625	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.683294058 CET	58704	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:55.807080984 CET	53	58704	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.808037043 CET	56679	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:55.930361032 CET	53	56679	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:55.931649923 CET	36113	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:56.053940058 CET	53	36113	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:56.055206060 CET	45619	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:56.177494049 CET	53	45619	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:56.178770065 CET	32784	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:56.301031113 CET	53	32784	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:56.302468061 CET	47900	53	192.168.2.23	8.8.8.8
Dec 26, 2024 05:54:56.424685955 CET	53	47900	8.8.8.8	192.168.2.23
Dec 26, 2024 05:54:57.811372042 CET	38445	53	192.168.2.23	8.8.8.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 26, 2024 05:52:52.571557999 CET	192.168.2.23	8.8.8.8	0x3a01	Standard query (0)	raw.cardiacpure.ru	A (IP address)	IN (0x0001)	false
Dec 26, 2024 05:52:52.812721014 CET	192.168.2.23	8.8.8.8	0xbf08	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	292	false
Dec 26, 2024 05:52:52.935983896 CET	192.168.2.23	8.8.8.8	0xbf08	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	293	false
Dec 26, 2024 05:52:53.059688091 CET	192.168.2.23	8.8.8.8	0xbf08	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	293	false
Dec 26, 2024 05:52:53.184225082 CET	192.168.2.23	8.8.8.8	0xbf08	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	293	false
Dec 26, 2024 05:52:53.308504105 CET	192.168.2.23	8.8.8.8	0xbf08	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	293	false
Dec 26, 2024 05:52:55.439467907 CET	192.168.2.23	8.8.8.8	0x62f3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	295	false
Dec 26, 2024 05:52:55.563837051 CET	192.168.2.23	8.8.8.8	0x62f3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	295	false
Dec 26, 2024 05:52:55.687130928 CET	192.168.2.23	8.8.8.8	0x62f3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	295	false
Dec 26, 2024 05:52:55.810844898 CET	192.168.2.23	8.8.8.8	0x62f3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	295	false
Dec 26, 2024 05:52:55.934408903 CET	192.168.2.23	8.8.8.8	0x62f3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	296	false
Dec 26, 2024 05:52:58.062118053 CET	192.168.2.23	8.8.8.8	0x7441	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	298	false
Dec 26, 2024 05:52:58.185594082 CET	192.168.2.23	8.8.8.8	0x7441	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	298	false
Dec 26, 2024 05:52:58.308969021 CET	192.168.2.23	8.8.8.8	0x7441	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	298	false
Dec 26, 2024 05:52:58.431927919 CET	192.168.2.23	8.8.8.8	0x7441	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	298	false
Dec 26, 2024 05:52:58.555104017 CET	192.168.2.23	8.8.8.8	0x7441	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	298	false
Dec 26, 2024 05:53:00.685843945 CET	192.168.2.23	8.8.8.8	0xbfdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	300	false
Dec 26, 2024 05:53:00.809168100 CET	192.168.2.23	8.8.8.8	0xbfdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	300	false
Dec 26, 2024 05:53:00.932415962 CET	192.168.2.23	8.8.8.8	0xbfdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	301	false
Dec 26, 2024 05:53:01.055629969 CET	192.168.2.23	8.8.8.8	0xbfdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	301	false
Dec 26, 2024 05:53:01.179192066 CET	192.168.2.23	8.8.8.8	0xbfdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	301	false
Dec 26, 2024 05:53:03.305630922 CET	192.168.2.23	8.8.8.8	0x67d3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	303	false
Dec 26, 2024 05:53:03.429013014 CET	192.168.2.23	8.8.8.8	0x67d3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	303	false
Dec 26, 2024 05:53:03.552503109 CET	192.168.2.23	8.8.8.8	0x67d3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	303	false
Dec 26, 2024 05:53:03.675811052 CET	192.168.2.23	8.8.8.8	0x67d3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	303	false
Dec 26, 2024 05:53:03.799036026 CET	192.168.2.23	8.8.8.8	0x67d3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	303	false
Dec 26, 2024 05:53:05.927336931 CET	192.168.2.23	8.8.8.8	0xcea4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	306	false
Dec 26, 2024 05:53:06.052114010 CET	192.168.2.23	8.8.8.8	0xcea4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	306	false
Dec 26, 2024 05:53:06.175756931 CET	192.168.2.23	8.8.8.8	0xcea4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	306	false
Dec 26, 2024 05:53:06.298919916 CET	192.168.2.23	8.8.8.8	0xcea4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	306	false
Dec 26, 2024 05:53:06.422106028 CET	192.168.2.23	8.8.8.8	0xcea4	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	306	false
Dec 26, 2024 05:53:08.547856092 CET	192.168.2.23	8.8.8.8	0xa148	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	308	false
Dec 26, 2024 05:53:08.671072960 CET	192.168.2.23	8.8.8.8	0xa148	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	308	false
Dec 26, 2024 05:53:08.794090986 CET	192.168.2.23	8.8.8.8	0xa148	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	308	false
Dec 26, 2024 05:53:08.917449951 CET	192.168.2.23	8.8.8.8	0xa148	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	309	false
Dec 26, 2024 05:53:09.040592909 CET	192.168.2.23	8.8.8.8	0xa148	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	309	false
Dec 26, 2024 05:53:11.173214912 CET	192.168.2.23	8.8.8.8	0x14de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 26, 2024 05:53:11.296483994 CET	192.168.2.23	8.8.8.8	0x14de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 26, 2024 05:53:11.419651031 CET	192.168.2.23	8.8.8.8	0x14de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 26, 2024 05:53:11.542901993 CET	192.168.2.23	8.8.8.8	0x14de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 26, 2024 05:53:11.666291952 CET	192.168.2.23	8.8.8.8	0x14de	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	311	false
Dec 26, 2024 05:53:13.792272091 CET	192.168.2.23	8.8.8.8	0xa020	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	313	false
Dec 26, 2024 05:53:13.915425062 CET	192.168.2.23	8.8.8.8	0xa020	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	314	false
Dec 26, 2024 05:53:14.038646936 CET	192.168.2.23	8.8.8.8	0xa020	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	314	false
Dec 26, 2024 05:53:14.161808014 CET	192.168.2.23	8.8.8.8	0xa020	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	314	false
Dec 26, 2024 05:53:14.285164118 CET	192.168.2.23	8.8.8.8	0xa020	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	314	false
Dec 26, 2024 05:53:16.410671949 CET	192.168.2.23	8.8.8.8	0x1747	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 26, 2024 05:53:16.533940077 CET	192.168.2.23	8.8.8.8	0x1747	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 26, 2024 05:53:16.657126904 CET	192.168.2.23	8.8.8.8	0x1747	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 26, 2024 05:53:16.780860901 CET	192.168.2.23	8.8.8.8	0x1747	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	316	false
Dec 26, 2024 05:53:16.903989077 CET	192.168.2.23	8.8.8.8	0x1747	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	317	false
Dec 26, 2024 05:53:19.029814005 CET	192.168.2.23	8.8.8.8	0xf241	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 26, 2024 05:53:19.153023005 CET	192.168.2.23	8.8.8.8	0xf241	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 26, 2024 05:53:19.276416063 CET	192.168.2.23	8.8.8.8	0xf241	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 26, 2024 05:53:19.399540901 CET	192.168.2.23	8.8.8.8	0xf241	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 26, 2024 05:53:19.522938013 CET	192.168.2.23	8.8.8.8	0xf241	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	319	false
Dec 26, 2024 05:53:21.647376060 CET	192.168.2.23	8.8.8.8	0x8726	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	321	false
Dec 26, 2024 05:53:21.770536900 CET	192.168.2.23	8.8.8.8	0x8726	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	321	false
Dec 26, 2024 05:53:21.893539906 CET	192.168.2.23	8.8.8.8	0x8726	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 26, 2024 05:53:22.016654968 CET	192.168.2.23	8.8.8.8	0x8726	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 26, 2024 05:53:22.140104055 CET	192.168.2.23	8.8.8.8	0x8726	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	322	false
Dec 26, 2024 05:53:24.265544891 CET	192.168.2.23	8.8.8.8	0x1fba	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	324	false
Dec 26, 2024 05:53:24.388757944 CET	192.168.2.23	8.8.8.8	0x1fba	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	324	false
Dec 26, 2024 05:53:24.511627913 CET	192.168.2.23	8.8.8.8	0x1fba	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	324	false
Dec 26, 2024 05:53:24.634742975 CET	192.168.2.23	8.8.8.8	0x1fba	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	324	false
Dec 26, 2024 05:53:24.757791996 CET	192.168.2.23	8.8.8.8	0x1fba	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	324	false
Dec 26, 2024 05:53:26.886212111 CET	192.168.2.23	8.8.8.8	0x8486	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	327	false
Dec 26, 2024 05:53:27.009316921 CET	192.168.2.23	8.8.8.8	0x8486	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	327	false
Dec 26, 2024 05:53:27.132689953 CET	192.168.2.23	8.8.8.8	0x8486	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	327	false
Dec 26, 2024 05:53:27.256109953 CET	192.168.2.23	8.8.8.8	0x8486	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	327	false
Dec 26, 2024 05:53:27.379333019 CET	192.168.2.23	8.8.8.8	0x8486	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	327	false
Dec 26, 2024 05:53:29.508692026 CET	192.168.2.23	8.8.8.8	0x859a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	329	false
Dec 26, 2024 05:53:29.632379055 CET	192.168.2.23	8.8.8.8	0x859a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	329	false
Dec 26, 2024 05:53:29.755822897 CET	192.168.2.23	8.8.8.8	0x859a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	329	false
Dec 26, 2024 05:53:29.879354000 CET	192.168.2.23	8.8.8.8	0x859a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	330	false
Dec 26, 2024 05:53:30.003442049 CET	192.168.2.23	8.8.8.8	0x859a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	330	false
Dec 26, 2024 05:53:32.147535086 CET	192.168.2.23	8.8.8.8	0xc7f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	332	false
Dec 26, 2024 05:53:32.271433115 CET	192.168.2.23	8.8.8.8	0xc7f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	332	false
Dec 26, 2024 05:53:32.394505978 CET	192.168.2.23	8.8.8.8	0xc7f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	332	false
Dec 26, 2024 05:53:32.518496037 CET	192.168.2.23	8.8.8.8	0xc7f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	332	false
Dec 26, 2024 05:53:32.642134905 CET	192.168.2.23	8.8.8.8	0xc7f6	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	332	false
Dec 26, 2024 05:53:34.770967007 CET	192.168.2.23	8.8.8.8	0x54e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	334	false
Dec 26, 2024 05:53:34.894958019 CET	192.168.2.23	8.8.8.8	0x54e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	335	false
Dec 26, 2024 05:53:35.018802881 CET	192.168.2.23	8.8.8.8	0x54e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	335	false
Dec 26, 2024 05:53:35.142482996 CET	192.168.2.23	8.8.8.8	0x54e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	335	false
Dec 26, 2024 05:53:35.266228914 CET	192.168.2.23	8.8.8.8	0x54e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	335	false
Dec 26, 2024 05:53:37.395096064 CET	192.168.2.23	8.8.8.8	0x9fdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	337	false
Dec 26, 2024 05:53:37.518965960 CET	192.168.2.23	8.8.8.8	0x9fdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	337	false
Dec 26, 2024 05:53:37.641876936 CET	192.168.2.23	8.8.8.8	0x9fdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	337	false
Dec 26, 2024 05:53:37.764863968 CET	192.168.2.23	8.8.8.8	0x9fdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	337	false
Dec 26, 2024 05:53:37.887996912 CET	192.168.2.23	8.8.8.8	0x9fdd	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	338	false
Dec 26, 2024 05:53:40.016375065 CET	192.168.2.23	8.8.8.8	0x483d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	340	false
Dec 26, 2024 05:53:40.139769077 CET	192.168.2.23	8.8.8.8	0x483d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	340	false
Dec 26, 2024 05:53:40.263660908 CET	192.168.2.23	8.8.8.8	0x483d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	340	false
Dec 26, 2024 05:53:40.387285948 CET	192.168.2.23	8.8.8.8	0x483d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	340	false
Dec 26, 2024 05:53:40.510880947 CET	192.168.2.23	8.8.8.8	0x483d	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	340	false
Dec 26, 2024 05:53:42.638895035 CET	192.168.2.23	8.8.8.8	0x367a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	342	false
Dec 26, 2024 05:53:42.762413979 CET	192.168.2.23	8.8.8.8	0x367a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	342	false
Dec 26, 2024 05:53:42.886147976 CET	192.168.2.23	8.8.8.8	0x367a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	343	false
Dec 26, 2024 05:53:43.010252953 CET	192.168.2.23	8.8.8.8	0x367a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	343	false
Dec 26, 2024 05:53:43.134094954 CET	192.168.2.23	8.8.8.8	0x367a	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	343	false
Dec 26, 2024 05:53:45.261049032 CET	192.168.2.23	8.8.8.8	0xba66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	345	false
Dec 26, 2024 05:53:45.384803057 CET	192.168.2.23	8.8.8.8	0xba66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	345	false
Dec 26, 2024 05:53:45.508361101 CET	192.168.2.23	8.8.8.8	0xba66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	345	false
Dec 26, 2024 05:53:45.631869078 CET	192.168.2.23	8.8.8.8	0xba66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	345	false
Dec 26, 2024 05:53:45.756036997 CET	192.168.2.23	8.8.8.8	0xba66	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	345	false
Dec 26, 2024 05:53:47.884299040 CET	192.168.2.23	8.8.8.8	0x61e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	348	false
Dec 26, 2024 05:53:48.008025885 CET	192.168.2.23	8.8.8.8	0x61e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	348	false
Dec 26, 2024 05:53:48.131797075 CET	192.168.2.23	8.8.8.8	0x61e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	348	false
Dec 26, 2024 05:53:48.255367041 CET	192.168.2.23	8.8.8.8	0x61e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	348	false
Dec 26, 2024 05:53:48.378808975 CET	192.168.2.23	8.8.8.8	0x61e0	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	348	false
Dec 26, 2024 05:53:50.506889105 CET	192.168.2.23	8.8.8.8	0xbbda	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	350	false
Dec 26, 2024 05:53:50.630354881 CET	192.168.2.23	8.8.8.8	0xbbda	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	350	false
Dec 26, 2024 05:53:50.753683090 CET	192.168.2.23	8.8.8.8	0xbbda	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	350	false
Dec 26, 2024 05:53:50.877083063 CET	192.168.2.23	8.8.8.8	0xbbda	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	350	false
Dec 26, 2024 05:53:51.000619888 CET	192.168.2.23	8.8.8.8	0xbbda	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	351	false
Dec 26, 2024 05:53:53.129066944 CET	192.168.2.23	8.8.8.8	0x9089	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	353	false
Dec 26, 2024 05:53:53.252602100 CET	192.168.2.23	8.8.8.8	0x9089	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	353	false
Dec 26, 2024 05:53:53.376621962 CET	192.168.2.23	8.8.8.8	0x9089	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	353	false
Dec 26, 2024 05:53:53.500488997 CET	192.168.2.23	8.8.8.8	0x9089	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	353	false
Dec 26, 2024 05:53:53.624175072 CET	192.168.2.23	8.8.8.8	0x9089	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	353	false
Dec 26, 2024 05:54:36.829371929 CET	192.168.2.23	8.8.8.8	0x9cc8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	396	false
Dec 26, 2024 05:54:36.953038931 CET	192.168.2.23	8.8.8.8	0x9cc8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 26, 2024 05:54:37.076591015 CET	192.168.2.23	8.8.8.8	0x9cc8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 26, 2024 05:54:37.200026989 CET	192.168.2.23	8.8.8.8	0x9cc8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 26, 2024 05:54:37.324587107 CET	192.168.2.23	8.8.8.8	0x9cc8	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	397	false
Dec 26, 2024 05:54:39.453087091 CET	192.168.2.23	8.8.8.8	0xd4fb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 05:54:39.577033997 CET	192.168.2.23	8.8.8.8	0xd4fb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 05:54:39.700325966 CET	192.168.2.23	8.8.8.8	0xd4fb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 05:54:39.824429989 CET	192.168.2.23	8.8.8.8	0xd4fb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	399	false
Dec 26, 2024 05:54:39.947758913 CET	192.168.2.23	8.8.8.8	0xd4fb	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	400	false
Dec 26, 2024 05:54:42.515434027 CET	192.168.2.23	8.8.8.8	0xdad3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 26, 2024 05:54:42.639429092 CET	192.168.2.23	8.8.8.8	0xdad3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 26, 2024 05:54:42.763362885 CET	192.168.2.23	8.8.8.8	0xdad3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	402	false
Dec 26, 2024 05:54:42.887182951 CET	192.168.2.23	8.8.8.8	0xdad3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	403	false
Dec 26, 2024 05:54:43.011758089 CET	192.168.2.23	8.8.8.8	0xdad3	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	403	false
Dec 26, 2024 05:54:45.144021988 CET	192.168.2.23	8.8.8.8	0x5081	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 26, 2024 05:54:45.267517090 CET	192.168.2.23	8.8.8.8	0x5081	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 26, 2024 05:54:45.391510963 CET	192.168.2.23	8.8.8.8	0x5081	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 26, 2024 05:54:45.515269995 CET	192.168.2.23	8.8.8.8	0x5081	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 26, 2024 05:54:45.638879061 CET	192.168.2.23	8.8.8.8	0x5081	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	405	false
Dec 26, 2024 05:54:47.769851923 CET	192.168.2.23	8.8.8.8	0x9bc1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	407	false
Dec 26, 2024 05:54:47.893218994 CET	192.168.2.23	8.8.8.8	0x9bc1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	408	false
Dec 26, 2024 05:54:48.016904116 CET	192.168.2.23	8.8.8.8	0x9bc1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	408	false
Dec 26, 2024 05:54:48.143770933 CET	192.168.2.23	8.8.8.8	0x9bc1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	408	false
Dec 26, 2024 05:54:48.268157005 CET	192.168.2.23	8.8.8.8	0x9bc1	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	408	false
Dec 26, 2024 05:54:50.562155962 CET	192.168.2.23	8.8.8.8	0x909b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 26, 2024 05:54:50.685591936 CET	192.168.2.23	8.8.8.8	0x909b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 26, 2024 05:54:50.809288979 CET	192.168.2.23	8.8.8.8	0x909b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	410	false
Dec 26, 2024 05:54:50.933232069 CET	192.168.2.23	8.8.8.8	0x909b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	411	false
Dec 26, 2024 05:54:51.056924105 CET	192.168.2.23	8.8.8.8	0x909b	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	411	false
Dec 26, 2024 05:54:53.184562922 CET	192.168.2.23	8.8.8.8	0x8e2	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 26, 2024 05:54:53.308207035 CET	192.168.2.23	8.8.8.8	0x8e2	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 26, 2024 05:54:53.432189941 CET	192.168.2.23	8.8.8.8	0x8e2	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 26, 2024 05:54:53.555803061 CET	192.168.2.23	8.8.8.8	0x8e2	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 26, 2024 05:54:53.679299116 CET	192.168.2.23	8.8.8.8	0x8e2	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	413	false
Dec 26, 2024 05:54:55.808037043 CET	192.168.2.23	8.8.8.8	0x38c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	415	false
Dec 26, 2024 05:54:55.931649923 CET	192.168.2.23	8.8.8.8	0x38c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	416	false
Dec 26, 2024 05:54:56.055206060 CET	192.168.2.23	8.8.8.8	0x38c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	416	false
Dec 26, 2024 05:54:56.178770065 CET	192.168.2.23	8.8.8.8	0x38c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	416	false
Dec 26, 2024 05:54:56.302468061 CET	192.168.2.23	8.8.8.8	0x38c	Standard query (0)	raw.cardiacpure.ru. [malformed]	256	416	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 26, 2024 05:52:52.810726881 CET	8.8.8.8	192.168.2.23	0x3a01	No error (0)	raw.cardiacpure.ru		178.215.238.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: fnkea7.elf PID: 6238, Parent PID: 6161

General

Start time (UTC):	04:52:51
Start date (UTC):	26/12/2024
Path:	/tmp/fnkea7.elf
Arguments:	/tmp/fnkea7.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: fnkea7.elf PID: 6240, Parent PID: 6238

General

Start time (UTC):	04:52:51
Start date (UTC):	26/12/2024
Path:	/tmp/fnkea7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: fnkea7.elf PID: 6242, Parent PID: 6240

General

Start time (UTC):	04:52:51
Start date (UTC):	26/12/2024
Path:	/tmp/fnkea7.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report fnkea7.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.zCimgV (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: fnkea7.elf PID: 6238, Parent PID: 6161

General

Chronological Activities

Analysis Process: fnkea7.elf PID: 6240, Parent PID: 6238

General

Chronological Activities

Analysis Process: fnkea7.elf PID: 6242, Parent PID: 6240

General

Chronological Activities

Linux Analysis Report
fnkea7.elf