Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
ub8ehJSePAfc9FYqZIT6.x86_64.elf

Overview

General Information

Sample name:ub8ehJSePAfc9FYqZIT6.x86_64.elf
Analysis ID:1583845
MD5:a8d68db5da4f6a7a3e1deb8e215b373c
SHA1:b4c0c438485641b0dc66aa7f9a1c2ed641e312dd
SHA256:8462b46a614a1430cc8ee38ec616c52be8a40cb313f4a924d997e3e4bb2cb51d
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100
Whitelisted:false

Signatures

Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Machine Learning detection for sample
Sample is packed with UPX
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Enumerates processes within the "proc" file system
Sample contains only a LOAD segment without any section mappings
Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)
Yara signature match

Classification

General Information

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1583845
Start date and time:2025-01-03 18:32:05 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 38s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:ub8ehJSePAfc9FYqZIT6.x86_64.elf
Detection:MAL
Classification:mal64.evad.linELF@0/0@0/0

Warnings

  • VT rate limit hit for: ub8ehJSePAfc9FYqZIT6.x86_64.elf

Runtime Messages

Command:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
PID:6242
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

Memory Dumps

SourceRuleDescriptionAuthorStrings
6250.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xfeb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1000c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6250.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Mirai_564b8edaunknownunknown
  • 0x49b2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
6243.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xfeb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1000c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6243.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Mirai_564b8edaunknownunknown
  • 0x49b2:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C1 83 FE 01
6242.1.0000000000400000.0000000000413000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0xfeb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xff94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xffe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0xfff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1000c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x10048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 7 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for submitted file
Source: ub8ehJSePAfc9FYqZIT6.x86_64.elfReversingLabs: Detection: 36%
Machine Learning detection for sample
Source: ub8ehJSePAfc9FYqZIT6.x86_64.elfJoe Sandbox ML: detected
Source: global trafficTCP traffic: 192.168.2.23:46924 -> 141.11.33.73:3778
Source: global trafficTCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global trafficTCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global trafficTCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: unknownTCP traffic detected without corresponding DNS query: 141.11.33.73
Source: ub8ehJSePAfc9FYqZIT6.x86_64.elfString found in binary or memory: http://upx.sf.net
Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

System Summary

barindex
Malicious sample detected (through community Yara rule)
Source: 6250.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6250.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 6243.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6243.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 6242.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6242.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: 6244.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6244.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6242, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6243, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6244, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6250, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: LOAD without section mappingsProgram segment: 0x400000
Source: 6250.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6250.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 6243.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6243.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 6242.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6242.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: 6244.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6244.1.0000000000400000.0000000000413000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Mirai_564b8eda reference_sample = ff04921d7bf9ca01ae33a9fc0743dce9ca250e42a33547c5665b1c9a0b5260ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 63a9e43902e7db0b7a20498b5a860e36201bacc407e9e336faca0b7cfbc37819, id = 564b8eda-6f0e-45b8-bef6-d61b0f090a36, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6242, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6243, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6244, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ub8ehJSePAfc9FYqZIT6.x86_64.elf PID: 6250, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: classification engineClassification label: mal64.evad.linELF@0/0@0/0

Data Obfuscation

barindex
Sample is packed with UPX
Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sampleString containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sampleString containing UPX found: $Id: UPX 3.94 Copyright (C) 1996-2017 the UPX Team. All Rights Reserved. $
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1582/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/3088/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/230/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/110/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/231/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/111/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/232/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1579/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/112/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/233/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1699/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/113/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/234/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1335/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1698/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/114/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/235/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1334/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1576/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/2302/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/115/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/236/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/116/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/237/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/117/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/118/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/910/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/119/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/6226/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/912/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/10/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/2307/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/11/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/918/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/12/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/13/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/14/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/6242/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/15/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/6245/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/16/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/17/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/18/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1594/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/120/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/121/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1349/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/122/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/243/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/123/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/2/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/124/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/3/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/4/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/125/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/126/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1344/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1465/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1586/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/127/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/6/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/248/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/128/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/249/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1463/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/800/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/9/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/801/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/20/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/21/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1900/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/22/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/23/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/24/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/25/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/26/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/27/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/28/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/29/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/491/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/250/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/130/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/251/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/252/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/132/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/253/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/254/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/255/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/4509/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/256/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1599/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/257/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1477/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/379/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/258/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1476/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/259/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1475/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/936/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/30/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/2208/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/35/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1809/statusJump to behavior
Source: /tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf (PID: 6242)File opened: /proc/1494/statusJump to behavior
Source: ub8ehJSePAfc9FYqZIT6.x86_64.elfSubmission file: segment LOAD with 7.9628 entropy (max. 8.0)

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception11
Obfuscated Files or Information		1
OS Credential Dumping		System Service DiscoveryRemote ServicesData from Local System1
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media1
Non-Standard Port		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
ub8ehJSePAfc9FYqZIT6.x86_64.elf37%ReversingLabsLinux.Backdoor.Mirai
ub8ehJSePAfc9FYqZIT6.x86_64.elf100%Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
http://upx.sf.netub8ehJSePAfc9FYqZIT6.x86_64.elffalse
    		high

    World Map of Contacted IPs

    • No. of IPs < 25%
    • 25% < No. of IPs < 50%
    • 50% < No. of IPs < 75%
    • 75% < No. of IPs

    Public IPs

    IPDomainCountryFlagASNASN NameMalicious
    141.11.33.73
    		unknownUnited Kingdom
    		553BELWUEBelWue-KoordinationEUfalse
    109.202.202.202
    		unknownSwitzerland
    		13030INIT7CHfalse
    91.189.91.43
    		unknownUnited Kingdom
    		41231CANONICAL-ASGBfalse
    91.189.91.42
    		unknownUnited Kingdom
    		41231CANONICAL-ASGBfalse

    Joe Sandbox View / Context

    IPs

    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
    141.11.33.73ub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
      boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
        boatnet.arm7.elfGet hashmaliciousMiraiBrowse
          141.11.33.73-boatnet.arm-2025-01-03T05_39_17.elfGet hashmaliciousMiraiBrowse
            109.202.202.202kpLwzBouH4.elfGet hashmaliciousUnknownBrowse
            • ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
            91.189.91.43ub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
              UDMp3dZ7nc.elfGet hashmaliciousXorDDoSBrowse
                nova2.elfGet hashmaliciousUnknownBrowse
                  154.216.18.23-boatnet.arm7-2025-01-03T11_41_00.elfGet hashmaliciousMiraiBrowse
                    g.elfGet hashmaliciousUnknownBrowse
                      aarch643308.elfGet hashmaliciousUnknownBrowse
                        ARMV7L.elfGet hashmaliciousUnknownBrowse
                          bash.elfGet hashmaliciousUnknownBrowse
                            ARMV5L.elfGet hashmaliciousUnknownBrowse
                              boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
                                91.189.91.42ub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
                                  UDMp3dZ7nc.elfGet hashmaliciousXorDDoSBrowse
                                    nova2.elfGet hashmaliciousUnknownBrowse
                                      154.216.18.23-boatnet.arm7-2025-01-03T11_41_00.elfGet hashmaliciousMiraiBrowse
                                        g.elfGet hashmaliciousUnknownBrowse
                                          aarch643308.elfGet hashmaliciousUnknownBrowse
                                            ARMV7L.elfGet hashmaliciousUnknownBrowse
                                              bash.elfGet hashmaliciousUnknownBrowse
                                                ARMV5L.elfGet hashmaliciousUnknownBrowse
                                                  boatnet.mpsl.elfGet hashmaliciousMiraiBrowse

                                                    Domains

                                                    ⊘No context

                                                    ASNs

                                                    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                    BELWUEBelWue-KoordinationEUub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
                                                    • 141.11.33.73
                                                    boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
                                                    • 141.11.33.73
                                                    boatnet.arm7.elfGet hashmaliciousMiraiBrowse
                                                    • 141.11.33.73
                                                    141.11.33.73-boatnet.arm-2025-01-03T05_39_17.elfGet hashmaliciousMiraiBrowse
                                                    • 141.11.33.73
                                                    Hilix.mips.elfGet hashmaliciousMiraiBrowse
                                                    • 134.155.120.154
                                                    armv5l.elfGet hashmaliciousUnknownBrowse
                                                    • 141.79.218.248
                                                    kwari.arm.elfGet hashmaliciousUnknownBrowse
                                                    • 134.34.202.108
                                                    kwari.arm7.elfGet hashmaliciousMiraiBrowse
                                                    • 134.155.120.139
                                                    sh4.elfGet hashmaliciousMirai, MoobotBrowse
                                                    • 141.79.120.12
                                                    loligang.mips.elfGet hashmaliciousMiraiBrowse
                                                    • 141.59.77.71
                                                    CANONICAL-ASGBub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    UDMp3dZ7nc.elfGet hashmaliciousXorDDoSBrowse
                                                    • 91.189.91.42
                                                    nova2.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    154.216.18.23-boatnet.arm7-2025-01-03T11_41_00.elfGet hashmaliciousMiraiBrowse
                                                    • 91.189.91.42
                                                    g.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    aarch643308.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    ARMV7L.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    bash.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    ARMV5L.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
                                                    • 91.189.91.42
                                                    CANONICAL-ASGBub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    UDMp3dZ7nc.elfGet hashmaliciousXorDDoSBrowse
                                                    • 91.189.91.42
                                                    nova2.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    154.216.18.23-boatnet.arm7-2025-01-03T11_41_00.elfGet hashmaliciousMiraiBrowse
                                                    • 91.189.91.42
                                                    g.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    aarch643308.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    ARMV7L.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    bash.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    ARMV5L.elfGet hashmaliciousUnknownBrowse
                                                    • 91.189.91.42
                                                    boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
                                                    • 91.189.91.42
                                                    INIT7CHub8ehJSePAfc9FYqZIT6.x86.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    UDMp3dZ7nc.elfGet hashmaliciousXorDDoSBrowse
                                                    • 109.202.202.202
                                                    nova2.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    154.216.18.23-boatnet.arm7-2025-01-03T11_41_00.elfGet hashmaliciousMiraiBrowse
                                                    • 109.202.202.202
                                                    g.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    aarch643308.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    ARMV7L.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    bash.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    ARMV5L.elfGet hashmaliciousUnknownBrowse
                                                    • 109.202.202.202
                                                    boatnet.mpsl.elfGet hashmaliciousMiraiBrowse
                                                    • 109.202.202.202

                                                    JA3 Fingerprints

                                                    ⊘No context

                                                    Dropped Files

                                                    ⊘No context

                                                    Created / dropped Files

                                                    ⊘No created / dropped files found

                                                    Static File Info

                                                    General

                                                    File type:ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, no section header
                                                    Entropy (8bit):7.9608210636113235
                                                    TrID:
                                                    • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                    File name:ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    File size:37'516 bytes
                                                    MD5:a8d68db5da4f6a7a3e1deb8e215b373c
                                                    SHA1:b4c0c438485641b0dc66aa7f9a1c2ed641e312dd
                                                    SHA256:8462b46a614a1430cc8ee38ec616c52be8a40cb313f4a924d997e3e4bb2cb51d
                                                    SHA512:2a78bdbe2452a4decca2d77077cfc82fc80fc38a0c00cd50db2f8163290dcc7cbf4c3e81b694e06359f2e0b07ed0a449d5b33977dfd179b71ca103843c84988f
                                                    SSDEEP:768:4LR/W7TwmFH2FzMhcHZICkt6AP0hPlYFCfJQzgCgOH7x01:4V2wmB3hQICkt6AcdGFCxQ8NOb4
                                                    TLSH:70F2E0A71016FAB5C837E1B18F1992C0FC55681AB0D00F9B59DAB8BEDC79C88BE057D0
                                                    File Content Preview:.ELF..............>.....H.@.....@...................@.8...@.......................@.......@....................... ......................Ka......Ka.............................Q.td.....................................................I..UPX!D.......8:..8:.

                                                    Static ELF Info

                                                    ELF header

                                                    Class:ELF64
                                                    Data:2's complement, little endian
                                                    Version:1 (current)
                                                    Machine:Advanced Micro Devices X86-64
                                                    Version Number:0x1
                                                    Type:EXEC (Executable file)
                                                    OS/ABI:UNIX - System V
                                                    ABI Version:0
                                                    Entry Point Address:0x408048
                                                    Flags:0x0
                                                    ELF Header Size:64
                                                    Program Header Offset:64
                                                    Program Header Size:56
                                                    Number of Program Headers:3
                                                    Section Header Offset:0
                                                    Section Header Size:64
                                                    Number of Section Headers:0
                                                    Header String Table Index:0

                                                    Program Segments

                                                    TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                    LOAD0x00x4000000x4000000x91840x91847.96280x5R E0x200000
                                                    LOAD0xb000x614b000x614b000x00x00.00000x6RW 0x1000
                                                    GNU_STACK0x00x00x00x00x00.00000x6RW 0x8

                                                    Network Behavior

                                                    Network Port Distribution

                                                    TCP Packets

                                                    TimestampSource PortDest PortSource IPDest IP
                                                    Jan 3, 2025 18:32:50.938250065 CET469243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:50.943135023 CET377846924141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:50.943183899 CET469243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:50.944606066 CET469243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:50.949378967 CET377846924141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:50.949420929 CET469243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:50.954144001 CET377846924141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:51.961359978 CET377846924141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:51.961494923 CET469243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:51.961494923 CET469243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:51.961924076 CET469263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:51.966712952 CET377846926141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:51.966757059 CET469263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:51.967308044 CET469263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:51.972029924 CET377846926141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:51.972086906 CET469263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:51.976918936 CET377846926141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:52.967206001 CET377846926141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:52.967323065 CET469263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:52.967370033 CET469263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:52.967852116 CET469283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:52.972630978 CET377846928141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:52.972745895 CET469283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:52.973510981 CET469283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:52.978235006 CET377846928141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:52.978343964 CET469283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:52.983094931 CET377846928141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:53.336182117 CET43928443192.168.2.2391.189.91.42
                                                    Jan 3, 2025 18:32:56.323323011 CET469303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:56.328197956 CET377846930141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:56.328303099 CET469303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:56.329885960 CET469303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:56.334664106 CET377846930141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:56.334726095 CET469303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:56.339536905 CET377846930141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.348505020 CET377846930141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.348622084 CET469303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.350362062 CET469303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.351335049 CET469323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.356199026 CET377846932141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.356466055 CET469323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.357302904 CET469323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.362066031 CET377846932141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.363090038 CET469323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.367892027 CET377846932141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.650943041 CET377846928141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.651072979 CET469283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.651109934 CET469283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.651781082 CET469343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.656593084 CET377846934141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.656789064 CET469343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.657236099 CET469343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.661973000 CET377846934141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:57.663336039 CET469343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:57.668078899 CET377846934141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.396553040 CET377846932141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.396651030 CET469323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.396692038 CET469323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.397032976 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.401793957 CET377846936141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.401897907 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.402472973 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.407161951 CET377846936141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.407233000 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.411998034 CET377846936141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.690601110 CET377846934141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.690727949 CET469343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.690869093 CET469343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.691446066 CET469383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.696597099 CET377846938141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.696710110 CET469383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.697273970 CET469383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.702472925 CET377846938141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.702539921 CET469383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:58.707288027 CET377846938141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:58.711339951 CET42836443192.168.2.2391.189.91.43
                                                    Jan 3, 2025 18:32:59.688555956 CET377846938141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:59.688745975 CET469383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:59.688779116 CET469383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:59.689373970 CET469403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:59.694180965 CET377846940141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:59.694282055 CET469403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:59.694830894 CET469403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:59.699605942 CET377846940141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:32:59.699681044 CET469403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:32:59.704499960 CET377846940141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:00.503231049 CET4251680192.168.2.23109.202.202.202
                                                    Jan 3, 2025 18:33:00.711731911 CET377846940141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:00.711899996 CET469403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:00.712057114 CET469403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:00.712678909 CET469423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:00.717466116 CET377846942141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:00.717557907 CET469423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:00.718225002 CET469423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:00.723011017 CET377846942141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:00.723073006 CET469423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:00.727885962 CET377846942141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:01.746860981 CET377846942141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:01.746947050 CET469423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:01.746995926 CET469423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:01.747468948 CET469443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:01.752232075 CET377846944141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:01.752281904 CET469443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:01.752821922 CET469443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:01.757541895 CET377846944141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:01.757589102 CET469443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:01.762330055 CET377846944141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:05.754575014 CET377846944141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:05.754725933 CET469443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:05.754755020 CET469443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:05.755223036 CET469463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:05.760956049 CET377846946141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:05.760999918 CET469463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:05.761516094 CET469463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:05.767587900 CET377846946141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:05.767627954 CET469463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:05.772361040 CET377846946141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:06.785353899 CET377846946141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:06.785588980 CET469463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:06.785588980 CET469463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:06.786007881 CET469483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:06.790777922 CET377846948141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:06.790827036 CET469483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:06.791363955 CET469483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:06.796129942 CET377846948141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:06.796175957 CET469483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:06.800924063 CET377846948141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:07.810725927 CET377846948141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:07.810978889 CET469483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:07.811038971 CET469483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:07.811543941 CET469503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:07.816668987 CET377846950141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:07.816716909 CET469503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:07.817230940 CET469503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:07.822323084 CET377846950141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:07.822376013 CET469503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:07.827517986 CET377846950141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.408689976 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.413548946 CET377846936141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.434921980 CET377846936141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.435008049 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.435197115 CET469363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.435888052 CET469523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.440758944 CET377846952141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.440871954 CET469523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.441736937 CET469523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.446557999 CET377846952141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.446664095 CET469523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.451515913 CET377846952141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.854398966 CET377846950141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.854684114 CET469503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.854684114 CET469503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.855392933 CET469543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.860222101 CET377846954141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.860318899 CET469543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.861229897 CET469543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.866003990 CET377846954141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:08.866064072 CET469543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:08.870879889 CET377846954141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:10.545922995 CET377846954141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:10.546221018 CET469543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:10.546221018 CET469543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:10.546881914 CET469563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:10.551652908 CET377846956141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:10.551723003 CET469563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:10.552606106 CET469563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:10.557733059 CET377846956141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:10.557785988 CET469563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:10.562551975 CET377846956141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:12.503302097 CET377846952141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:12.503420115 CET469523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:12.503477097 CET469523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:12.503958941 CET469583778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:12.508771896 CET377846958141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:12.508836031 CET469583778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:12.511787891 CET469583778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:12.516551971 CET377846958141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:12.516593933 CET469583778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:12.521380901 CET377846958141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:14.581151962 CET43928443192.168.2.2391.189.91.42
                                                    Jan 3, 2025 18:33:15.619141102 CET377846956141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:15.619473934 CET469563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:15.619553089 CET469563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:15.620928049 CET469603778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:15.625792027 CET377846960141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:15.625905037 CET469603778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:15.626499891 CET469603778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:15.631302118 CET377846960141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:15.631387949 CET469603778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:15.636199951 CET377846960141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:16.549031973 CET377846958141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:16.549168110 CET469583778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:16.549232006 CET469583778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:16.550157070 CET469623778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:16.554919958 CET377846962141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:16.555026054 CET469623778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:16.555922985 CET469623778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:16.560642004 CET377846962141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:16.560699940 CET469623778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:16.565490961 CET377846962141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:19.651549101 CET377846960141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:19.651669025 CET469603778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:19.651787996 CET469603778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:19.652848005 CET469643778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:19.657651901 CET377846964141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:19.657725096 CET469643778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:19.659105062 CET469643778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:19.663856030 CET377846964141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:19.663911104 CET469643778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:19.668661118 CET377846964141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:21.310147047 CET377846962141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:21.310281992 CET469623778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:21.310466051 CET469623778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:21.311585903 CET469663778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:21.316435099 CET377846966141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:21.316533089 CET469663778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:21.317723036 CET469663778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:21.322487116 CET377846966141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:21.322561979 CET469663778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:21.327343941 CET377846966141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:22.437640905 CET377846966141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:22.437737942 CET469663778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:22.437840939 CET469663778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:22.438510895 CET469683778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:22.443370104 CET377846968141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:22.443443060 CET469683778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:22.444417000 CET469683778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:22.449371099 CET377846968141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:22.449429035 CET469683778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:22.454346895 CET377846968141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:23.688200951 CET377846964141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:23.688307047 CET469643778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:23.688380003 CET469643778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:23.689138889 CET469703778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:23.695300102 CET377846970141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:23.695362091 CET469703778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:23.696284056 CET469703778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:23.702440023 CET377846970141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:23.702486038 CET469703778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:23.708719015 CET377846970141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:24.340837002 CET377846968141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:24.340930939 CET469683778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:24.341131926 CET469683778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:24.341929913 CET469723778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:24.346770048 CET377846972141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:24.346832991 CET469723778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:24.347893953 CET469723778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:24.352679014 CET377846972141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:24.352730036 CET469723778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:24.357506990 CET377846972141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:24.819569111 CET42836443192.168.2.2391.189.91.43
                                                    Jan 3, 2025 18:33:25.339301109 CET377846972141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:25.339396954 CET469723778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:25.339397907 CET469723778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:25.339838982 CET469743778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:25.344628096 CET377846974141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:25.344683886 CET469743778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:25.345103025 CET469743778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:25.349858999 CET377846974141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:25.349900007 CET469743778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:25.354732037 CET377846974141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:26.373930931 CET377846974141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:26.374017954 CET469743778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:26.374217033 CET469743778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:26.374922991 CET469763778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:26.379690886 CET377846976141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:26.379751921 CET469763778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:26.380675077 CET469763778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:26.385415077 CET377846976141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:26.385481119 CET469763778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:26.390218973 CET377846976141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:28.577284098 CET377846970141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:28.577392101 CET469703778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:28.577450991 CET469703778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:28.578202963 CET469783778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:28.582957983 CET377846978141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:28.583018064 CET469783778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:28.583914995 CET469783778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:28.588668108 CET377846978141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:28.588716030 CET469783778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:28.593477011 CET377846978141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:29.574466944 CET377846978141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:29.574754953 CET469783778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:29.574933052 CET469783778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:29.575694084 CET469803778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:29.580548048 CET377846980141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:29.580607891 CET469803778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:29.581541061 CET469803778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:29.586302996 CET377846980141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:29.586358070 CET469803778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:29.591253042 CET377846980141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:30.398138046 CET377846976141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:30.398246050 CET469763778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:30.398334980 CET469763778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:30.399142027 CET469823778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:30.403964043 CET377846982141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:30.404028893 CET469823778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:30.404949903 CET469823778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:30.409817934 CET377846982141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:30.409868002 CET469823778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:30.414688110 CET377846982141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:30.962702036 CET4251680192.168.2.23109.202.202.202
                                                    Jan 3, 2025 18:33:31.242734909 CET377846980141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.242866993 CET469803778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.242918015 CET469803778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.243607044 CET469843778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.248485088 CET377846984141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.248557091 CET469843778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.249499083 CET469843778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.254288912 CET377846984141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.254339933 CET469843778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.259167910 CET377846984141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.415716887 CET377846982141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.415811062 CET469823778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.416007042 CET469823778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.416635036 CET469863778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.421447992 CET377846986141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.421540022 CET469863778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.422488928 CET469863778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.427292109 CET377846986141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:31.427355051 CET469863778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:31.432111025 CET377846986141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.399036884 CET377846984141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.399166107 CET469843778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.399246931 CET469843778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.399955034 CET469883778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.404747963 CET377846988141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.404819012 CET469883778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.405558109 CET469883778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.410384893 CET377846988141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.410440922 CET469883778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.415278912 CET377846988141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.566833973 CET377846986141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.566931009 CET469863778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.567008018 CET469863778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.567688942 CET469903778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.572531939 CET377846990141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.572596073 CET469903778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.573493004 CET469903778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.578250885 CET377846990141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:32.578301907 CET469903778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:32.583077908 CET377846990141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.437661886 CET377846988141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.437884092 CET469883778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.437936068 CET469883778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.438635111 CET469923778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.443491936 CET377846992141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.443579912 CET469923778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.444546938 CET469923778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.449541092 CET377846992141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.449596882 CET469923778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.454363108 CET377846992141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.622942924 CET377846990141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.623199940 CET469903778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.623298883 CET469903778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.623820066 CET469943778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.629062891 CET377846994141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.629127026 CET469943778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.629998922 CET469943778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.635144949 CET377846994141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:36.635201931 CET469943778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:36.639971972 CET377846994141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:37.467252016 CET377846992141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:37.467410088 CET469923778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:37.467488050 CET469923778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:37.468178988 CET469963778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:37.472992897 CET377846996141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:37.473073959 CET469963778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:37.473959923 CET469963778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:37.478806019 CET377846996141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:37.478867054 CET469963778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:37.483634949 CET377846996141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:41.477413893 CET377846996141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:41.477704048 CET469963778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:41.477705002 CET469963778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:41.478375912 CET469983778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:41.483222961 CET377846998141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:41.483293056 CET469983778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:41.484194994 CET469983778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:41.488957882 CET377846998141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:41.489017010 CET469983778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:41.493830919 CET377846998141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:42.509192944 CET377846998141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:42.509368896 CET469983778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:42.509368896 CET469983778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:42.509783983 CET470003778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:42.514537096 CET377847000141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:42.514594078 CET470003778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:42.515122890 CET470003778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:42.519937992 CET377847000141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:42.520011902 CET470003778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:42.524775982 CET377847000141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:43.529817104 CET377847000141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:43.530136108 CET470003778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:43.530172110 CET470003778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:43.530870914 CET470023778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:43.535650969 CET377847002141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:43.535701036 CET470023778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:43.536216021 CET470023778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:43.540983915 CET377847002141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:43.541024923 CET470023778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:43.546318054 CET377847002141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:47.584526062 CET377847002141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:47.584703922 CET470023778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:47.584703922 CET470023778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:47.585235119 CET470043778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:47.590015888 CET377847004141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:47.590070963 CET470043778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:47.590655088 CET470043778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:47.595417976 CET377847004141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:47.595463991 CET470043778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:47.601546049 CET377847004141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:48.579133034 CET377847004141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:48.579319000 CET470043778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:48.579381943 CET470043778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:48.580173016 CET470063778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:48.584958076 CET377847006141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:48.585032940 CET470063778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:48.585957050 CET470063778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:48.590713024 CET377847006141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:48.590776920 CET470063778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:48.595537901 CET377847006141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:51.165252924 CET377847006141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:51.165458918 CET470063778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:51.165503025 CET470063778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:51.166224957 CET470083778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:51.171055079 CET377847008141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:51.171168089 CET470083778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:51.172662020 CET470083778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:51.177438974 CET377847008141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:51.177491903 CET470083778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:51.182312012 CET377847008141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:52.188711882 CET377847008141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:52.188857079 CET470083778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:52.188857079 CET470083778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:52.189574957 CET470103778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:52.194345951 CET377847010141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:52.194392920 CET470103778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:52.195281029 CET470103778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:52.200035095 CET377847010141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:52.200079918 CET470103778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:52.204835892 CET377847010141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:55.535155058 CET43928443192.168.2.2391.189.91.42
                                                    Jan 3, 2025 18:33:56.238853931 CET377847010141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:56.238959074 CET470103778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:56.239002943 CET470103778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:56.239829063 CET470123778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:56.244635105 CET377847012141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:56.244689941 CET470123778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:56.245599985 CET470123778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:56.250371933 CET377847012141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:33:56.250427008 CET470123778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:33:56.255172968 CET377847012141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:00.735455036 CET377847012141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:00.735574007 CET470123778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:00.735611916 CET470123778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:00.736181974 CET470143778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:00.742117882 CET377847014141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:00.742173910 CET470143778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:00.742876053 CET470143778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:00.748872995 CET377847014141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:00.748919010 CET470143778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:00.754898071 CET377847014141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:02.403131008 CET377847014141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:02.403444052 CET470143778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:02.403445005 CET470143778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:02.404325962 CET470163778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:02.409339905 CET377847016141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:02.409405947 CET470163778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:02.410191059 CET470163778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:02.415072918 CET377847016141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:02.415117025 CET470163778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:02.419847965 CET377847016141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:03.430485964 CET377847016141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:03.430716038 CET470163778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:03.430748940 CET470163778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:03.431400061 CET470183778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:03.437369108 CET377847018141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:03.437431097 CET470183778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:03.438102961 CET470183778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:03.444042921 CET377847018141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:03.444104910 CET470183778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:03.450100899 CET377847018141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:05.981189013 CET377847018141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:05.981323957 CET470183778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:05.981323957 CET470183778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:05.981841087 CET470203778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:05.986704111 CET377847020141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:05.986759901 CET470203778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:05.987488985 CET470203778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:05.992283106 CET377847020141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:05.992327929 CET470203778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:05.997035027 CET377847020141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:07.004869938 CET377847020141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:07.005002022 CET470203778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:07.005002975 CET470203778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:07.005604029 CET470223778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:07.011857986 CET377847022141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:07.011930943 CET470223778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:07.012552977 CET470223778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:07.017406940 CET377847022141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:07.017456055 CET470223778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:07.022222996 CET377847022141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:08.036858082 CET377847022141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:08.037026882 CET470223778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:08.037084103 CET470223778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:08.037796974 CET470243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:08.042680025 CET377847024141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:08.042753935 CET470243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:08.043534040 CET470243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:08.048289061 CET377847024141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:08.048340082 CET470243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:08.053155899 CET377847024141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:09.052105904 CET377847024141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:09.052326918 CET470243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:09.052328110 CET470243778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:09.052831888 CET470263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:09.058758974 CET377847026141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:09.058849096 CET470263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:09.059679985 CET470263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:09.065566063 CET377847026141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:09.065613985 CET470263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:09.071333885 CET377847026141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:10.114175081 CET377847026141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:10.114308119 CET470263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:10.114356041 CET470263778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:10.114912033 CET470283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:10.120119095 CET377847028141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:10.120172024 CET470283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:10.120800018 CET470283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:10.125540018 CET377847028141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:10.125580072 CET470283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:10.130359888 CET377847028141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:11.140917063 CET377847028141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:11.141079903 CET470283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:11.141119003 CET470283778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:11.141669989 CET470303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:11.146538973 CET377847030141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:11.146610975 CET470303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:11.147290945 CET470303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:11.152102947 CET377847030141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:11.152165890 CET470303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:11.156968117 CET377847030141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:12.825551033 CET377847030141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:12.825860023 CET470303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:12.825938940 CET470303778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:12.826566935 CET470323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:12.831468105 CET377847032141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:12.831571102 CET470323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:12.832571030 CET470323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:12.837501049 CET377847032141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:12.837585926 CET470323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:12.842385054 CET377847032141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:13.839238882 CET377847032141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:13.839413881 CET470323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:13.839467049 CET470323778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:13.840053082 CET470343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:13.844825029 CET377847034141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:13.844886065 CET470343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:13.845510960 CET470343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:13.850261927 CET377847034141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:13.850313902 CET470343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:13.855118036 CET377847034141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:14.874576092 CET377847034141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:14.874825001 CET470343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:14.875093937 CET470343778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:14.876099110 CET470363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:14.883655071 CET377847036141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:14.883765936 CET470363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:14.885018110 CET470363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:14.889796019 CET377847036141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:14.889868975 CET470363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:14.894668102 CET377847036141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:15.903280973 CET377847036141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:15.903458118 CET470363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:15.903554916 CET470363778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:15.904371977 CET470383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:15.909214020 CET377847038141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:15.909306049 CET470383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:15.910470009 CET470383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:15.915247917 CET377847038141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:15.915333033 CET470383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:15.920258045 CET377847038141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:16.012255907 CET42836443192.168.2.2391.189.91.43
                                                    Jan 3, 2025 18:34:16.911947966 CET377847038141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:16.912164927 CET470383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:16.912369967 CET470383778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:16.913291931 CET470403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:16.918087006 CET377847040141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:16.918174028 CET470403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:16.919569969 CET470403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:16.924304008 CET377847040141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:16.924374104 CET470403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:16.929223061 CET377847040141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:17.968291998 CET377847040141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:17.968609095 CET470403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:17.968699932 CET470403778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:17.969594955 CET470423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:17.974414110 CET377847042141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:17.974613905 CET470423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:17.975697041 CET470423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:17.980528116 CET377847042141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:17.980604887 CET470423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:17.985452890 CET377847042141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:19.639180899 CET377847042141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:19.639535904 CET470423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:19.639575005 CET470423778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:19.640533924 CET470443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:19.645391941 CET377847044141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:19.645481110 CET470443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:19.646394014 CET470443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:19.651223898 CET377847044141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:19.651299000 CET470443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:19.656224966 CET377847044141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:20.684462070 CET377847044141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:20.684721947 CET470443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:20.684788942 CET470443778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:20.685710907 CET470463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:20.690488100 CET377847046141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:20.690568924 CET470463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:20.691653013 CET470463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:20.696372986 CET377847046141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:20.696502924 CET470463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:20.701239109 CET377847046141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:23.227978945 CET377847046141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:23.228123903 CET470463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:23.228123903 CET470463778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:23.228796959 CET470483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:23.233587027 CET377847048141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:23.233637094 CET470483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:23.234682083 CET470483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:23.239537954 CET377847048141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:23.239587069 CET470483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:23.244337082 CET377847048141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:25.776949883 CET377847048141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:25.777184010 CET470483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:25.777184010 CET470483778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:25.777802944 CET470503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:25.782671928 CET377847050141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:25.782766104 CET470503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:25.783545971 CET470503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:25.788271904 CET377847050141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:25.788336992 CET470503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:25.793071985 CET377847050141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:27.430313110 CET377847050141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:27.430584908 CET470503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:27.430645943 CET470503778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:27.431291103 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:27.436074018 CET377847052141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:27.436146021 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:27.436863899 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:27.441574097 CET377847052141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:27.441634893 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:27.446358919 CET377847052141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:28.595511913 CET377847052141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:28.595669031 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.595679998 CET377847052141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:28.595705986 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.595747948 CET470523778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.596323013 CET470543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.601181030 CET377847054141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:28.601250887 CET470543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.601883888 CET470543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.606631041 CET377847054141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:28.606690884 CET470543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:28.611464977 CET377847054141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:29.643157005 CET377847054141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:29.643307924 CET470543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:29.643356085 CET470543778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:29.644025087 CET470563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:29.648792028 CET377847056141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:29.648874044 CET470563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:29.649854898 CET470563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:29.654637098 CET377847056141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:29.654700041 CET470563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:29.659473896 CET377847056141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:36.665009022 CET469943778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:36.669847012 CET377846994141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:37.043601036 CET377846994141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:37.043767929 CET469943778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:39.656982899 CET470563778192.168.2.23141.11.33.73
                                                    Jan 3, 2025 18:34:39.661885023 CET377847056141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:40.029084921 CET377847056141.11.33.73192.168.2.23
                                                    Jan 3, 2025 18:34:40.029326916 CET470563778192.168.2.23141.11.33.73

                                                    System Behavior

                                                    General

                                                    Start time (UTC):17:32:50
                                                    Start date (UTC):03/01/2025
                                                    Path:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    Arguments:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    File size:37516 bytes
                                                    MD5 hash:a8d68db5da4f6a7a3e1deb8e215b373c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):17:32:50
                                                    Start date (UTC):03/01/2025
                                                    Path:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    Arguments:-
                                                    File size:37516 bytes
                                                    MD5 hash:a8d68db5da4f6a7a3e1deb8e215b373c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):17:32:50
                                                    Start date (UTC):03/01/2025
                                                    Path:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    Arguments:-
                                                    File size:37516 bytes
                                                    MD5 hash:a8d68db5da4f6a7a3e1deb8e215b373c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):17:32:50
                                                    Start date (UTC):03/01/2025
                                                    Path:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    Arguments:-
                                                    File size:37516 bytes
                                                    MD5 hash:a8d68db5da4f6a7a3e1deb8e215b373c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):17:32:55
                                                    Start date (UTC):03/01/2025
                                                    Path:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    Arguments:-
                                                    File size:37516 bytes
                                                    MD5 hash:a8d68db5da4f6a7a3e1deb8e215b373c

                                                    Chronological Activities


                                                    General

                                                    Start time (UTC):17:32:55
                                                    Start date (UTC):03/01/2025
                                                    Path:/tmp/ub8ehJSePAfc9FYqZIT6.x86_64.elf
                                                    Arguments:-
                                                    File size:37516 bytes
                                                    MD5 hash:a8d68db5da4f6a7a3e1deb8e215b373c

                                                    Chronological Activities