Edit tour

Linux Analysis Report
gigops.arm4.elf

Overview

General Information

Sample name:	gigops.arm4.elf
Analysis ID:	1585614
MD5:	68e7eb7137154d2c80bcb8bf60aa7618
SHA1:	6d7bd27163801f06500f11e44a1c8e94af98659e
SHA256:	a6e9d05dafdf4ca2f4967fc89d07aecb0217f2f995ada627c962445941a20086
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Sample and/or dropped files contains symbols with suspicious names

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585614
Start date and time:	2025-01-07 22:27:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.arm4.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: gigops.arm4.elf

Runtime Messages

Command:	/tmp/gigops.arm4.elf
PID:	5424
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS buf: BUILD DONGS BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS buf: BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

gigops.arm4.elf (PID: 5424, Parent: 5348, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/gigops.arm4.elf

gigops.arm4.elf New Fork (PID: 5426, Parent: 5424)

gigops.arm4.elf New Fork (PID: 5428, Parent: 5426)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.arm4.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.arm4.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x134cc:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
5424.1.00007f6b24017000.00007f6b2402c000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x134cc:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
5426.1.00007f6b24017000.00007f6b2402c000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x134cc:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:28:07.426594+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51572	45.128.233.186	23	TCP
2025-01-07T22:28:09.145151+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51574	45.128.233.186	23	TCP
2025-01-07T22:28:10.936914+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51576	45.128.233.186	23	TCP
2025-01-07T22:28:12.737680+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51578	45.128.233.186	23	TCP
2025-01-07T22:28:14.545169+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51580	45.128.233.186	23	TCP
2025-01-07T22:28:16.285418+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51582	45.128.233.186	23	TCP
2025-01-07T22:28:18.059390+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51584	45.128.233.186	23	TCP
2025-01-07T22:28:19.820257+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51586	45.128.233.186	23	TCP
2025-01-07T22:28:21.587178+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51588	45.128.233.186	23	TCP
2025-01-07T22:28:23.441840+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51590	45.128.233.186	23	TCP
2025-01-07T22:28:25.173560+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51592	45.128.233.186	23	TCP
2025-01-07T22:28:26.926854+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51594	45.128.233.186	23	TCP
2025-01-07T22:28:28.694782+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51596	45.128.233.186	23	TCP
2025-01-07T22:28:30.457968+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51598	45.128.233.186	23	TCP
2025-01-07T22:28:32.256121+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51600	45.128.233.186	23	TCP
2025-01-07T22:28:34.043910+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51602	45.128.233.186	23	TCP
2025-01-07T22:28:35.817080+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51604	45.128.233.186	23	TCP
2025-01-07T22:28:37.623093+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51606	45.128.233.186	23	TCP
2025-01-07T22:28:39.361579+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51608	45.128.233.186	23	TCP
2025-01-07T22:28:41.242342+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51610	45.128.233.186	23	TCP
2025-01-07T22:28:43.032880+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51612	45.128.233.186	23	TCP
2025-01-07T22:28:44.851296+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51614	45.128.233.186	23	TCP
2025-01-07T22:28:46.611002+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51616	45.128.233.186	23	TCP
2025-01-07T22:28:48.388325+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51618	45.128.233.186	23	TCP
2025-01-07T22:28:50.131185+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51620	45.128.233.186	23	TCP
2025-01-07T22:28:51.939308+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51622	45.128.233.186	23	TCP
2025-01-07T22:28:53.697427+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51624	45.128.233.186	23	TCP
2025-01-07T22:28:55.465371+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51626	45.128.233.186	23	TCP
2025-01-07T22:28:57.231842+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51628	45.128.233.186	23	TCP
2025-01-07T22:28:59.054520+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51630	45.128.233.186	23	TCP
2025-01-07T22:29:00.827675+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51632	45.128.233.186	23	TCP
2025-01-07T22:29:02.652762+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51634	45.128.233.186	23	TCP
2025-01-07T22:29:04.415136+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51636	45.128.233.186	23	TCP
2025-01-07T22:29:06.180022+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51638	45.128.233.186	23	TCP
2025-01-07T22:29:07.924666+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51640	45.128.233.186	23	TCP
2025-01-07T22:29:10.234309+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51642	45.128.233.186	23	TCP
2025-01-07T22:29:11.971855+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51644	45.128.233.186	23	TCP
2025-01-07T22:29:13.728125+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51646	45.128.233.186	23	TCP
2025-01-07T22:29:15.496173+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51648	45.128.233.186	23	TCP
2025-01-07T22:29:17.260657+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51650	45.128.233.186	23	TCP
2025-01-07T22:29:19.004262+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51652	45.128.233.186	23	TCP
2025-01-07T22:29:20.782068+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51654	45.128.233.186	23	TCP
2025-01-07T22:29:22.555610+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51656	45.128.233.186	23	TCP
2025-01-07T22:29:24.383087+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51658	45.128.233.186	23	TCP
2025-01-07T22:29:26.131541+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51660	45.128.233.186	23	TCP
2025-01-07T22:29:27.902489+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51662	45.128.233.186	23	TCP
2025-01-07T22:29:29.693480+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51664	45.128.233.186	23	TCP
2025-01-07T22:29:31.436511+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51666	45.128.233.186	23	TCP
2025-01-07T22:29:33.216604+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51668	45.128.233.186	23	TCP
2025-01-07T22:29:35.036557+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51670	45.128.233.186	23	TCP
2025-01-07T22:29:36.767143+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51672	45.128.233.186	23	TCP
2025-01-07T22:29:38.535591+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51674	45.128.233.186	23	TCP
2025-01-07T22:29:40.319741+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51676	45.128.233.186	23	TCP
2025-01-07T22:29:42.105455+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51678	45.128.233.186	23	TCP
2025-01-07T22:29:43.910609+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51680	45.128.233.186	23	TCP
2025-01-07T22:29:45.716291+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51682	45.128.233.186	23	TCP
2025-01-07T22:29:47.528840+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51684	45.128.233.186	23	TCP
2025-01-07T22:29:49.306543+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51686	45.128.233.186	23	TCP
2025-01-07T22:29:51.066419+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51688	45.128.233.186	23	TCP
2025-01-07T22:29:52.811046+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51690	45.128.233.186	23	TCP
2025-01-07T22:29:54.625327+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51692	45.128.233.186	23	TCP
2025-01-07T22:29:56.425888+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51694	45.128.233.186	23	TCP
2025-01-07T22:29:58.230248+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51696	45.128.233.186	23	TCP
2025-01-07T22:30:00.040302+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51698	45.128.233.186	23	TCP
2025-01-07T22:30:01.836373+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51700	45.128.233.186	23	TCP
2025-01-07T22:30:03.593178+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51702	45.128.233.186	23	TCP
2025-01-07T22:30:05.371154+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51704	45.128.233.186	23	TCP
2025-01-07T22:30:07.114478+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51706	45.128.233.186	23	TCP
2025-01-07T22:30:08.878776+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51708	45.128.233.186	23	TCP
2025-01-07T22:30:10.658032+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51710	45.128.233.186	23	TCP
2025-01-07T22:30:12.476625+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51712	45.128.233.186	23	TCP
2025-01-07T22:30:14.301042+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51714	45.128.233.186	23	TCP
2025-01-07T22:30:16.076992+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51716	45.128.233.186	23	TCP
2025-01-07T22:30:17.850201+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51718	45.128.233.186	23	TCP
2025-01-07T22:30:19.575566+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51720	45.128.233.186	23	TCP
2025-01-07T22:30:21.332377+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51722	45.128.233.186	23	TCP
2025-01-07T22:30:23.096969+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51724	45.128.233.186	23	TCP
2025-01-07T22:30:24.886938+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51726	45.128.233.186	23	TCP
2025-01-07T22:30:26.625111+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51728	45.128.233.186	23	TCP
2025-01-07T22:30:28.376735+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51730	45.128.233.186	23	TCP
2025-01-07T22:30:30.107682+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51732	45.128.233.186	23	TCP
2025-01-07T22:30:31.892008+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51734	45.128.233.186	23	TCP
2025-01-07T22:30:33.638813+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51736	45.128.233.186	23	TCP
2025-01-07T22:30:35.433185+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51738	45.128.233.186	23	TCP
2025-01-07T22:30:37.228707+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51740	45.128.233.186	23	TCP
2025-01-07T22:30:39.007496+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51742	45.128.233.186	23	TCP
2025-01-07T22:30:40.784673+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51744	45.128.233.186	23	TCP
2025-01-07T22:30:42.575606+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51746	45.128.233.186	23	TCP
2025-01-07T22:30:44.327555+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51748	45.128.233.186	23	TCP
2025-01-07T22:30:46.125268+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51750	45.128.233.186	23	TCP
2025-01-07T22:30:47.865333+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51752	45.128.233.186	23	TCP
2025-01-07T22:30:49.664975+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51754	45.128.233.186	23	TCP
2025-01-07T22:30:51.452736+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51756	45.128.233.186	23	TCP
2025-01-07T22:30:53.185749+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51758	45.128.233.186	23	TCP
2025-01-07T22:30:54.920281+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51760	45.128.233.186	23	TCP
2025-01-07T22:30:56.691300+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51762	45.128.233.186	23	TCP
2025-01-07T22:30:58.482416+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51764	45.128.233.186	23	TCP
2025-01-07T22:31:00.257731+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51766	45.128.233.186	23	TCP
2025-01-07T22:31:02.046438+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51768	45.128.233.186	23	TCP
2025-01-07T22:31:03.848469+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51770	45.128.233.186	23	TCP
2025-01-07T22:31:05.638728+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51772	45.128.233.186	23	TCP
2025-01-07T22:31:07.400203+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51774	45.128.233.186	23	TCP
2025-01-07T22:31:09.179108+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51776	45.128.233.186	23	TCP
2025-01-07T22:31:10.963679+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51778	45.128.233.186	23	TCP
2025-01-07T22:31:12.746665+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51780	45.128.233.186	23	TCP
2025-01-07T22:31:14.561223+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51782	45.128.233.186	23	TCP
2025-01-07T22:31:16.337438+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51784	45.128.233.186	23	TCP
2025-01-07T22:31:18.126428+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51786	45.128.233.186	23	TCP
2025-01-07T22:31:19.893146+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51788	45.128.233.186	23	TCP
2025-01-07T22:31:21.664847+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51790	45.128.233.186	23	TCP
2025-01-07T22:31:23.406197+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51792	45.128.233.186	23	TCP
2025-01-07T22:31:25.190595+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51794	45.128.233.186	23	TCP
2025-01-07T22:31:26.924824+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51796	45.128.233.186	23	TCP
2025-01-07T22:31:28.786012+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51798	45.128.233.186	23	TCP
2025-01-07T22:31:30.565357+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51800	45.128.233.186	23	TCP
2025-01-07T22:31:32.374687+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51802	45.128.233.186	23	TCP
2025-01-07T22:31:34.134580+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51804	45.128.233.186	23	TCP
2025-01-07T22:31:35.885410+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51806	45.128.233.186	23	TCP
2025-01-07T22:31:37.667254+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51808	45.128.233.186	23	TCP
2025-01-07T22:31:39.489458+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51810	45.128.233.186	23	TCP
2025-01-07T22:31:41.425422+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51812	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: gigops.arm4.elf

Avira: detected

Found malware configuration

Source: gigops.arm4.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.arm4.elf

ReversingLabs: Detection: 73%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.arm4.elf (PID: 5424)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51588 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51706 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51730 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51592 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51578 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51720 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51746 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51598 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51670 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51580 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51782 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51574 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51572 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51576 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51680 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51600 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51602 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51590 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51620 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51664 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51582 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51682 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51608 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51666 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51702 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51638 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51594 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51630 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51642 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51760 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51624 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51632 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51612 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51700 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51744 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51692 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51694 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51812 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51732 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51704 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51690 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51766 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51762 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51698 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51686 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51790 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51764 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51662 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51658 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51718 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51676 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51712 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51742 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51672 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51736 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51734 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51794 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51616 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51802 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51634 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51678 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51618 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51652 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51708 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51628 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51688 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51738 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51728 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51656 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51772 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51780 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51606 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51804 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51750 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51778 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51756 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51722 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51776 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51622 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51800 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51614 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51596 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51788 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51674 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51636 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51654 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51604 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51626 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51714 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51650 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51648 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51768 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51684 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51726 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51774 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51752 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51786 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51798 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51610 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51696 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51808 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51710 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51646 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51584 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51740 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51640 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51586 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51792 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51716 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51784 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51644 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51806 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51796 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51668 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51754 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51748 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51660 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51758 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51810 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51724 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51770 -> 45.128.233.186:23

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: gigops.arm4.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.arm4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5424.1.00007f6b24017000.00007f6b2402c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5426.1.00007f6b24017000.00007f6b2402c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: gigops.arm4.elf

ELF static info symbol of initial sample: passwords

Source: gigops.arm4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5424.1.00007f6b24017000.00007f6b2402c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5426.1.00007f6b24017000.00007f6b2402c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: /tmp/gigops.arm4.elf (PID: 5424)

Queries kernel information via 'uname':

Jump to behavior

Source: gigops.arm4.elf, 5424.1.000055d5f3542000.000055d5f3670000.rw-.sdmp, gigops.arm4.elf, 5426.1.000055d5f3542000.000055d5f3670000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: gigops.arm4.elf, 5424.1.00007ffd9589b000.00007ffd958bc000.rw-.sdmp, gigops.arm4.elf, 5426.1.00007ffd9589b000.00007ffd958bc000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/gigops.arm4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/gigops.arm4.elf
Source: gigops.arm4.elf, 5424.1.000055d5f3542000.000055d5f3670000.rw-.sdmp, gigops.arm4.elf, 5426.1.000055d5f3542000.000055d5f3670000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: gigops.arm4.elf, 5424.1.00007ffd9589b000.00007ffd958bc000.rw-.sdmp, gigops.arm4.elf, 5426.1.00007ffd9589b000.00007ffd958bc000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.arm4.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.arm4.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.arm4.elf	74%	ReversingLabs	Linux.Trojan.Gafgyt
gigops.arm4.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.arm4.elf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom		208861	RACKTECHRU	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.128.233.186	gigops.arm5.elf	Get hash	malicious	Gafgyt	Browse
	gigops.i586.elf	Get hash	malicious	Gafgyt	Browse
	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse
	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	gigops.arm5.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	miori.arc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RACKTECHRU	gigops.arm5.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.i586.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.i686.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mpsl.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.x86.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.arm6.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	gigops.mips.elf	Get hash	malicious	Gafgyt	Browse	45.128.233.186
	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.880637817294472
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gigops.arm4.elf
File size:	122'704 bytes
MD5:	68e7eb7137154d2c80bcb8bf60aa7618
SHA1:	6d7bd27163801f06500f11e44a1c8e94af98659e
SHA256:	a6e9d05dafdf4ca2f4967fc89d07aecb0217f2f995ada627c962445941a20086
SHA512:	dabc8de2a875347eecb4fcd71911ec62c751333c7cf8e412f39af341a8fd1e6a3cece4bb8d8f6e3d0e5f7477581541df2a6461b2a26be8a6c0b19b546272d333
SSDEEP:	3072:M/O1U39JHEKCsZHjSwSYnNSjHpWU0EgTGwX3r0upvJ4TLeFjOTrxCVOkZsvw80WR:M/nt/pv+1wVOisvwTWKZ/tw
TLSH:	ECC3E708E9605337C2E23FBAF79A838E73261E986797371585287FF02BE17985D36114
File Content Preview:	.ELF...a..........(.........4....q......4. ...(.....................,I..,I...............P...P...P......pg..........Q.td..................................-...L."....J..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	94716
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0x12c00	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x1acb0	0x12cb0	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1acc4	0x12cc4	0x1c68	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x25000	0x15000	0x4	0x0	0x3	WA	0	0	4
.ctors	PROGBITS	0x25004	0x15004	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x2500c	0x1500c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x25014	0x15014	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x25018	0x15018	0x2c8	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x252e0	0x152e0	0x6490	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x152e0	0xb56	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x15e38	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x15f58	0x70d	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x16665	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x16719	0x978	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x17094	0xa0	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x17134	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x17144	0xb8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x17544	0x46e0	0x10	0x0		20	616	4
.strtab	STRTAB	0x0	0x1bc24	0x232c	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x1492c	0x1492c	5.9434	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x15000	0x25000	0x25000	0x2e0	0x6770	3.6342	0x6	RW	0x8000	.eh_frame .ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1acb0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1acc4	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x25000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x25004	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x2500c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x25014	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x25018	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x252e0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1acb0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1acbc	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1ac74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1acc0	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8cd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8e30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9238	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9388	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9820	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9908	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa0a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa39c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaa70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xaad0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb0ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd5e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe9dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10014	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1036c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10650	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11080	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1125c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11340	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11390	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x113c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x114dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11534	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11590	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1160c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11638	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x116f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1171c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1174c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11778	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11830	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1183c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x119ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11cb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11cc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12594	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1262c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12664	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12800	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1284c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12dc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13268	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13360	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13374	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1345c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13468	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13500	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13834	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13be0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13cc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13cec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13da8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13dd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13e48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13eec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14814	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14c90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14e9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14fb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15078	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15104	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15458	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15588	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15748	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15d40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15de4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15e68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16108	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16244	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16334	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1633c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16394	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16424	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16450	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x164d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x165a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16664	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16700	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16794	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16bf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16d0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16e7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16eb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ec0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16ef4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16fa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1707c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x175a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17658	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x177ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17f4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18008	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x180a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x181e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x183b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x184e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18a10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18b1c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18bf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18ce0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18d64	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18dac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18e60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x18f68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19074	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x193dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x194b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19aa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19c0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19d44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19da0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19e8c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x19f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a08c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a1cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1a5cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1aaf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1ac20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25004	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x2500c	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1aca4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x25028	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8ccc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8e2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9234	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1af0c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9384	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9818	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9900	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9c74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa098	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa398	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaa68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaacc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb088	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd454	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd5dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdd40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe9c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xffac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10360	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10620	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1064c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11040	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x28	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x48	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x50	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x70	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x117f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1182c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2508c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1b5dc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x25094	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1b8dc	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11838	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11874	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x118bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x119d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11c10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11cac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11cbc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2509c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1bbf8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x11e58	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12578	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bc2c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x127fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12840	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x251d8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1bc34	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x130ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13260	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13454	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1bcb8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x13464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x134fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1382c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13bd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13ee8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x147f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x251dc	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14c48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x251f4	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14df8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14e84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2520c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x15074	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15100	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x151d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x152a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c83c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x15454	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x154d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x252b8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x15584	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1562c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15728	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1575c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15d20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15dd4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15e5c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x160cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x252d0	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x16238	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1632c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x163ec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16598	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16660	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x166fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c8b8	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16858	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2b380	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x16bec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16e60	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17338	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17f28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1c8e4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x17ff8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x181bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x184e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18afc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18bf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18cd8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18f4c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19060	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x193c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x193f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19d34	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1a020	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x78	0	NOTYPE	<unknown>	DEFAULT	16
$d	.symtab	0x98	0	NOTYPE	<unknown>	DEFAULT	16
C.1.3461	.symtab	0x1c8b8	24	OBJECT	<unknown>	DEFAULT	4
C.381.6729	.symtab	0x1b424	8	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0x12f68	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0x12f84	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x25314	16384	OBJECT	<unknown>	DEFAULT	10
StartTheLelz	.symtab	0xae88	8068	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x11488	40	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x25008	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x25004	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x2508c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1b5dc	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x25094	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1b8dc	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x25010	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x2500c	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x25000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x25000	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x2508c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper	.symtab	0x25094	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_b	.symtab	0x25090	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x25098	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x11830	12	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x11424	100	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x183b4	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x13360	20	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x113c0	100	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x13f10	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x13f34	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x13eec	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x15d78	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x15e1c	76	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x13374	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x11488	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x14c90	256	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x152ac	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x19400	56	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x114b0	44	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x16368	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x114dc	44	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x164d4	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x16b8c	48	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x16bbc	52	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x16868	804	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x13c94	44	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x11508	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x2b380	4	OBJECT	<unknown>	HIDDEN	10
__GI_execl	.symtab	0x154f4	148	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x16394	44	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x15458	156	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x16d0c	368	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x113c0	100	FUNC	<unknown>	HIDDEN	2
__GI_fdopen	.symtab	0x16e7c	56	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x181e4	464	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x17f4c	188	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x183b4	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x18008	156	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x184e4	148	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x16eb4	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x11534	44	FUNC	<unknown>	HIDDEN	2
__GI_fprintf	.symtab	0x118c0	48	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x12d8c	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x19c00	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x19c0c	312	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x19438	80	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x12dc0	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x183b4	304	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x11560	40	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x163c0	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x163c8	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x163d0	8	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x163d8	24	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x11588	8	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x11590	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x13cc0	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x163f0	8	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x2b384	4	OBJECT	<unknown>	HIDDEN	10
__GI_htonl	.symtab	0x13514	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x13500	20	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x13c70	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x18e60	240	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x13c64	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x13be0	132	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x13974	620	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13634	512	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x151e4	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x115bc	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13468	32	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x117e4	24	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x1160c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1a028	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x18a10	244	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x12e70	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x18b04	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x18b1c	220	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x12e80	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x16244	96	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x19488	48	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x163f8	44	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x16424	44	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x13548	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x13534	20	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x11638	92	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x16664	156	FUNC	<unknown>	HIDDEN	2
__GI_perror	.symtab	0x1183c	72	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x11694	44	FUNC	<unknown>	HIDDEN	2
__GI_printf	.symtab	0x11884	60	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x18f50	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x14d94	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x15078	140	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x19f78	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x116f0	44	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x16794	212	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x13d1c	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x16450	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x1171c	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x13d48	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x13d74	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x1174c	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x13da8	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x14fb0	200	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x162c0	116	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x13e04	48	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x13e34	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x13e48	164	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11778	48	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x15588	168	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x13dd8	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x16ec0	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x15104	224	FUNC	<unknown>	HIDDEN	2
__GI_strcat	.symtab	0x12fa0	40	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x12fc8	236	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x18bf8	232	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x12f20	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x12f20	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x130b4	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x18ce0	64	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x12f40	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x130d8	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x13190	216	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x18e20	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x18d20	68	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x18d64	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x13268	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x1345c	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x18dac	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x152b8	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x15748	1528	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13488	120	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x117a8	8	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x117fc	52	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x11390	40	FUNC	<unknown>	HIDDEN	2
__GI_vfprintf	.symtab	0x11da4	196	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x16ef4	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x164a8	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x117b0	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x16bf0	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x16c60	172	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x16c40	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x117b8	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x25014	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x25014	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x1a1d8	736	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x1aba8	20	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x1aba8	20	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x1ab8c	48	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x1ac20	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x1a1d8	736	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1abbc	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x1abf8	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x1ac0c	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1abe4	20	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x1abd0	20	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x1a8f4	516	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x1a5cc	808	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x1a1cc	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x1a1d4	740	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x1a50c	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x1a4e0	44	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x1a08c	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv0	.symtab	0x11340	4	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x1a1b4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x1a560	108	FUNC	<unknown>	HIDDEN	2
__aeabi_ldiv0	.symtab	0x11340	4	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x1a4b8	40	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0x11080	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0x11178	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x1a54c	128	FUNC	<unknown>	HIDDEN	2
__app_fini	.symtab	0x2b378	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x252b8	24	OBJECT	<unknown>	DEFAULT	9
__bss_end__	.symtab	0x2b770	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x252e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x252e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x15de4	56	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x1ab08	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x25090	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x25098	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x2b388	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x25018	0	NOTYPE	<unknown>	DEFAULT	9
__default_rt_sa_restorer	.symtab	0x16338	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x16334	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0x11340	4	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x1a8f4	516	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x1a08c	296	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1ac74	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x2501c	0	OBJECT	<unknown>	HIDDEN	9
__end__	.symtab	0x2b770	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x2b370	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x1ab08	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0x11830	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__error	.symtab	0x113b4	0	NOTYPE	<unknown>	DEFAULT	2
__exit_cleanup	.symtab	0x2b368	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x1a50c	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0x11424	100	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x183b4	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	6
__fixunsdfsi	.symtab	0x1ac20	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x1a560	108	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x1a4e0	44	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x1a54c	128	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x1a4b8	40	FUNC	<unknown>	HIDDEN	2
__gedf2	.symtab	0x1aaf8	148	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x19aa0	352	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x163d8	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x13360	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x1aaf8	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	6
__ledf2	.symtab	0x1ab00	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x114dc	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x13c94	44	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x113c0	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x11534	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1a028	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x16424	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x11638	92	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x116f0	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x13d1c	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x1171c	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x13d48	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x13d74	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x162c0	116	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x2b36c	4	OBJECT	<unknown>	DEFAULT	10
__libc_system	.symtab	0x16108	316	FUNC	<unknown>	DEFAULT	2
__libc_waitpid	.symtab	0x117b0	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x117b8	44	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x1ab00	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x148b8	424	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x13f58	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x251dc	24	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x2b3f0	888	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x14814	164	FUNC	<unknown>	DEFAULT	2
__modsi3	.symtab	0x1125c	228	FUNC	<unknown>	HIDDEN	2
__muldf3	.symtab	0x1a5cc	808	FUNC	<unknown>	HIDDEN	2
__muldi3	.symtab	0x11344	72	FUNC	<unknown>	HIDDEN	2
__nedf2	.symtab	0x1ab08	132	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x2b374	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x25004	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x252d4	4	OBJECT	<unknown>	DEFAULT	9
__progname_full	.symtab	0x252d8	4	OBJECT	<unknown>	DEFAULT	9
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x15d48	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x15d40	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x15d40	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x15d40	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x15d40	8	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x2b37c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x13f10	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x13f34	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x13eec	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x250a8	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x19d44	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x16fa8	212	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x19da0	192	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x17368	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x11cb0	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4591	.symtab	0x1bbf8	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x19e60	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x19f48	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x19e8c	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x174a0	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x11d78	44	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x250ac	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x1a1d4	740	FUNC	<unknown>	HIDDEN	2
__syscall_error	.symtab	0x162a4	28	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1633c	44	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x15d78	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x15e1c	76	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x15e68	672	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x252d0	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0x11080	248	FUNC	<unknown>	HIDDEN	2
__umodsi3	.symtab	0x11190	204	FUNC	<unknown>	HIDDEN	2
__vfork	.symtab	0x11390	40	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x13374	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x197c8	728	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x194b8	784	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x2b344	10	OBJECT	<unknown>	DEFAULT	10
_bss_end__	.symtab	0x2b770	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x11e68	80	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x2b398	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_handler	.symtab	0x2b3c0	40	OBJECT	<unknown>	HIDDEN	10
_custom_printf_spec	.symtab	0x251d8	4	OBJECT	<unknown>	HIDDEN	9
_dl_aux_init	.symtab	0x193dc	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x2b768	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2b76c	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x252e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x2b770	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x2b380	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x11488	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1acb0	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x29344	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x11eb8	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x177ac	1952	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x2b384	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x175a4	116	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x18580	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x12594	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x1284c	1344	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1262c	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x12664	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x12800	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x15d58	32	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x15d50	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2b3e8	8	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1707c	748	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x11c34	124	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x250b0	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x250b4	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x180a4	320	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x29340	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x250cc	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2933c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x250e8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x11cc0	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x250e4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x152c0	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x17618	64	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1bcc8	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x17658	340	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x11f38	1628	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x14c90	256	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0xe27c	1888	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x152ac	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x152ac	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x2b364	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x19400	56	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x13e48	164	FUNC	<unknown>	DEFAULT	2
buf.2915	.symtab	0x2b354	16	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x25084	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1aca8	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x18f68	268	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x114b0	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x16368	44	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x114dc	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x164d4	212	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x2502c	4	OBJECT	<unknown>	DEFAULT	9
completed.4916	.symtab	0x252e0	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x13c94	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x9c7c	640	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0xaad0	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x25030	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x25024	0	NOTYPE	<unknown>	DEFAULT	9
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x11508	44	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x2b370	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x2b380	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x154f4	148	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x16394	44	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x15458	156	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1c8e4	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x16d0c	368	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x113c0	100	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x165a8	188	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x9238	208	FUNC	<unknown>	DEFAULT	2
fdopen	.symtab	0x16e7c	56	FUNC	<unknown>	DEFAULT	2
fdopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fdopen_pids	.symtab	0x29314	4	OBJECT	<unknown>	DEFAULT	10
fdopendir	.symtab	0x16700	148	FUNC	<unknown>	DEFAULT	2
fdpclose	.symtab	0x90b4	388	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x8e30	644	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x181e4	464	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x17f4c	188	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x183b4	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x18008	156	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x184e4	148	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1c8d0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x16eb4	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x25018	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x252dc	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0x11534	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fprintf	.symtab	0x118c0	48	FUNC	<unknown>	DEFAULT	2
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x12d8c	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x14a60	520	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x19c00	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x19c00	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x19c0c	312	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x19438	80	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fuckit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x12dc0	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBogos	.symtab	0x95ec	564	FUNC	<unknown>	DEFAULT	2
getBuild	.symtab	0x10634	28	FUNC	<unknown>	DEFAULT	2
getCores	.symtab	0x9820	232	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x9530	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x1036c	712	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0xaa70	96	FUNC	<unknown>	DEFAULT	2
getRandomPublicIP	.symtab	0xa640	1072	FUNC	<unknown>	DEFAULT	2
getc	.symtab	0x17f4c	188	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x183b4	304	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x11560	40	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x163c0	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x163c8	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x163d0	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x163d8	24	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x11588	8	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x11590	44	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x13cc0	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x13cec	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x163f0	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x25300	4	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x2b384	4	OBJECT	<unknown>	DEFAULT	10
hextable	.symtab	0x1af0c	1024	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x13514	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x13500	20	FUNC	<unknown>	DEFAULT	2
i.4549	.symtab	0x25088	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x12fc8	236	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x13c70	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x18e60	240	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x13c64	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x13be0	132	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x13974	620	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x13834	320	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x13634	512	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x13568	204	FUNC	<unknown>	DEFAULT	2
infectline	.symtab	0x25028	4	OBJECT	<unknown>	DEFAULT	9
initConnection	.symtab	0x101a0	460	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x14e9c	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x151e4	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x115bc	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ipState	.symtab	0x29318	5	OBJECT	<unknown>	DEFAULT	10
isatty	.symtab	0x13468	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x117e4	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x1160c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9efc	420	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1a028	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x2530c	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x10650	2608	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x252fc	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0xad28	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x9908	136	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x13fd0	2116	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x14c68	40	FUNC	<unknown>	DEFAULT	2
matchPrompt	.symtab	0xa22c	368	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x18a10	244	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x12e70	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x18b04	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x18b1c	220	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x12e80	156	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x16244	96	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x19488	48	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x163f8	44	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x29320	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x251f4	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2520c	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x16424	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
negotiate	.symtab	0xa0a0	396	FUNC	<unknown>	DEFAULT	2
next_start.1304	.symtab	0x2b350	4	OBJECT	<unknown>	DEFAULT	10
nprocessors_onln	.symtab	0x15630	280	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x13548	32	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x13534	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x25304	8	OBJECT	<unknown>	DEFAULT	10
object.4931	.symtab	0x252e4	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x11638	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x16664	156	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x2b38c	4	OBJECT	<unknown>	DEFAULT	10
p.4914	.symtab	0x25020	0	OBJECT	<unknown>	DEFAULT	9
parseHex	.symtab	0x9308	128	FUNC	<unknown>	DEFAULT	2
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
passwords	.symtab	0x2504c	56	OBJECT	<unknown>	DEFAULT	9
pclose	.symtab	0x118f0	252	FUNC	<unknown>	DEFAULT	2
perror	.symtab	0x1183c	72	FUNC	<unknown>	DEFAULT	2
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x2b394	4	OBJECT	<unknown>	DEFAULT	10
pipe	.symtab	0x11694	44	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen	.symtab	0x119ec	584	FUNC	<unknown>	DEFAULT	2
popen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen_list	.symtab	0x29338	4	OBJECT	<unknown>	DEFAULT	10
prctl	.symtab	0x116c0	48	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4811	.symtab	0x1bc20	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x88e0	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8508	108	FUNC	<unknown>	DEFAULT	2
printf	.symtab	0x11884	60	FUNC	<unknown>	DEFAULT	2
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printi	.symtab	0x86f8	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8574	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xef94	4620	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x252d8	4	OBJECT	<unknown>	DEFAULT	9
program_invocation_short_name	.symtab	0x252d4	4	OBJECT	<unknown>	DEFAULT	9
qual_chars.4820	.symtab	0x1bc34	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x18f50	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x14d90	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x14d94	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1c83c	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x15078	140	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x25238	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x19f78	176	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x116f0	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readUntil	.symtab	0xa39c	676	FUNC	<unknown>	DEFAULT	2
readdir64	.symtab	0x16794	212	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x19074	872	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x13d1c	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9990	748	FUNC	<unknown>	DEFAULT	2
rindex	.symtab	0x18d20	68	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x16450	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x2b390	4	OBJECT	<unknown>	DEFAULT	10
sclose	.symtab	0xae3c	76	FUNC	<unknown>	DEFAULT	2
select	.symtab	0x1171c	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x13d48	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendCNC	.symtab	0xd460	220	FUNC	<unknown>	DEFAULT	2
sendHOLD	.symtab	0xe9dc	1464	FUNC	<unknown>	DEFAULT	2
sendHTTP	.symtab	0xd53c	168	FUNC	<unknown>	DEFAULT	2
sendJUNK	.symtab	0xdd6c	1296	FUNC	<unknown>	DEFAULT	2
sendTCP	.symtab	0xd5e4	1928	FUNC	<unknown>	DEFAULT	2
sendUDP	.symtab	0xce0c	1620	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:28:07.426594+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51572	45.128.233.186	23	TCP
2025-01-07T22:28:09.145151+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51574	45.128.233.186	23	TCP
2025-01-07T22:28:10.936914+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51576	45.128.233.186	23	TCP
2025-01-07T22:28:12.737680+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51578	45.128.233.186	23	TCP
2025-01-07T22:28:14.545169+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51580	45.128.233.186	23	TCP
2025-01-07T22:28:16.285418+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51582	45.128.233.186	23	TCP
2025-01-07T22:28:18.059390+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51584	45.128.233.186	23	TCP
2025-01-07T22:28:19.820257+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51586	45.128.233.186	23	TCP
2025-01-07T22:28:21.587178+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51588	45.128.233.186	23	TCP
2025-01-07T22:28:23.441840+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51590	45.128.233.186	23	TCP
2025-01-07T22:28:25.173560+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51592	45.128.233.186	23	TCP
2025-01-07T22:28:26.926854+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51594	45.128.233.186	23	TCP
2025-01-07T22:28:28.694782+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51596	45.128.233.186	23	TCP
2025-01-07T22:28:30.457968+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51598	45.128.233.186	23	TCP
2025-01-07T22:28:32.256121+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51600	45.128.233.186	23	TCP
2025-01-07T22:28:34.043910+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51602	45.128.233.186	23	TCP
2025-01-07T22:28:35.817080+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51604	45.128.233.186	23	TCP
2025-01-07T22:28:37.623093+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51606	45.128.233.186	23	TCP
2025-01-07T22:28:39.361579+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51608	45.128.233.186	23	TCP
2025-01-07T22:28:41.242342+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51610	45.128.233.186	23	TCP
2025-01-07T22:28:43.032880+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51612	45.128.233.186	23	TCP
2025-01-07T22:28:44.851296+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51614	45.128.233.186	23	TCP
2025-01-07T22:28:46.611002+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51616	45.128.233.186	23	TCP
2025-01-07T22:28:48.388325+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51618	45.128.233.186	23	TCP
2025-01-07T22:28:50.131185+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51620	45.128.233.186	23	TCP
2025-01-07T22:28:51.939308+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51622	45.128.233.186	23	TCP
2025-01-07T22:28:53.697427+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51624	45.128.233.186	23	TCP
2025-01-07T22:28:55.465371+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51626	45.128.233.186	23	TCP
2025-01-07T22:28:57.231842+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51628	45.128.233.186	23	TCP
2025-01-07T22:28:59.054520+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51630	45.128.233.186	23	TCP
2025-01-07T22:29:00.827675+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51632	45.128.233.186	23	TCP
2025-01-07T22:29:02.652762+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51634	45.128.233.186	23	TCP
2025-01-07T22:29:04.415136+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51636	45.128.233.186	23	TCP
2025-01-07T22:29:06.180022+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51638	45.128.233.186	23	TCP
2025-01-07T22:29:07.924666+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51640	45.128.233.186	23	TCP
2025-01-07T22:29:10.234309+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51642	45.128.233.186	23	TCP
2025-01-07T22:29:11.971855+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51644	45.128.233.186	23	TCP
2025-01-07T22:29:13.728125+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51646	45.128.233.186	23	TCP
2025-01-07T22:29:15.496173+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51648	45.128.233.186	23	TCP
2025-01-07T22:29:17.260657+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51650	45.128.233.186	23	TCP
2025-01-07T22:29:19.004262+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51652	45.128.233.186	23	TCP
2025-01-07T22:29:20.782068+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51654	45.128.233.186	23	TCP
2025-01-07T22:29:22.555610+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51656	45.128.233.186	23	TCP
2025-01-07T22:29:24.383087+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51658	45.128.233.186	23	TCP
2025-01-07T22:29:26.131541+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51660	45.128.233.186	23	TCP
2025-01-07T22:29:27.902489+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51662	45.128.233.186	23	TCP
2025-01-07T22:29:29.693480+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51664	45.128.233.186	23	TCP
2025-01-07T22:29:31.436511+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51666	45.128.233.186	23	TCP
2025-01-07T22:29:33.216604+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51668	45.128.233.186	23	TCP
2025-01-07T22:29:35.036557+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51670	45.128.233.186	23	TCP
2025-01-07T22:29:36.767143+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51672	45.128.233.186	23	TCP
2025-01-07T22:29:38.535591+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51674	45.128.233.186	23	TCP
2025-01-07T22:29:40.319741+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51676	45.128.233.186	23	TCP
2025-01-07T22:29:42.105455+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51678	45.128.233.186	23	TCP
2025-01-07T22:29:43.910609+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51680	45.128.233.186	23	TCP
2025-01-07T22:29:45.716291+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51682	45.128.233.186	23	TCP
2025-01-07T22:29:47.528840+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51684	45.128.233.186	23	TCP
2025-01-07T22:29:49.306543+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51686	45.128.233.186	23	TCP
2025-01-07T22:29:51.066419+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51688	45.128.233.186	23	TCP
2025-01-07T22:29:52.811046+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51690	45.128.233.186	23	TCP
2025-01-07T22:29:54.625327+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51692	45.128.233.186	23	TCP
2025-01-07T22:29:56.425888+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51694	45.128.233.186	23	TCP
2025-01-07T22:29:58.230248+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51696	45.128.233.186	23	TCP
2025-01-07T22:30:00.040302+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51698	45.128.233.186	23	TCP
2025-01-07T22:30:01.836373+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51700	45.128.233.186	23	TCP
2025-01-07T22:30:03.593178+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51702	45.128.233.186	23	TCP
2025-01-07T22:30:05.371154+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51704	45.128.233.186	23	TCP
2025-01-07T22:30:07.114478+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51706	45.128.233.186	23	TCP
2025-01-07T22:30:08.878776+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51708	45.128.233.186	23	TCP
2025-01-07T22:30:10.658032+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51710	45.128.233.186	23	TCP
2025-01-07T22:30:12.476625+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51712	45.128.233.186	23	TCP
2025-01-07T22:30:14.301042+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51714	45.128.233.186	23	TCP
2025-01-07T22:30:16.076992+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51716	45.128.233.186	23	TCP
2025-01-07T22:30:17.850201+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51718	45.128.233.186	23	TCP
2025-01-07T22:30:19.575566+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51720	45.128.233.186	23	TCP
2025-01-07T22:30:21.332377+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51722	45.128.233.186	23	TCP
2025-01-07T22:30:23.096969+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51724	45.128.233.186	23	TCP
2025-01-07T22:30:24.886938+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51726	45.128.233.186	23	TCP
2025-01-07T22:30:26.625111+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51728	45.128.233.186	23	TCP
2025-01-07T22:30:28.376735+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51730	45.128.233.186	23	TCP
2025-01-07T22:30:30.107682+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51732	45.128.233.186	23	TCP
2025-01-07T22:30:31.892008+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51734	45.128.233.186	23	TCP
2025-01-07T22:30:33.638813+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51736	45.128.233.186	23	TCP
2025-01-07T22:30:35.433185+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51738	45.128.233.186	23	TCP
2025-01-07T22:30:37.228707+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51740	45.128.233.186	23	TCP
2025-01-07T22:30:39.007496+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51742	45.128.233.186	23	TCP
2025-01-07T22:30:40.784673+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51744	45.128.233.186	23	TCP
2025-01-07T22:30:42.575606+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51746	45.128.233.186	23	TCP
2025-01-07T22:30:44.327555+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51748	45.128.233.186	23	TCP
2025-01-07T22:30:46.125268+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51750	45.128.233.186	23	TCP
2025-01-07T22:30:47.865333+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51752	45.128.233.186	23	TCP
2025-01-07T22:30:49.664975+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51754	45.128.233.186	23	TCP
2025-01-07T22:30:51.452736+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51756	45.128.233.186	23	TCP
2025-01-07T22:30:53.185749+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51758	45.128.233.186	23	TCP
2025-01-07T22:30:54.920281+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51760	45.128.233.186	23	TCP
2025-01-07T22:30:56.691300+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51762	45.128.233.186	23	TCP
2025-01-07T22:30:58.482416+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51764	45.128.233.186	23	TCP
2025-01-07T22:31:00.257731+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51766	45.128.233.186	23	TCP
2025-01-07T22:31:02.046438+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51768	45.128.233.186	23	TCP
2025-01-07T22:31:03.848469+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51770	45.128.233.186	23	TCP
2025-01-07T22:31:05.638728+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51772	45.128.233.186	23	TCP
2025-01-07T22:31:07.400203+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51774	45.128.233.186	23	TCP
2025-01-07T22:31:09.179108+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51776	45.128.233.186	23	TCP
2025-01-07T22:31:10.963679+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51778	45.128.233.186	23	TCP
2025-01-07T22:31:12.746665+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51780	45.128.233.186	23	TCP
2025-01-07T22:31:14.561223+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51782	45.128.233.186	23	TCP
2025-01-07T22:31:16.337438+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51784	45.128.233.186	23	TCP
2025-01-07T22:31:18.126428+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51786	45.128.233.186	23	TCP
2025-01-07T22:31:19.893146+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51788	45.128.233.186	23	TCP
2025-01-07T22:31:21.664847+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51790	45.128.233.186	23	TCP
2025-01-07T22:31:23.406197+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51792	45.128.233.186	23	TCP
2025-01-07T22:31:25.190595+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51794	45.128.233.186	23	TCP
2025-01-07T22:31:26.924824+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51796	45.128.233.186	23	TCP
2025-01-07T22:31:28.786012+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51798	45.128.233.186	23	TCP
2025-01-07T22:31:30.565357+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51800	45.128.233.186	23	TCP
2025-01-07T22:31:32.374687+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51802	45.128.233.186	23	TCP
2025-01-07T22:31:34.134580+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51804	45.128.233.186	23	TCP
2025-01-07T22:31:35.885410+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51806	45.128.233.186	23	TCP
2025-01-07T22:31:37.667254+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51808	45.128.233.186	23	TCP
2025-01-07T22:31:39.489458+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51810	45.128.233.186	23	TCP
2025-01-07T22:31:41.425422+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51812	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:28:07.346565962 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:07.351460934 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:07.351511955 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:07.426594019 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:07.433779001 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:09.126378059 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:09.126663923 CET	51572	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:09.127101898 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:09.131536007 CET	23	51572	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:09.131947041 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:09.132070065 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:09.145150900 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:09.149877071 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:10.916152954 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:10.916583061 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:10.916583061 CET	51574	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:10.917082071 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:10.921449900 CET	23	51574	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:10.921948910 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:10.922040939 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:10.936913967 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:10.941777945 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:12.716705084 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:12.717040062 CET	51576	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:12.717580080 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:12.721961975 CET	23	51576	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:12.722527981 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:12.722587109 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:12.737679958 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:12.742557049 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:14.523483038 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:14.523650885 CET	51578	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:14.524175882 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:14.528597116 CET	23	51578	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:14.528965950 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:14.529089928 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:14.545169115 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:14.549949884 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:16.264296055 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:16.264590025 CET	51580	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:16.264933109 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:16.269376993 CET	23	51580	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:16.269709110 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:16.269761086 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:16.285418034 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:16.290179014 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:18.038229942 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:18.038539886 CET	51582	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:18.039042950 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:18.043311119 CET	23	51582	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:18.043869972 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:18.043951988 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:18.059390068 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:18.064282894 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:19.798603058 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:19.798865080 CET	51584	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:19.799597025 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:19.803756952 CET	23	51584	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:19.804488897 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:19.804537058 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:19.820256948 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:19.825042009 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:21.565942049 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:21.566111088 CET	51586	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:21.566665888 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:21.570903063 CET	23	51586	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:21.571455956 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:21.571541071 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:21.587177992 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:21.592061043 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:23.419791937 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:23.419996023 CET	51588	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:23.420582056 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:23.424829960 CET	23	51588	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:23.425405025 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:23.425452948 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:23.441839933 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:23.446620941 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:25.151238918 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:25.151421070 CET	51590	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:25.151878119 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:25.156208992 CET	23	51590	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:25.156673908 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:25.156743050 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:25.173559904 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:25.178306103 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:26.906446934 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:26.906603098 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:26.907048941 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:26.911406994 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:26.911853075 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:26.911978960 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:26.926853895 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:26.931643963 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:28.675784111 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:28.676038980 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:28.676470995 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:28.680831909 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:28.681281090 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:28.681354046 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:28.694782019 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:28.699598074 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:30.437161922 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:30.437623024 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:30.438100100 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:30.442481041 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:30.442888975 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:30.443022013 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:30.457967997 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:30.462723970 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:32.231396914 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:32.231925011 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:32.232675076 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:32.236742973 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:32.237482071 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:32.237576962 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:32.256120920 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:32.261364937 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:34.019522905 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:34.020225048 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:34.020993948 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:34.025094986 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:34.025851011 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:34.025922060 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:34.043910027 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:34.048640013 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:35.789800882 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:35.790062904 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:35.790472031 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:35.794830084 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:35.795244932 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:35.795366049 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:35.817080021 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:35.821863890 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:37.599293947 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:37.599745989 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:37.600369930 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:37.604568005 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:37.605158091 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:37.605232000 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:37.623092890 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:37.627954006 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:39.339833975 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:39.340133905 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:39.340841055 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:39.345026016 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:39.345627069 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:39.345700979 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:39.361578941 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:39.366362095 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:41.216317892 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:41.216964960 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:41.217726946 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:41.221772909 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:41.222474098 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:41.222590923 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:41.242341995 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:41.247173071 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:43.011229038 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:43.011751890 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:43.012392998 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:43.016619921 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:43.017328978 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:43.017406940 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:43.032880068 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:43.037817001 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:44.829854965 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:44.830120087 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:44.830534935 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:44.834908009 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:44.835300922 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:44.835447073 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:44.851295948 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:44.857194901 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:46.592401028 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:46.592761040 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:46.593296051 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:46.597820997 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:46.598134995 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:46.598181963 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:46.611001968 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:46.615812063 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:48.368069887 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:48.368302107 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:48.368827105 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:48.373157978 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:48.373588085 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:48.373642921 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:48.388324976 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:48.393100023 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:50.104552031 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:50.105015993 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:50.105673075 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:50.109894037 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:50.110522985 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:50.110615969 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:50.131185055 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:50.136030912 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:51.919967890 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:51.920304060 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:51.920793056 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:51.925177097 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:51.925565958 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:51.925620079 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:51.939307928 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:51.944117069 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:53.672111034 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:53.672354937 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:53.673026085 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:53.677961111 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:53.678352118 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:53.678417921 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:53.697427034 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:53.702564001 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:55.440063000 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:55.440407038 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:55.441165924 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:55.445171118 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:55.445931911 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:55.446048021 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:55.465370893 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:55.471271992 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:57.204762936 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:57.205265045 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:57.206017971 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:57.210031033 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:57.210805893 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:57.210877895 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:57.231842041 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:57.236630917 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:59.028826952 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:59.029017925 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:59.029654026 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:59.033796072 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:59.034426928 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:28:59.034507990 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:59.054519892 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:28:59.059294939 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:00.808825016 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:00.809041977 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:00.809489965 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:00.813854933 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:00.814296007 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:00.814349890 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:00.827675104 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:00.832417011 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:02.630995989 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:02.631324053 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:02.631768942 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:02.636219025 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:02.636559010 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:02.636605024 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:02.652761936 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:02.657515049 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:04.394794941 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:04.395045996 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:04.395512104 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:04.399873972 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:04.400333881 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:04.400414944 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:04.415136099 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:04.419941902 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:06.159827948 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:06.160130978 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:06.160609961 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:06.164911032 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:06.165406942 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:06.165452957 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:06.180022001 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:06.184804916 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:07.906580925 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:07.906757116 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:07.907172918 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:07.911534071 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:07.911983967 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:07.912022114 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:07.924665928 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:07.929549932 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:09.716283083 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:09.716655970 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:09.717403889 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:09.928596020 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.037489891 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:10.037674904 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.140633106 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.215403080 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:10.215524912 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.216499090 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:10.216510057 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:10.216516972 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:10.216545105 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:10.216603994 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.216619015 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.216631889 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.234308958 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:10.239144087 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:11.949466944 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:11.949738026 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:11.950345039 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:11.954519987 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:11.955167055 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:11.955239058 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:11.971854925 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:11.976644993 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:13.701467991 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:13.701845884 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:13.702450037 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:13.706609011 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:13.707261086 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:13.707516909 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:13.728125095 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:13.733261108 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:15.472229004 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:15.472742081 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:15.472742081 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:15.473452091 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:15.477587938 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:15.478245974 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:15.478331089 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:15.496172905 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:15.500936031 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:17.239026070 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:17.239334106 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:17.239866018 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:17.244108915 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:17.244631052 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:17.244683981 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:17.260657072 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:17.265486956 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:18.979617119 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:18.979876041 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:18.980640888 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:18.984791994 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:18.985555887 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:18.985764027 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:19.004261971 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:19.009093046 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:20.762336016 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:20.762588024 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:20.763005972 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:20.767405987 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:20.767824888 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:20.767863989 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:20.782068014 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:20.787318945 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:22.535053968 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:22.535192013 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:22.535677910 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:22.540040970 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:22.540527105 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:22.540575027 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:22.555609941 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:22.560415983 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:24.356682062 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:24.356925011 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:24.357672930 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:24.361736059 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:24.362502098 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:24.362663984 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:24.383086920 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:24.387947083 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:26.107938051 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:26.108395100 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:26.108993053 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:26.113240004 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:26.113820076 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:26.113871098 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:26.131541014 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:26.136301041 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:27.880769968 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:27.881007910 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:27.881438017 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:27.885881901 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:27.886272907 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:27.886389017 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:27.902488947 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:27.908284903 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:29.667944908 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:29.668642044 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:29.669567108 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:29.673453093 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:29.674359083 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:29.674422979 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:29.693480015 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:29.698318958 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:31.417700052 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:31.417840958 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:31.418287992 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:31.422661066 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:31.423048973 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:31.423089027 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:31.436511040 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:31.441245079 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:33.195408106 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:33.195554972 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:33.195997953 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:33.200356960 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:33.200854063 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:33.200968981 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:33.216603994 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:33.221402884 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:35.017193079 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:35.017370939 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:35.017823935 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:35.022227049 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:35.022630930 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:35.022675991 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:35.036556959 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:35.041435003 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:36.748495102 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:36.748627901 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:36.749102116 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:36.753448009 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:36.753911018 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:36.753953934 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:36.767143011 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:36.771919012 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:38.518625975 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:38.518780947 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:38.519433022 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:38.523559093 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:38.524183035 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:38.524260044 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:38.535590887 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:38.540379047 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:40.300669909 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:40.301013947 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:40.301645994 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:40.305933952 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:40.306427956 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:40.306504011 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:40.319741011 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:40.324578047 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:42.089848042 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:42.090131998 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:42.090729952 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:42.094979048 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:42.095529079 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:42.095599890 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:42.105454922 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:42.110390902 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:43.889138937 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:43.889488935 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:43.890192032 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:43.894309044 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:43.894998074 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:43.895061016 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:43.910609007 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:43.916243076 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:45.694098949 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:45.694344997 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:45.695049047 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:45.699213982 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:45.699794054 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:45.699857950 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:45.716290951 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:45.721457958 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:47.511950016 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:47.512351990 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:47.513058901 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:47.517154932 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:47.517924070 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:47.517997026 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:47.528840065 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:47.533651114 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:49.283592939 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:49.283961058 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:49.284727097 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:49.288784981 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:49.289508104 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:49.289573908 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:49.306543112 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:49.311419010 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:51.044347048 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:51.044673920 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:51.044673920 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:51.045336962 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:51.049550056 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:51.050105095 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:51.050168991 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:51.066418886 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:51.071151972 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:52.796678066 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:52.796828032 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:52.797244072 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:52.801620960 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:52.802048922 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:52.802112103 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:52.811045885 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:52.815810919 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:54.603348970 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:54.603642941 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:54.604377985 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:54.608515978 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:54.609201908 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:54.609275103 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:54.625327110 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:54.630088091 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:56.403162956 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:56.403374910 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:56.404109955 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:56.408154964 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:56.408925056 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:56.408993959 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:56.425888062 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:56.430619001 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:58.203373909 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:58.203560114 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:58.204396963 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:58.208389044 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:58.209156036 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:29:58.209212065 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:58.230247974 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:29:58.235040903 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:00.023966074 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:00.024359941 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:00.024864912 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:00.029141903 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:00.029639006 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:00.029680014 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:00.040302038 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:00.045109034 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:01.819628954 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:01.819792986 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:01.820235968 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:01.824557066 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:01.825090885 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:01.825176954 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:01.836373091 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:01.841125965 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:03.578604937 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:03.578747034 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:03.579236031 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:03.583506107 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:03.583992004 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:03.584039927 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:03.593178034 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:03.598000050 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:05.350131035 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:05.350512028 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:05.351181030 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:05.355273008 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:05.356004000 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:05.356071949 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:05.371154070 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:05.375941038 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:07.092107058 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:07.092339993 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:07.093019962 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:07.097150087 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:07.097832918 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:07.097910881 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:07.114478111 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:07.119285107 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:08.854533911 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:08.854912043 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:08.855714083 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:08.859776974 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:08.860541105 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:08.860613108 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:08.878776073 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:08.883575916 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:10.637818098 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:10.638195992 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:10.638875008 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:10.643079042 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:10.643726110 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:10.643886089 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:10.658031940 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:10.662868023 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:12.452795029 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:12.453074932 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:12.453747034 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:12.458112955 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:12.458862066 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:12.458915949 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:12.476624966 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:12.481712103 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:14.280679941 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:14.281074047 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:14.281784058 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:14.285868883 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:14.286580086 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:14.286648989 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:14.301042080 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:14.305782080 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:16.057070971 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:16.057446003 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:16.058182955 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:16.062195063 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:16.062954903 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:16.063035965 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:16.076992035 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:16.081773996 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:17.834868908 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:17.835021973 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:17.835458994 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:17.839868069 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:17.840219021 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:17.840296984 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:17.850200891 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:17.854964018 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:19.559545040 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:19.559705019 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:19.560142994 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:19.564518929 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:19.564977884 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:19.565062046 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:19.575566053 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:19.580391884 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:21.316349030 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:21.316507101 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:21.316988945 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:21.321429014 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:21.321835041 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:21.321975946 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:21.332376957 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:21.337205887 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:23.079302073 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:23.079535007 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:23.079940081 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:23.084351063 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:23.084729910 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:23.084778070 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:23.096968889 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:23.101731062 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:24.870538950 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:24.870701075 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:24.871398926 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:24.875557899 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:24.876204967 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:24.876327038 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:24.886938095 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:24.891741037 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:26.608947039 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:26.609188080 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:26.609602928 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:26.614063025 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:26.614377022 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:26.614464998 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:26.625111103 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:26.629935026 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:28.360949039 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:28.361219883 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:28.361607075 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:28.366099119 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:28.366400957 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:28.366449118 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:28.376734972 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:28.381583929 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:30.091617107 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:30.091835976 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:30.092350960 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:30.096671104 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:30.097110033 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:30.097254992 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:30.107681990 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:30.112508059 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:31.872577906 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:31.872890949 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:31.873593092 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:31.877701044 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:31.878353119 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:31.878427029 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:31.892008066 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:31.896755934 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:33.622813940 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:33.622953892 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:33.623382092 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:33.627710104 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:33.628199100 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:33.628249884 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:33.638813019 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:33.643568039 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:35.417644024 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:35.417917013 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:35.418278933 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:35.422732115 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:35.423067093 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:35.423142910 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:35.433185101 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:35.437964916 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:37.213669062 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:37.213855028 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:37.214237928 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:37.218673944 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:37.219043970 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:37.219086885 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:37.228707075 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:37.233469009 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:38.990200996 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:38.990398884 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:38.990786076 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:38.995166063 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:38.995598078 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:38.995719910 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:39.007496119 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:39.012259007 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:40.767836094 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:40.768182993 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:40.768618107 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:40.773005009 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:40.773466110 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:40.773611069 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:40.784672976 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:40.789489985 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:42.560529947 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:42.560770035 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:42.561187983 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:42.565537930 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:42.565962076 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:42.566009045 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:42.575606108 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:42.580424070 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:44.311503887 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:44.311889887 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:44.312517881 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:44.316783905 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:44.317400932 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:44.317482948 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:44.327554941 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:44.332345009 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:46.102349997 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:46.102715969 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:46.103336096 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:46.107539892 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:46.108156919 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:46.108226061 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:46.125267982 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:46.130011082 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:47.841686010 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:47.841917038 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:47.842654943 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:47.846729994 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:47.847491980 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:47.847556114 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:47.865333080 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:47.870143890 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:49.632283926 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:49.632375002 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:49.633279085 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:49.637195110 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:49.638056040 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:49.638113976 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:49.664974928 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:49.669806957 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:51.433361053 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:51.433655024 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:51.434040070 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:51.438546896 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:51.438858032 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:51.438935041 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:51.452735901 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:51.457500935 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:53.169051886 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:53.169338942 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:53.169749022 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:53.174201965 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:53.174566031 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:53.174637079 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:53.185749054 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:53.190612078 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:54.904800892 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:54.904989958 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:54.905417919 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:54.909892082 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:54.910264015 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:54.910319090 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:54.920280933 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:54.925096035 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:56.676211119 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:56.676476955 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:56.676842928 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:56.681317091 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:56.681621075 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:56.681668997 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:56.691299915 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:56.696249008 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:58.468070030 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:58.468244076 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:58.468538046 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:58.473067999 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:58.473335028 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:30:58.473412037 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:58.482415915 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:30:58.487142086 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:00.240247965 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:00.240494967 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:00.240958929 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:00.246654987 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:00.247088909 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:00.247133017 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:00.257730961 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:00.263318062 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:02.030783892 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:02.030916929 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:02.031373978 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:02.035726070 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:02.036200047 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:02.036243916 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:02.046437979 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:02.051352978 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:03.827466965 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:03.827765942 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:03.828449011 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:03.832642078 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:03.833245993 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:03.833369017 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:03.848469019 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:03.853297949 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:05.617846966 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:05.618201971 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:05.618941069 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:05.622977972 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:05.623883009 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:05.623959064 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:05.638727903 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:05.643510103 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:07.380898952 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:07.381247044 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:07.381941080 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:07.386065960 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:07.386723042 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:07.386827946 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:07.400202990 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:07.404942036 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:09.158957958 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:09.159204006 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:09.159909010 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:09.164093018 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:09.164731979 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:09.164818048 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:09.179107904 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:09.183928013 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:10.947231054 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:10.947457075 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:10.947940111 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:10.952337027 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:10.952784061 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:10.952831030 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:10.963679075 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:10.968482018 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:12.723778009 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:12.724324942 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:12.724963903 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:12.729129076 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:12.729779959 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:12.730025053 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:12.746665001 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:12.751460075 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:14.544430971 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:14.544686079 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:14.545429945 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:14.549488068 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:14.550246954 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:14.550316095 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:14.561223030 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:14.566023111 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:16.322649002 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:16.322746038 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:16.323024035 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:16.327553034 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:16.327811956 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:16.327851057 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:16.337438107 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:16.342200041 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:18.109220028 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:18.109352112 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:18.109738111 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:18.114186049 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:18.114542007 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:18.114623070 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:18.126427889 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:18.131223917 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:19.876893044 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:19.877348900 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:19.877790928 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:19.882205963 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:19.882574081 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:19.882630110 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:19.893146038 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:19.897912979 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:21.647417068 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:21.647675991 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:21.648055077 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:21.652539015 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:21.652873039 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:21.652986050 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:21.664846897 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:21.669606924 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:23.389472008 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:23.389890909 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:23.390255928 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:23.394675970 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:23.395059109 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:23.395143032 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:23.406197071 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:23.411012888 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:25.184655905 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:25.184815884 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:25.185240030 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:25.189671993 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:25.189996004 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:25.190035105 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:25.190594912 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:25.195424080 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:26.918845892 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:26.919152975 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:26.919847965 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:26.923966885 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:26.924626112 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:26.924705982 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:26.924823999 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:26.929619074 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:28.779968023 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:28.780304909 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:28.781017065 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:28.785094023 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:28.785792112 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:28.785878897 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:28.786011934 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:28.790798903 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:30.559638977 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:30.559838057 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:30.560311079 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:30.564723015 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:30.565110922 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:30.565176010 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:30.565356970 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:30.570112944 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:32.367712021 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:32.367974997 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:32.368735075 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:32.373927116 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:32.374496937 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:32.374572992 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:32.374686956 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:32.379812002 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:34.128318071 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:34.128794909 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:34.129509926 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:34.133662939 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:34.134393930 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:34.134466887 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:34.134579897 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:34.139350891 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:35.879796982 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:35.880088091 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:35.880481958 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:35.884943962 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:35.885261059 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:35.885380030 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:35.885410070 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:35.890130043 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:37.661650896 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:37.661861897 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:37.662333965 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:37.666708946 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:37.667139053 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:37.667227983 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:37.667253971 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:37.672075987 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:39.483489037 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:39.483778954 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:39.484504938 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:39.488614082 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:39.489269018 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:39.489342928 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:39.489458084 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:39.494203091 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:41.419284105 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:41.419676065 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:41.420378923 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:41.424520016 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:41.425189972 CET	23	51812	45.128.233.186	192.168.2.13
Jan 7, 2025 22:31:41.425308943 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:41.425421953 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:31:41.430140018 CET	23	51812	45.128.233.186	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:30:49.753441095 CET	53280	53	192.168.2.13	1.1.1.1
Jan 7, 2025 22:30:49.753484964 CET	50044	53	192.168.2.13	1.1.1.1
Jan 7, 2025 22:30:49.760067940 CET	53	53280	1.1.1.1	192.168.2.13
Jan 7, 2025 22:30:49.760636091 CET	53	50044	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 22:30:49.753441095 CET	192.168.2.13	1.1.1.1	0x23db	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:30:49.753484964 CET	192.168.2.13	1.1.1.1	0xdcf7	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 22:30:49.760067940 CET	1.1.1.1	192.168.2.13	0x23db	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:30:49.760067940 CET	1.1.1.1	192.168.2.13	0x23db	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: gigops.arm4.elf PID: 5424, Parent PID: 5348

General

Start time (UTC):	21:28:06
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm4.elf
Arguments:	/tmp/gigops.arm4.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gigops.arm4.elf PID: 5426, Parent PID: 5424

General

Start time (UTC):	21:28:06
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: gigops.arm4.elf PID: 5428, Parent PID: 5426

General

Start time (UTC):	21:28:06
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.arm4.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.arm4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: gigops.arm4.elf PID: 5424, Parent PID: 5348

General

Chronological Activities

Analysis Process: gigops.arm4.elf PID: 5426, Parent PID: 5424

General

Chronological Activities

Analysis Process: gigops.arm4.elf PID: 5428, Parent PID: 5426

General

Chronological Activities

Linux Analysis Report
gigops.arm4.elf