Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
Space.sh4.elf

Overview

General Information

Sample name:Space.sh4.elf
Analysis ID:1589124
MD5:307be28cb9e55775f3c4fb52e73bfda8
SHA1:11c9a89a14d33ff236e7814987c5afd1ec1556e5
SHA256:bd5a5856a3a4d7865fd7f1c2fa789206a17e32ad2da3680ef7dc9c5e0158da35
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Detected TCP or UDP traffic on non-standard ports
Enumerates processes within the "proc" file system
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1589124
Start date and time:2025-01-11 10:41:09 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 5m 28s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:Space.sh4.elf
Detection:MAL
Classification:mal64.linELF@0/0@0/0

Warnings

  • VT rate limit hit for: Space.sh4.elf

Runtime Messages

Command:/tmp/Space.sh4.elf
PID:5722
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
lzrd cock fest"/proc/"/exe
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
Space.sh4.elfLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

SourceRuleDescriptionAuthorStrings
5724.1.00007f4908400000.00007f4908414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5726.1.00007f4908400000.00007f4908414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5722.1.00007f4908400000.00007f4908414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5735.1.00007f4908400000.00007f4908414000.r-x.sdmpLinux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x11058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1106c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x110f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1110c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x1115c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x11198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x111e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Space.sh4.elf PID: 5722Linux_Trojan_Gafgyt_28a2fe0cunknownunknown
  • 0x43bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x43d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x43e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x43f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x440c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x445c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x44ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x44c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x44d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x44e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x44fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x4538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
  • 0x454c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Antivirus / Scanner detection for submitted sample
Source: Space.sh4.elfAvira: detected
Multi AV Scanner detection for submitted file
Source: Space.sh4.elfReversingLabs: Detection: 65%
Source: global trafficTCP traffic: 192.168.2.13:59058 -> 212.81.47.243:3778
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243
Source: unknownTCP traffic detected without corresponding DNS query: 212.81.47.243

System Summary

barindex
Malicious sample detected (through community Yara rule)
Source: Space.sh4.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5724.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5726.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5722.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5735.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5722, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5724, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5726, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Space.sh4.elf PID: 5735, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Initial sampleString containing 'busybox' found: /bin/busybox
Source: Initial sampleString containing 'busybox' found: /proc/net/tcp.x86.x86_64.arm.arm5.arm6.arm7.mips.mipsel.sh4.ppc/proc/proc/%d/exe/proc/%s/statusrName:%s/bin/busybox/bin/systemd/usr/bintest/tmp/condi/tmp/zxcr9999/tmp/condinetwork/var/condibot/var/zxcr9999/var/CondiBot/var/condinet/bin/watchdog212.81.47.243
Source: ELF static info symbol of initial sample.symtab present: no
Source: Space.sh4.elf, type: SAMPLEMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5724.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5726.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5722.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5735.1.00007f4908400000.00007f4908414000.r-x.sdmp, type: MEMORYMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5722, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5724, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5726, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Space.sh4.elf PID: 5735, type: MEMORYSTRMatched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: classification engineClassification label: mal64.linELF@0/0@0/0
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/230/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/110/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/231/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/111/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/232/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/112/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/233/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/113/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/234/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/114/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/235/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/115/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/236/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/116/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/237/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/117/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/238/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/118/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/239/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/119/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/3631/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/914/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/10/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/917/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/11/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/12/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/13/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/14/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/15/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/16/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/17/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/18/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/19/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/240/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/3095/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/120/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/241/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/121/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/242/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/122/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/243/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/2/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/123/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/244/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/3/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/124/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/245/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1588/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/125/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/4/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/246/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/126/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/5/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/247/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/127/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/6/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/248/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/128/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/7/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/249/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/129/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/8/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/800/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/9/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1906/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/802/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/803/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/20/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/5704/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/21/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/5705/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/22/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/23/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/24/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/25/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/26/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/27/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/28/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/29/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/3420/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1482/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/490/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1480/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/250/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/371/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/130/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/251/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/131/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/252/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/132/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/253/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/254/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1238/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/134/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/255/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/256/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/257/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/378/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/3413/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/258/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/259/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/1475/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/936/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)File opened: /proc/30/statusJump to behavior
Source: /tmp/Space.sh4.elf (PID: 5722)Queries kernel information via 'uname': Jump to behavior
Source: Space.sh4.elf, 5722.1.00007ffca5038000.00007ffca5059000.rw-.sdmp, Space.sh4.elf, 5724.1.00007ffca5038000.00007ffca5059000.rw-.sdmp, Space.sh4.elf, 5726.1.00007ffca5038000.00007ffca5059000.rw-.sdmp, Space.sh4.elf, 5735.1.00007ffca5038000.00007ffca5059000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
Source: Space.sh4.elf, 5722.1.00007ffca5038000.00007ffca5059000.rw-.sdmp, Space.sh4.elf, 5724.1.00007ffca5038000.00007ffca5059000.rw-.sdmp, Space.sh4.elf, 5726.1.00007ffca5038000.00007ffca5059000.rw-.sdmp, Space.sh4.elf, 5735.1.00007ffca5038000.00007ffca5059000.rw-.sdmpBinary or memory string: zx86_64/usr/bin/qemu-sh4/tmp/Space.sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Space.sh4.elf
Source: Space.sh4.elf, 5722.1.0000557749881000.000055774990b000.rw-.sdmp, Space.sh4.elf, 5724.1.0000557749881000.00005577498e4000.rw-.sdmp, Space.sh4.elf, 5726.1.0000557749881000.00005577498e4000.rw-.sdmp, Space.sh4.elf, 5735.1.0000557749881000.000055774990b000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4
Source: Space.sh4.elf, 5722.1.0000557749881000.000055774990b000.rw-.sdmp, Space.sh4.elf, 5724.1.0000557749881000.00005577498e4000.rw-.sdmp, Space.sh4.elf, 5726.1.0000557749881000.00005577498e4000.rw-.sdmp, Space.sh4.elf, 5735.1.0000557749881000.000055774990b000.rw-.sdmpBinary or memory string: IwU5!/etc/qemu-binfmt/sh4

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume Access1
OS Credential Dumping		11
Security Software Discovery		Remote ServicesData from Local System1
Non-Standard Port		Exfiltration Over Other Network MediumAbuse Accessibility Features

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1589124 Sample: Space.sh4.elf Startdate: 11/01/2025 Architecture: LINUX Score: 64 20 212.81.47.243, 3778, 59058, 59060 M247GB Germany 2->20 22 Malicious sample detected (through community Yara rule) 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 8 Space.sh4.elf 2->8         started        signatures3 process4 process5 10 Space.sh4.elf 8->10         started        12 Space.sh4.elf 8->12         started        14 Space.sh4.elf 8->14         started        process6 16 Space.sh4.elf 10->16         started        18 Space.sh4.elf 10->18         started       

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
Space.sh4.elf66%ReversingLabsLinux.Backdoor.Mirai
Space.sh4.elf100%AviraLINUX/Mirai.bonb

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Public IPs

IPDomainCountryFlagASNASN NameMalicious
212.81.47.243
unknownGermany
9009M247GBfalse

Joe Sandbox View / Context

IPs

MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
212.81.47.243Space.arm6.elfGet hashmaliciousUnknownBrowse
    Space.ppc.elfGet hashmaliciousUnknownBrowse
      Space.m68k.elfGet hashmaliciousMiraiBrowse
        Space.x86_64.elfGet hashmaliciousUnknownBrowse
          Space.arm7.elfGet hashmaliciousMiraiBrowse
            Space.x86.elfGet hashmaliciousUnknownBrowse

              Domains

              ⊘No context

              ASNs

              MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
              M247GBSpace.arm6.elfGet hashmaliciousUnknownBrowse
              • 212.81.47.243
              Space.ppc.elfGet hashmaliciousUnknownBrowse
              • 212.81.47.243
              Space.m68k.elfGet hashmaliciousMiraiBrowse
              • 212.81.47.243
              Space.x86_64.elfGet hashmaliciousUnknownBrowse
              • 212.81.47.243
              Space.arm7.elfGet hashmaliciousMiraiBrowse
              • 212.81.47.243
              Space.x86.elfGet hashmaliciousUnknownBrowse
              • 212.81.47.243
              ssd.elfGet hashmaliciousGafgytBrowse
              • 89.33.192.138
              ssp.elfGet hashmaliciousGafgytBrowse
              • 89.33.192.138
              sse.elfGet hashmaliciousGafgytBrowse
              • 89.33.192.138
              ssg.elfGet hashmaliciousMirai, GafgytBrowse
              • 89.33.192.138

              JA3 Fingerprints

              ⊘No context

              Dropped Files

              ⊘No context

              Created / dropped Files

              ⊘No created / dropped files found

              Static File Info

              General

              File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
              Entropy (8bit):6.603115368943742
              TrID:
              • ELF Executable and Linkable format (generic) (4004/1) 100.00%
              File name:Space.sh4.elf
              File size:82'652 bytes
              MD5:307be28cb9e55775f3c4fb52e73bfda8
              SHA1:11c9a89a14d33ff236e7814987c5afd1ec1556e5
              SHA256:bd5a5856a3a4d7865fd7f1c2fa789206a17e32ad2da3680ef7dc9c5e0158da35
              SHA512:378d3dae8c39ffe41d63bd261bc40f383bcfb84a741a087f49436a2d8ba8cfb5f87490f997f65d758edde5b4a6455d0b57901be147e69e249f44b8ccd58db7c4
              SSDEEP:1536:DWRU/uih+nyazXUcMnYVohwH5wX6SNmTdEyR4r:DR/F+nyazXenY66L5dRg
              TLSH:EE839E61F0142CE5C8660674F0F8ED35471369F123A52CB26EEEE9A188F368DF44AF94
              File Content Preview:.ELF..............*.......@.4...LA......4. ...(...............@...@.L4..L4...............@...@B..@B.0...............Q.td..............................././"O.n......#.*@........#.*@L...&O.n.l..................................././.../.a"O.!...n...a.b("...q.

              Static ELF Info

              ELF header

              Class:ELF32
              Data:2's complement, little endian
              Version:1 (current)
              Machine:<unknown>
              Version Number:0x1
              Type:EXEC (Executable file)
              OS/ABI:UNIX - System V
              ABI Version:0
              Entry Point Address:0x4001a0
              Flags:0xc
              ELF Header Size:52
              Program Header Offset:52
              Program Header Size:32
              Number of Program Headers:3
              Section Header Offset:82252
              Section Header Size:40
              Number of Section Headers:10
              Header String Table Index:9

              Sections

              NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
              NULL0x00x00x00x00x0000
              .initPROGBITS0x4000940x940x2e0x00x6AX004
              .textPROGBITS0x4000e00xe00x10e600x00x6AX0032
              .finiPROGBITS0x410f400x10f400x220x00x6AX004
              .rodataPROGBITS0x410f640x10f640x24e80x00x2A004
              .ctorsPROGBITS0x4240dc0x140dc0x80x00x3WA004
              .dtorsPROGBITS0x4240e40x140e40x80x00x3WA004
              .dataPROGBITS0x4240f00x140f00x1c0x00x3WA004
              .bssNOBITS0x42410c0x1410c0xaec0x00x3WA004
              .shstrtabSTRTAB0x00x1410c0x3e0x00x0001

              Program Segments

              TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
              LOAD0x00x4000000x4000000x1344c0x1344c6.77540x5R E0x10000.init .text .fini .rodata
              LOAD0x140dc0x4240dc0x4240dc0x300xb1c2.47110x6RW 0x10000.ctors .dtors .data .bss
              GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

              Network Behavior

              Network Port Distribution

              TCP Packets

              TimestampSource PortDest PortSource IPDest IP
              Jan 11, 2025 10:42:44.563035011 CET590583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:44.567907095 CET377859058212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:44.567974091 CET590583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:44.593971014 CET590583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:44.598836899 CET377859058212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:44.598890066 CET590583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:44.603692055 CET377859058212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:45.511589050 CET377859058212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:45.511845112 CET590583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:45.512043953 CET590583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:45.514271021 CET590603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:45.519073009 CET377859060212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:45.519336939 CET590603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:45.523341894 CET590603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:45.528096914 CET377859060212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:45.528141022 CET590603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:45.532913923 CET377859060212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:46.419075966 CET377859060212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:46.419214010 CET590603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:46.419281006 CET590603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:46.419929981 CET590623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:46.424751997 CET377859062212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:46.424834967 CET590623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:46.425513983 CET590623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:46.430283070 CET377859062212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:46.430330992 CET590623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:46.435080051 CET377859062212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:47.326785088 CET377859062212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:47.327076912 CET590623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:47.327076912 CET590623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:47.327866077 CET590643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:47.332678080 CET377859064212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:47.332725048 CET590643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:47.333766937 CET590643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:47.338507891 CET377859064212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:47.338552952 CET590643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:47.343357086 CET377859064212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:48.243757010 CET377859064212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:48.244108915 CET590643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:48.244108915 CET590643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:48.244885921 CET590663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:48.249703884 CET377859066212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:48.249757051 CET590663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:48.250821114 CET590663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:48.255595922 CET377859066212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:48.255644083 CET590663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:48.260454893 CET377859066212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:49.162782907 CET377859066212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:49.163064957 CET590663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:49.163064957 CET590663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:49.163858891 CET590683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:49.168785095 CET377859068212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:49.168848038 CET590683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:49.169913054 CET590683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:49.174742937 CET377859068212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:49.174793959 CET590683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:49.179568052 CET377859068212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.070928097 CET377859068212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.071168900 CET590683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.071263075 CET590683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.072091103 CET590703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.076956034 CET377859070212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.077056885 CET590703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.078113079 CET590703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.082926989 CET377859070212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.082977057 CET590703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.087775946 CET377859070212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.248851061 CET590723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.253834009 CET377859072212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.253896952 CET590723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.316127062 CET590723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.320938110 CET377859072212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.320986986 CET590723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.325758934 CET377859072212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.978816986 CET377859070212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.982275963 CET590703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.982276917 CET590703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.987138033 CET590743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:50.992012978 CET377859074212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:50.992067099 CET590743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.014218092 CET590743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.019042969 CET377859074212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.019090891 CET590743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.023893118 CET377859074212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.150001049 CET377859072212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.150427103 CET590723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.150666952 CET590723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.151846886 CET590763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.156673908 CET377859076212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.156939983 CET590763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.158548117 CET590763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.163479090 CET377859076212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.163599014 CET590763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.168497086 CET377859076212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.907293081 CET377859074212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.907635927 CET590743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.907635927 CET590743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.909230947 CET590783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.914072037 CET377859078212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.914410114 CET590783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.916162968 CET590783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.920914888 CET377859078212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:51.920974970 CET590783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:51.925733089 CET377859078212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.066463947 CET377859076212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.066684008 CET590763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.066783905 CET590763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.068279982 CET590803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.073260069 CET377859080212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.073334932 CET590803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.074862003 CET590803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.079701900 CET377859080212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.079776049 CET590803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.084587097 CET377859080212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.829183102 CET377859078212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.829366922 CET590783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.829446077 CET590783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.830749035 CET590823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.835675001 CET377859082212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.835773945 CET590823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.837127924 CET590823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.841941118 CET377859082212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.841995001 CET590823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.846838951 CET377859082212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.973778009 CET377859080212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.974004984 CET590803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.974005938 CET590803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.974751949 CET590843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.980421066 CET377859084212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.980484009 CET590843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.981496096 CET590843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.987018108 CET377859084212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:52.987071037 CET590843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:52.991842031 CET377859084212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.737611055 CET377859082212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.737818003 CET590823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.737946987 CET590823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.738930941 CET590863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.743833065 CET377859086212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.743916035 CET590863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.745317936 CET590863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.750091076 CET377859086212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.750161886 CET590863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.755029917 CET377859086212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.911326885 CET377859084212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.911457062 CET590843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.911528111 CET590843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.912312031 CET590883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.917112112 CET377859088212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.917196989 CET590883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.918634892 CET590883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.923506021 CET377859088212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:53.923573017 CET590883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:53.928395033 CET377859088212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.635236025 CET377859086212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.635493994 CET590863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.635493994 CET590863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.636666059 CET590903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.641489029 CET377859090212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.641546965 CET590903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.643311024 CET590903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.648202896 CET377859090212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.648258924 CET590903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.653944969 CET377859090212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.826658964 CET377859088212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.827001095 CET590883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.827060938 CET590883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.828305960 CET590923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.833201885 CET377859092212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.833273888 CET590923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.834539890 CET590923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.839370012 CET377859092212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:54.839448929 CET590923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:54.844284058 CET377859092212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.531565905 CET377859090212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.531706095 CET590903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.531764030 CET590903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.532881975 CET590943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.537929058 CET377859094212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.537992954 CET590943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.539017916 CET590943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.543809891 CET377859094212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.543860912 CET590943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.548691034 CET377859094212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.743026972 CET377859092212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.743166924 CET590923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.743275881 CET590923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.744278908 CET590963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.749149084 CET377859096212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.749211073 CET590963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.750221014 CET590963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.755054951 CET377859096212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:55.755114079 CET590963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:55.759911060 CET377859096212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.428546906 CET377859094212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.428761005 CET590943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.428832054 CET590943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.429881096 CET590983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.434775114 CET377859098212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.434829950 CET590983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.439292908 CET590983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.444075108 CET377859098212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.444124937 CET590983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.448874950 CET377859098212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.641967058 CET377859096212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.642222881 CET590963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.642222881 CET590963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.643151045 CET591003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.647978067 CET377859100212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.648053885 CET591003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.649144888 CET591003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.653934002 CET377859100212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:56.653980970 CET591003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:56.658793926 CET377859100212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.347887993 CET377859098212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.348012924 CET590983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.348098040 CET590983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.349173069 CET591023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.353955984 CET377859102212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.354113102 CET591023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.355577946 CET591023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.360359907 CET377859102212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.360433102 CET591023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.365308046 CET377859102212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.547266006 CET377859100212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.547560930 CET591003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.547933102 CET591003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.548935890 CET591043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.553740978 CET377859104212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.553802967 CET591043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.554897070 CET591043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.559698105 CET377859104212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:57.559746981 CET591043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:57.564526081 CET377859104212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.257167101 CET377859102212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.257302046 CET591023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.257344961 CET591023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.258235931 CET591063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.263036966 CET377859106212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.263128996 CET591063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.264694929 CET591063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.269543886 CET377859106212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.269614935 CET591063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.274527073 CET377859106212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.458781958 CET377859104212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.458893061 CET591043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.459132910 CET591043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.459884882 CET591083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.464751005 CET377859108212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.464840889 CET591083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.465857029 CET591083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.470647097 CET377859108212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:58.470736980 CET591083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:58.475541115 CET377859108212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.171030998 CET377859106212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.171538115 CET591063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.171538115 CET591063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.172369957 CET591103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.177314043 CET377859110212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.177407980 CET591103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.178519964 CET591103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.183414936 CET377859110212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.183487892 CET591103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.188465118 CET377859110212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.356781006 CET377859108212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.356986046 CET591083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.357239008 CET591083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.358426094 CET591123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.363352060 CET377859112212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.363421917 CET591123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.364790916 CET591123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.369582891 CET377859112212.81.47.243192.168.2.13
              Jan 11, 2025 10:42:59.369638920 CET591123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:42:59.374392986 CET377859112212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.072818995 CET377859110212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.073045015 CET591103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.073131084 CET591103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.074171066 CET591143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.079180002 CET377859114212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.079277039 CET591143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.080616951 CET591143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.085472107 CET377859114212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.085525990 CET591143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.090385914 CET377859114212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.266392946 CET377859112212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.266581059 CET591123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.266731977 CET591123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.267735958 CET591163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.273485899 CET377859116212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.273606062 CET591163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.275022984 CET591163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.280731916 CET377859116212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:00.280822992 CET591163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:00.286629915 CET377859116212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.011822939 CET377859114212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.012152910 CET591143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.012278080 CET591143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.013426065 CET591183778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.018261909 CET377859118212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.018341064 CET591183778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.019707918 CET591183778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.024518967 CET377859118212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.024584055 CET591183778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.029375076 CET377859118212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.211191893 CET377859116212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.211425066 CET591163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.211473942 CET591163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.212250948 CET591203778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.217070103 CET377859120212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.217211008 CET591203778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.218153954 CET591203778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.222954988 CET377859120212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.223036051 CET591203778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.227840900 CET377859120212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.923913002 CET377859118212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.924309015 CET591183778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.924309015 CET591183778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.925507069 CET591223778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.930356979 CET377859122212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.930439949 CET591223778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.931838036 CET591223778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.936618090 CET377859122212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:01.936731100 CET591223778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:01.941499949 CET377859122212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.119255066 CET377859120212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.119458914 CET591203778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.119460106 CET591203778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.120213032 CET591243778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.125056028 CET377859124212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.125174046 CET591243778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.126204014 CET591243778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.130970001 CET377859124212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.131043911 CET591243778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.135874987 CET377859124212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.826822042 CET377859122212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.827393055 CET591223778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.827393055 CET591223778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.828305006 CET591263778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.833174944 CET377859126212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.833260059 CET591263778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.834829092 CET591263778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.839612007 CET377859126212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:02.839675903 CET591263778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:02.844455004 CET377859126212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.035319090 CET377859124212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.035626888 CET591243778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.035754919 CET591243778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.036676884 CET591283778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.041479111 CET377859128212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.041567087 CET591283778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.042985916 CET591283778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.049262047 CET377859128212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.049335957 CET591283778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.054864883 CET377859128212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.757175922 CET377859126212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.757649899 CET591263778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.757649899 CET591263778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.758640051 CET591303778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.763501883 CET377859130212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.763621092 CET591303778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.764954090 CET591303778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.769776106 CET377859130212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.769854069 CET591303778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.774682045 CET377859130212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.940510035 CET377859128212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.940936089 CET591283778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.941009998 CET591283778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.941808939 CET591323778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.946639061 CET377859132212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.946716070 CET591323778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.947834015 CET591323778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.952670097 CET377859132212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:03.952733040 CET591323778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:03.957515001 CET377859132212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.668143988 CET377859130212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.668544054 CET591303778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.668545008 CET591303778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.669965982 CET591343778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.674832106 CET377859134212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.674962997 CET591343778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.676585913 CET591343778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.681412935 CET377859134212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.681499958 CET591343778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.686364889 CET377859134212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.843583107 CET377859132212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.843949080 CET591323778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.843949080 CET591323778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.844580889 CET591363778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.849565983 CET377859136212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.849627018 CET591363778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.850481033 CET591363778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.855278969 CET377859136212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:04.855355978 CET591363778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:04.860419035 CET377859136212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.638597012 CET377859134212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.638814926 CET591343778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.638900995 CET591343778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.639854908 CET591383778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.644706011 CET377859138212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.644778013 CET591383778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.646073103 CET591383778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.650826931 CET377859138212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.650871992 CET591383778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.655874968 CET377859138212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.812263966 CET377859136212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.812589884 CET591363778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.812655926 CET591363778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.813714027 CET591403778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.818686962 CET377859140212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.818761110 CET591403778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.820132971 CET591403778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.824928045 CET377859140212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:05.824992895 CET591403778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:05.829828024 CET377859140212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.610471010 CET377859138212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.610754967 CET591383778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.610755920 CET591383778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.611747980 CET591423778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.616559982 CET377859142212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.616652012 CET591423778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.618257046 CET591423778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.623087883 CET377859142212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.623256922 CET591423778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.627994061 CET377859142212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.806997061 CET377859140212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.807233095 CET591403778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.807233095 CET591403778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.808234930 CET591443778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.813153028 CET377859144212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.813443899 CET591443778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.814526081 CET591443778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.819329977 CET377859144212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:06.819396973 CET591443778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:06.824229002 CET377859144212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.725089073 CET377859142212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.725435972 CET591423778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.725528955 CET591423778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.727216005 CET591463778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.732141972 CET377859146212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.732249022 CET591463778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.733789921 CET591463778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.738627911 CET377859146212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.738730907 CET591463778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.743482113 CET377859146212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.919548988 CET377859144212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.919964075 CET591443778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.920061111 CET591443778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.921353102 CET591483778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.926168919 CET377859148212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.926287889 CET591483778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.927541018 CET591483778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.932360888 CET377859148212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:07.932445049 CET591483778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:07.937271118 CET377859148212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:08.817926884 CET377859146212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:08.818434954 CET591463778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:08.818434954 CET591463778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:08.819427013 CET591503778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:08.824306011 CET377859150212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:08.824390888 CET591503778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:08.825692892 CET591503778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:08.830506086 CET377859150212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:08.830565929 CET591503778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:08.835329056 CET377859150212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.014712095 CET377859148212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.014847994 CET591483778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.014919043 CET591483778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.015970945 CET591523778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.020889044 CET377859152212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.020988941 CET591523778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.021800041 CET591523778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.026849031 CET377859152212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.026901007 CET591523778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.031728029 CET377859152212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.913374901 CET377859150212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.913628101 CET591503778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.913690090 CET591503778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.914701939 CET591543778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.919576883 CET377859154212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.919651985 CET591543778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.920891047 CET591543778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.925656080 CET377859154212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:09.925703049 CET591543778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:09.930505037 CET377859154212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:10.108556986 CET377859152212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:10.108676910 CET591523778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:10.108732939 CET591523778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:10.109329939 CET591563778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:10.114147902 CET377859156212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:10.114213943 CET591563778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:10.115197897 CET591563778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:10.120017052 CET377859156212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:10.120070934 CET591563778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:10.124896049 CET377859156212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.019844055 CET377859154212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.019988060 CET591543778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.020047903 CET591543778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.020908117 CET591583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.025758028 CET377859158212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.025840998 CET591583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.026956081 CET591583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.031769991 CET377859158212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.031822920 CET591583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.036624908 CET377859158212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.213135004 CET377859156212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.213486910 CET591563778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.213627100 CET591563778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.214435101 CET591603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.219721079 CET377859160212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.219790936 CET591603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.221111059 CET591603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.227519035 CET377859160212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:11.227588892 CET591603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:11.232695103 CET377859160212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.108472109 CET377859158212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.108680964 CET591583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.108736992 CET591583778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.109839916 CET591623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.114712954 CET377859162212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.114789963 CET591623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.116024971 CET591623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.120861053 CET377859162212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.120922089 CET591623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.125757933 CET377859162212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.311537027 CET377859160212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.311642885 CET591603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.311749935 CET591603778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.312249899 CET591643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.317049026 CET377859164212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.317128897 CET591643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.318243980 CET591643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.323097944 CET377859164212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:12.323144913 CET591643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:12.327949047 CET377859164212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.221770048 CET377859162212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.222085953 CET591623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.222085953 CET591623778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.222820997 CET591663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.227618933 CET377859166212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.227720022 CET591663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.228965044 CET591663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.233742952 CET377859166212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.233803988 CET591663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.238642931 CET377859166212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.424222946 CET377859164212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.424391985 CET591643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.424514055 CET591643778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.425384045 CET591683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.430216074 CET377859168212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.430265903 CET591683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.431247950 CET591683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.436101913 CET377859168212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:13.436199903 CET591683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:13.441008091 CET377859168212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.319693089 CET377859166212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.319864035 CET591663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.319972992 CET591663778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.320831060 CET591703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.334477901 CET377859170212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.334552050 CET591703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.335804939 CET591703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.340589046 CET377859170212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.340665102 CET591703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.345489979 CET377859170212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.516886950 CET377859168212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.517035007 CET591683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.517085075 CET591683778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.518111944 CET591723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.522975922 CET377859172212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.523060083 CET591723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.524152040 CET591723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.528974056 CET377859172212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:14.529031992 CET591723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:14.533824921 CET377859172212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.412627935 CET377859170212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.412786007 CET591703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.412874937 CET591703778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.413841963 CET591743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.418762922 CET377859174212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.418837070 CET591743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.419956923 CET591743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.424768925 CET377859174212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.424844980 CET591743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.429663897 CET377859174212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.628741980 CET377859172212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.629029036 CET591723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.629110098 CET591723778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.630089998 CET591763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.634955883 CET377859176212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.635054111 CET591763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.636174917 CET591763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.640995026 CET377859176212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:15.641084909 CET591763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:15.645963907 CET377859176212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.518775940 CET377859174212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.519058943 CET591743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.519187927 CET591743778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.520595074 CET591783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.525430918 CET377859178212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.525527954 CET591783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.527091026 CET591783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.531871080 CET377859178212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.531940937 CET591783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.536786079 CET377859178212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.709224939 CET377859176212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.709367037 CET591763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.709518909 CET591763778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.710649967 CET591803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.715526104 CET377859180212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.715605021 CET591803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.716568947 CET591803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.721409082 CET377859180212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:16.721476078 CET591803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:16.726239920 CET377859180212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.609539986 CET377859178212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.609718084 CET591783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.609802961 CET591783778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.610805988 CET591823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.615691900 CET377859182212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.615751028 CET591823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.616580009 CET591823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.621341944 CET377859182212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.621426105 CET591823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.626188040 CET377859182212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.820838928 CET377859180212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.820967913 CET591803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.821249962 CET591803778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.821919918 CET591843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.826826096 CET377859184212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.826895952 CET591843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.827608109 CET591843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.832474947 CET377859184212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:17.832528114 CET591843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:17.837362051 CET377859184212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.621021986 CET377859182212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.621440887 CET591823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.621440887 CET591823778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.622512102 CET591863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.627439976 CET377859186212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.627520084 CET591863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.628788948 CET591863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.633584023 CET377859186212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.633637905 CET591863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.638412952 CET377859186212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.735847950 CET377859184212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.736234903 CET591843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.736234903 CET591843778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.736785889 CET591883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.741683960 CET377859188212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.741754055 CET591883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.742691994 CET591883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.747564077 CET377859188212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:18.747617960 CET591883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:18.752381086 CET377859188212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.531469107 CET377859186212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.531918049 CET591863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.531918049 CET591863778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.533041000 CET591903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.537866116 CET377859190212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.538003922 CET591903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.540007114 CET591903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.544826031 CET377859190212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.545425892 CET591903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.550204992 CET377859190212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.663194895 CET377859188212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.663496017 CET591883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.663496017 CET591883778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.664387941 CET591923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.669193029 CET377859192212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.669298887 CET591923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.670058966 CET591923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.674808025 CET377859192212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:19.674890995 CET591923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:19.679765940 CET377859192212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.440888882 CET377859190212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.441236973 CET591903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.441236973 CET591903778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.442404032 CET591943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.447349072 CET377859194212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.447443962 CET591943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.448815107 CET591943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.453665018 CET377859194212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.453721046 CET591943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.458517075 CET377859194212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.565063953 CET377859192212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.565282106 CET591923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.565331936 CET591923778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.566298008 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.571185112 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.571304083 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.572448015 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.577239037 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:20.577306032 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:20.582067966 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:21.352231979 CET377859194212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:21.352520943 CET591943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:21.352520943 CET591943778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:21.353555918 CET591983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:21.358405113 CET377859198212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:21.358488083 CET591983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:21.359875917 CET591983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:21.364635944 CET377859198212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:21.364691019 CET591983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:21.369554996 CET377859198212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:22.273828030 CET377859198212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:22.274000883 CET591983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:22.274039984 CET591983778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:22.275161982 CET592003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:22.280026913 CET377859200212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:22.280129910 CET592003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:22.281411886 CET592003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:22.286241055 CET377859200212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:22.286303043 CET592003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:22.291146994 CET377859200212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:23.174027920 CET377859200212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:23.174240112 CET592003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:23.174240112 CET592003778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:23.175404072 CET592023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:23.180233955 CET377859202212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:23.180329084 CET592023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:23.181762934 CET592023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:23.186518908 CET377859202212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:23.186589956 CET592023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:23.191746950 CET377859202212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:24.075472116 CET377859202212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:24.075752974 CET592023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:24.075752974 CET592023778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:24.077187061 CET592043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:24.082061052 CET377859204212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:24.082159042 CET592043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:24.083708048 CET592043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:24.088512897 CET377859204212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:24.088583946 CET592043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:24.093346119 CET377859204212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.012933969 CET377859204212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.013081074 CET592043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.013123035 CET592043778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.013758898 CET592063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.018594980 CET377859206212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.018662930 CET592063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.019500017 CET592063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.024291039 CET377859206212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.024348021 CET592063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.029078960 CET377859206212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.931241035 CET377859206212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.931555033 CET592063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.931555033 CET592063778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.932763100 CET592083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.937542915 CET377859208212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.937638998 CET592083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.939032078 CET592083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.944633007 CET377859208212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:25.944710970 CET592083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:25.950213909 CET377859208212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:26.829940081 CET377859208212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:26.830249071 CET592083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:26.830249071 CET592083778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:26.831664085 CET592103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:26.836512089 CET377859210212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:26.836601019 CET592103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:26.838149071 CET592103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:26.842947006 CET377859210212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:26.843017101 CET592103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:26.847785950 CET377859210212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:27.728190899 CET377859210212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:27.728598118 CET592103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:27.728669882 CET592103778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:27.729753017 CET592123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:27.734654903 CET377859212212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:27.734776974 CET592123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:27.736217022 CET592123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:27.741024971 CET377859212212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:27.741097927 CET592123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:27.746038914 CET377859212212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:28.635287046 CET377859212212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:28.635504961 CET592123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:28.635593891 CET592123778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:28.636620045 CET592143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:28.641469002 CET377859214212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:28.641531944 CET592143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:28.642855883 CET592143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:28.647689104 CET377859214212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:28.647730112 CET592143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:28.652615070 CET377859214212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:29.554181099 CET377859214212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:29.554465055 CET592143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:29.554465055 CET592143778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:29.555517912 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:29.560326099 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:29.560410023 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:29.561927080 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:29.566690922 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:29.567157030 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:29.572029114 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:30.583272934 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:30.588131905 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:30.913361073 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:30.913542986 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:39.572113037 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:43:39.576893091 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:40.010976076 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:43:40.011274099 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:30.972213984 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:31.181735039 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:31.393796921 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:31.837850094 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:31.865468979 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:32.043916941 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:32.043947935 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:32.044003010 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:32.212929964 CET377859196212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:32.213223934 CET591963778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:40.072619915 CET592163778192.168.2.13212.81.47.243
              Jan 11, 2025 10:44:40.077708960 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:40.411863089 CET377859216212.81.47.243192.168.2.13
              Jan 11, 2025 10:44:40.412179947 CET592163778192.168.2.13212.81.47.243

              System Behavior

              General

              Start time (UTC):09:42:43
              Start date (UTC):11/01/2025
              Path:/tmp/Space.sh4.elf
              Arguments:/tmp/Space.sh4.elf
              File size:4139976 bytes
              MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

              Chronological Activities


              General

              Start time (UTC):09:42:43
              Start date (UTC):11/01/2025
              Path:/tmp/Space.sh4.elf
              Arguments:-
              File size:4139976 bytes
              MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

              Chronological Activities


              General

              Start time (UTC):09:42:43
              Start date (UTC):11/01/2025
              Path:/tmp/Space.sh4.elf
              Arguments:-
              File size:4139976 bytes
              MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

              Chronological Activities


              General

              Start time (UTC):09:42:43
              Start date (UTC):11/01/2025
              Path:/tmp/Space.sh4.elf
              Arguments:-
              File size:4139976 bytes
              MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

              Chronological Activities


              General

              Start time (UTC):09:42:49
              Start date (UTC):11/01/2025
              Path:/tmp/Space.sh4.elf
              Arguments:-
              File size:4139976 bytes
              MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

              Chronological Activities


              General

              Start time (UTC):09:42:49
              Start date (UTC):11/01/2025
              Path:/tmp/Space.sh4.elf
              Arguments:-
              File size:4139976 bytes
              MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

              Chronological Activities