Edit tour

Linux Analysis Report
byte.x86.elf

Overview

General Information

Sample name:	byte.x86.elf
Analysis ID:	1589767
MD5:	a2451f6bd0eb6b177d5f40d71e0e4059
SHA1:	fc3baa30b559b41ce64fef7eda787f37bb43077e
SHA256:	898aabc9633231e530c8a5ce539c80b11535aacbc9f28740cf42016eee0fc787
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Sample tries to kill a massive number of system processes

Yara detected Mirai

Yara detected Okiru

Machine Learning detection for sample

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads the 'hosts' file potentially containing internal network hosts

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589767
Start date and time:	2025-01-13 05:51:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	byte.x86.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/11@147/0

Warnings

Connection to analysis system has been lost, crash info: Unknown

Process Tree

system is lnxubuntu20

byte.x86.elf (PID: 6237, Parent: 6162, MD5: a2451f6bd0eb6b177d5f40d71e0e4059) Arguments: /tmp/byte.x86.elf

byte.x86.elf New Fork (PID: 6238, Parent: 6237)

byte.x86.elf New Fork (PID: 6239, Parent: 6237)

byte.x86.elf New Fork (PID: 6240, Parent: 6237)

byte.x86.elf New Fork (PID: 6241, Parent: 6240)

byte.x86.elf New Fork (PID: 6242, Parent: 6240)

systemd New Fork (PID: 6251, Parent: 1)

dbus-daemon (PID: 6251, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6277, Parent: 1860)

pulseaudio (PID: 6277, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6278, Parent: 1)

rsyslogd (PID: 6278, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6279, Parent: 2038)

fusermount (PID: 6279, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6287, Parent: 1)

dbus-daemon (PID: 6287, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6291, Parent: 1)

dbus-daemon (PID: 6291, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6292, Parent: 1)

rsyslogd (PID: 6292, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6294, Parent: 1860)

pulseaudio (PID: 6294, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

gdm3 New Fork (PID: 6299, Parent: 1320)

Default (PID: 6299, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6300, Parent: 1320)

Default (PID: 6300, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6301, Parent: 1)

dbus-daemon (PID: 6301, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 6302, Parent: 1320)

Default (PID: 6302, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6303, Parent: 1860)

pulseaudio (PID: 6303, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6304, Parent: 1)

rsyslogd (PID: 6304, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6306, Parent: 1)

dbus-daemon (PID: 6306, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6307, Parent: 1860)

pulseaudio (PID: 6307, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6308, Parent: 1)

rsyslogd (PID: 6308, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6316, Parent: 1860)

pulseaudio (PID: 6316, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6317, Parent: 1)

rsyslogd (PID: 6317, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6322, Parent: 1)

gpu-manager (PID: 6322, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6323, Parent: 6322)

sh (PID: 6323, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6324, Parent: 6323)

grep (PID: 6324, Parent: 6323, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6325, Parent: 6322)

sh (PID: 6325, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6326, Parent: 6325)

grep (PID: 6326, Parent: 6325, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6327, Parent: 6322)

sh (PID: 6327, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6328, Parent: 6327)

grep (PID: 6328, Parent: 6327, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6329, Parent: 6322)

sh (PID: 6329, Parent: 6322, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6330, Parent: 6329)

grep (PID: 6330, Parent: 6329, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6331, Parent: 1)

generate-config (PID: 6331, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6332, Parent: 6331)

pkill (PID: 6332, Parent: 6331, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6335, Parent: 1)

gpu-manager (PID: 6335, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6336, Parent: 1)

generate-config (PID: 6336, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6337, Parent: 6336)

pkill (PID: 6337, Parent: 6336, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6338, Parent: 1)

gpu-manager (PID: 6338, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6341, Parent: 6338)

sh (PID: 6341, Parent: 6338, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6342, Parent: 6341)

grep (PID: 6342, Parent: 6341, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6343, Parent: 6338)

sh (PID: 6343, Parent: 6338, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6344, Parent: 6343)

grep (PID: 6344, Parent: 6343, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6345, Parent: 6338)

sh (PID: 6345, Parent: 6338, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6346, Parent: 6345)

grep (PID: 6346, Parent: 6345, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6347, Parent: 6338)

sh (PID: 6347, Parent: 6338, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6348, Parent: 6347)

grep (PID: 6348, Parent: 6347, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6349, Parent: 6338)

sh (PID: 6349, Parent: 6338, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 6350, Parent: 1)

generate-config (PID: 6350, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6351, Parent: 1)

gpu-manager (PID: 6351, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6352, Parent: 1)

generate-config (PID: 6352, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6353, Parent: 6352)

pkill (PID: 6353, Parent: 6352, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6354, Parent: 1)

gpu-manager (PID: 6354, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6355, Parent: 1)

generate-config (PID: 6355, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6359, Parent: 1)

gpu-manager (PID: 6359, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6360, Parent: 1)

generate-config (PID: 6360, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6361, Parent: 1)

gpu-manager (PID: 6361, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6362, Parent: 1)

generate-config (PID: 6362, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6363, Parent: 1)

gpu-manager (PID: 6363, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6364, Parent: 1)

generate-config (PID: 6364, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6365, Parent: 1)

gpu-manager (PID: 6365, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 6366, Parent: 1)

generate-config (PID: 6366, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6369, Parent: 1)

generate-config (PID: 6369, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

systemd New Fork (PID: 6370, Parent: 1)

plymouth (PID: 6370, Parent: 1, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: /bin/plymouth quit

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
byte.x86.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
byte.x86.elf	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
byte.x86.elf	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
byte.x86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
byte.x86.elf	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
byte.x86.elf	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
byte.x86.elf	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
byte.x86.elf	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
byte.x86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
byte.x86.elf	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
byte.x86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
byte.x86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
byte.x86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
byte.x86.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdb0:$s1: LCOGQGPTGP
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6239.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
6239.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6239.1.0000000008048000.000000000805a000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdb0:$s1: LCOGQGPTGP
6242.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
6242.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
6237.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
6237.1.0000000008048000.000000000805a000.r-x.sdmp	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x11aa:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x7180:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x1235:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x10db:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1d01:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1de1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1eb6:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2161:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x25e3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0xff3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x96e2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x2ff2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xccab:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xb5b0:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x96b2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6242.1.0000000008048000.000000000805a000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdb0:$s1: LCOGQGPTGP
6237.1.0000000008048000.000000000805a000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xea80:$x1: POST /cdn-cgi/ 0xfdb0:$s1: LCOGQGPTGP
Process Memory Space: byte.x86.elf PID: 6237	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: byte.x86.elf PID: 6237	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
Process Memory Space: byte.x86.elf PID: 6239	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: byte.x86.elf PID: 6239	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
Process Memory Space: byte.x86.elf PID: 6242	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: byte.x86.elf PID: 6242	JoeSecurity_Mirai_9	Yara detected Mirai	Joe Security
Click to see the 43 entries

String: byte/proc//proc/%s/exe/proc/self/exe/proc/proc/%d/cmdlinenetstatwgettftpcurlreboot/bin/busyboxvar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdvar/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemdshellmnt/sys/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/soraJoshohajime902i13BzSxLxBxeYHOHO-LUGO7HOHO-U79OLJuYfouyf87NiGGeR69xdSO190Ij1XLOLKIKEEEDDEekjheory98escansh4MDMAfdevalvexscanspcMELTEDNINJAREALZflexsonskidsscanx86MISAKI-U79OLfoAxi102kxeswodjwodjwojMmKiy7f87lfreecookiex86sysgpufrgegesysupdater0DnAzepdNiGGeRD0nks69frgreu0x766f6964NiGGeRd0nks1337gafturasgbsigboa120i3UI49OaF3geaevaiolmao123123aOfurain0n4H34DggTrexewwasads1293194hjXDOthLaLosnggtwget-log1337SoraLOADERSAIAKINAggtq1378bfp919GRB1Q2SAIAKUSOggtr14FaSEXSLAVE1337ggtt1902a3u912u3u4haetrghbr19ju3dSORAojkf120hehahejeje922U2JDJA901F91SlaVLav12helpmedaddthhhhh2wgg9qphbqSlav3Th3seD3viceshzSmYZjYMQ5GbfSoRAxD123LOLiaGv5aA3SoRAxD420LOLinsomni640277SoraBeReppin1337ipcamCache66tlGg9QjUYfouyf876ke3TOKYO3lyEeaXul2dULCVxh93OfjHZ2zTY2gD6MZvKc7KU6rmMkiy6f87lA023UU4U24UIUTheWeekndmioribitchesA5p9TheWeekndsmnblkjpoiAbAdTokyosnebAkiruU8inTznetstatsAlexW9RCAKM20TnewnetwordAyo215WordnloadsWordmanenotyakuzaaBelchWordnetsobpBigN0gg0r420X0102I34fofhasfhiafhoiX19I239124UIUoismXSHJEHHEIIHWOolsVNwo12DeportedDeportedXkTer0GbA1onry0v03FortniteDownLOLZY0urM0mGaypussyfartlmaojkGrAcEnIgGeRaNnYvdGkqndCOqGeoRBe6BEGuiltyCrownZEuS69s4beBsEQhdHOHO-KSNDOZEuz69sat1234aj93hJ23scanHAalie293z0k2LscanJoshoARMHellInSideayyyGangShitscanJoshoARM5HighFryb1glscanJoshoARM6IWhPyucDbJboatnetzscanJoshoARM7IuYgujeIqnbtbatrtahzexsexscanJoshoM68KJJDUHEWBBBIBscanJoshoMIPSJSDGIEVIVAVIGcKbVkzGOPascanJoshoMPSLccADscanJoshoPPCKAZEN-OIU97chickenxingsscanJoshoSH4yakuskzm8KAZEN-PO78HcleanerscanJoshoSPCKAZEN-U79OLdbeefscanJoshoX86yakuz4c24KETASHI32ddrwelperscanarm5zPnr6HpQj2Kaishi-Iz90Ydeexecscanarm6zdrtfxcgyKatrina32doCP3fVjscanarm7zxcfhuioKsif91je39scanm68kKuasadvrhelperl33t_feetl33tl33tfeetscanmipsKuasaBinsMateeQnOhRk85rscanmpslLOLHHHOHOHBUIeXK20CL12ZnyamezyQBotBladeSPOOKYhikariwasherep4029x91xx32uhj4gbejhwizardzhra.outboatnetcondiheroshimaskid.dbglzrdPownedSecurity69.aresfxlyazsxhyUNSTABLEmoobotjnsd9sdoilayourmomgaeissdfjiougsiojOasisSEGRJIJHFVNHSNHEIHFOSapep999KOWAI-BAdAsVKOWAI-SADjHKipU7Ylairdropmalwareyour_verry_fucking_gayBig-Bro-Brightsefaexecshirololieagle.For-Gai-Mezy0x6axNLcloqkisvspookymythSwergjmioGKILLEJW(IU(JIWERGFJGJWJRGHetrhwewrtheIuFdKssCxzjSDFJIjioOnrYoXd666ewrtkjokethajbdf89wu823AAaasrdgsWsGA4@F6FGhostWuzHere666BOGOMIPSbeastmodedvrHelperbestmodesfc6aJfIuYDemon.xeno-is-godICY-P-0ODIJgSHUIHIfhwrgLhu87VhvQPzlunadakuexecbinTacoBellGodYololigangExecutionorbitclientAmnesiaOwariUnHAnaAWz3hirobbomiorieagledoxxRollielessie.hax.yakuzawordminerminerwordSinixV4hohog0dbu7tuorphicfurasshuhorizonassailantAresKawaiihelperECHOBOTDEMONS

Source: global traffic

TCP traffic: 192.168.2.23:39078 -> 193.143.1.66:2222

Source: /usr/sbin/rsyslogd (PID: 6278)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6292)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6304)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6308)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6317)	Reads hosts file: /etc/hosts	Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42

Source: global traffic

DNS traffic detected: DNS query: vbtgsze.r-e.kr

Source: syslog.61.dr, syslog.35.dr, syslog.55.dr, syslog.23.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: byte.x86.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth

Sample tries to kill a massive number of system processes

Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 141, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 144, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 157, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 201, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 208, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 210, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 211, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 212, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 213, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 214, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 215, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 217, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 218, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 281, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 286, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 333, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 346, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 379, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 658, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 667, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 670, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 675, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 677, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 720, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 721, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 772, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 777, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 785, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 793, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent to PID below 1000: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 141, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 144, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 157, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 201, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 208, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 210, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 211, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 212, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 213, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 214, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 215, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 217, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 218, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 281, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 286, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 333, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 346, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 379, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 658, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 667, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 670, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 675, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 677, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 720, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 772, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 785, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 793, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent to PID below 1000: pid: 936, result: successful	Jump to behavior

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 141, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 144, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 157, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 201, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 208, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 210, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 211, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 212, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 213, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 214, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 215, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 217, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 218, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 281, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 286, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 333, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 346, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 379, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 667, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 670, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 675, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 677, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2746, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2749, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2761, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2882, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 3021, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 3088, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4443, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4444, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4445, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4446, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4477, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4483, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4485, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4489, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6277, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6292, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6294, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6336, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6350, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6351, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 141, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 144, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 157, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 201, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 208, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 210, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 211, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 212, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 213, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 214, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 215, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 217, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 218, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 281, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 286, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 333, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 346, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 379, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 667, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 670, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 675, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 677, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 785, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2746, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2749, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2761, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2882, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 3021, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 3088, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4443, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4444, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4445, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4446, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4477, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4483, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4485, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4489, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6278, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6287, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6301, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6305, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6332, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6351, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: busyboxxx
Source: Initial sample	String containing 'busybox' found: busyboxx
Source: Initial sample	String containing 'busybox' found: byte/proc//proc/%s/exe/proc/self/exe/proc/proc/%d/cmdlinenetstatwgettftpcurlreboot/bin/busyboxvar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdvar/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemdshellmnt/sys/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/soraJoshohajime902i13BzSxLxBxeYHOHO-LUGO7HOHO-U79OLJuYfouyf87NiGGeR69xdSO190Ij1XLOLKIKEEEDDEekjheory98escansh4MDMAfdevalvexscanspcMELTEDNINJAREALZflexsonskidsscanx86MISAKI-U79OLfoAxi102kxeswodjwodjwojMmKiy7f87lfreecookiex86sysgpufrgegesysupdater0DnAzepdNiGGeRD0nks69frgreu0x766f6964NiGGeRd0nks1337gafturasgbsigboa120i3UI49OaF3geaevaiolmao123123aOfurain0n4H34DggTrexewwasads1293194hjXDOthLaLosnggtwget-log1337SoraLOADERSAIAKINAggtq1378bfp919GRB1Q2SAIAKUSOggtr14FaSEXSLAVE1337ggtt1902a3u912u3u4haetrghbr19ju3dSORAojkf120hehahejeje922U2JDJA901F91SlaVLav12

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 141, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 144, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 157, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 201, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 208, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 210, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 211, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 212, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 213, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 214, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 215, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 217, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 218, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 281, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 286, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 333, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 346, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 379, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 667, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 670, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 675, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 677, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2746, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2749, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2761, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 2882, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 3021, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 3088, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4443, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4444, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4445, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4446, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4477, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4483, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4485, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 4489, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6277, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6292, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6293, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6294, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6306, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6308, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6309, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6336, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6350, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6238)	SIGKILL sent: pid: 6351, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1 (init), result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 3, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 9, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 10, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 11, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 12, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 13, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 14, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 15, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 16, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 17, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 18, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 20, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 21, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 22, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 23, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 24, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 25, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 26, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 27, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 28, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 29, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 30, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 35, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 77, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 78, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 79, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 80, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 81, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 82, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 83, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 84, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 85, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 88, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 89, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 91, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 92, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 93, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 94, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 95, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 96, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 97, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 98, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 99, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 100, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 101, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 102, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 103, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 104, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 105, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 106, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 107, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 108, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 109, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 110, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 111, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 112, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 113, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 114, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 115, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 116, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 117, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 118, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 119, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 120, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 121, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 122, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 123, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 124, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 125, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 126, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 127, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 128, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 130, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 132, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 141, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 144, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 157, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 201, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 202, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 203, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 204, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 205, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 206, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 208, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 209, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 210, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 211, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 212, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 213, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 214, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 215, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 216, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 217, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 218, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 219, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 221, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 222, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 223, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 224, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 225, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 226, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 227, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 228, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 229, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 230, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 231, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 232, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 233, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 234, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 235, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 236, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 237, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 243, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 248, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 249, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 250, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 252, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 253, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 254, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 255, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 256, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 257, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 258, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 259, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 260, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 261, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 262, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 263, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 264, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 265, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 266, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 267, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 269, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 270, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 272, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 274, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 278, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 281, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 286, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 322, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 324, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 326, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 327, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 328, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 333, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 346, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 379, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 419, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 420, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 667, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 670, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 674, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 675, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 676, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 677, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 785, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1207, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1601, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2746, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2749, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2761, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 2882, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 3021, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 3088, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4443, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4444, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4445, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4446, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4477, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4483, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4485, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 4489, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6220, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6251, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6278, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6287, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6301, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6303, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6304, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6305, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6316, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6317, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6318, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6332, result: no such process	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6338, result: successful	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	SIGKILL sent: pid: 6351, result: successful	Jump to behavior

Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: byte.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: byte.x86.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/11@147/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6251)	File: /proc/6251/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6279)	File: /proc/6279/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6287)	File: /proc/6287/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6291)	File: /proc/6291/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6301)	File: /proc/6301/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6306)	File: /proc/6306/mounts	Jump to behavior

Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6348/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6347/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6241/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6240/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6245/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6247/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6246/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6238/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6252/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6251/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6254/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6253/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6256/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6255/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6258/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6257/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6250/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/379/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6249/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6248/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6263/cmdline	Jump to behavior
Source: /tmp/byte.x86.elf (PID: 6241)	File opened: /proc/6262/cmdline	Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6323)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6325)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6327)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6329)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6341)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6343)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6345)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6347)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6349)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior

Source: /bin/sh (PID: 6324)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6326)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6328)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6330)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6342)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6344)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6346)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6348)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior

Source: /usr/share/gdm/generate-config (PID: 6332)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6337)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6353)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 6278)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6278)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6292)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6292)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6308)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6308)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6317)	Log file created: /var/log/kern.log	Jump to dropped file

Source: /usr/bin/gpu-manager (PID: 6322)	Truncated file: /var/log/gpu-manager.log			Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6338)	Truncated file: /var/log/gpu-manager.log			Jump to behavior

Source: /usr/bin/pkill (PID: 6332)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6337)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6353)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior

Source: /usr/sbin/rsyslogd (PID: 6278)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6292)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6304)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6308)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6317)	Queries kernel information via 'uname':	Jump to behavior

Source: syslog.23.dr	Binary or memory string: Jan 12 22:51:55 galassia kernel: [ 418.895429] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase
Source: syslog.23.dr	Binary or memory string: Jan 12 22:51:54 galassia /usr/lib/gdm3/gdm-x-session[1890]: (II) vmware(0): Terminating Xv video-stream id:0
Source: syslog.23.dr	Binary or memory string: Jan 12 22:51:55 galassia kernel: [ 418.895453] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6237, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6239, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6242, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6237, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6239, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6242, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6237, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6239, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6242, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: byte.x86.elf, type: SAMPLE
Source: Yara match	File source: 6239.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6242.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6237.1.0000000008048000.000000000805a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6237, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6239, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: byte.x86.elf PID: 6242, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	2 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Indicator Removal	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
byte.x86.elf	74%	ReversingLabs	Linux.Exploit.Mirai
byte.x86.elf	66%	Virustotal		Browse
byte.x86.elf	100%	Avira	EXP/ELF.Mirai.M
byte.x86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vbtgsze.r-e.kr	193.143.1.66	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.61.dr, syslog.35.dr, syslog.55.dr, syslog.23.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
193.143.1.66	vbtgsze.r-e.kr	unknown	57271	BITWEB-ASRU	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
193.143.1.66	dlr.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	/bins/byte.arm6
193.143.1.66	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	/bins/byte.x86
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	na.elf	Get hash	malicious	Prometei	Browse
	byte.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse
	byte.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse
	byte.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse
	byte.spc.elf	Get hash	malicious	Mirai, Okiru	Browse
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse
	spc.elf	Get hash	malicious	Unknown	Browse
	harm.elf	Get hash	malicious	Unknown	Browse
	arm6.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
vbtgsze.r-e.kr	byte.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.arm.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.spc.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	dlr.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	dlr.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	byte.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	byte.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	byte.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	byte.spc.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	harm.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
INIT7CH	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	byte.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	byte.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	byte.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	byte.spc.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	spc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	harm.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
BITWEB-ASRU	byte.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.mpsl.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.arm.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.ppc.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.spc.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	byte.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	193.143.1.66
	https://tillingov.com/	Get hash	malicious	Unknown	Browse	193.143.1.161
	281388015101323984.js	Get hash	malicious	Strela Downloader	Browse	193.143.1.205

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	351
Entropy (8bit):	4.586639423822528
Encrypted:	false
SSDEEP:	6:zFXxgWFbwH946/Hc4kazFXxgWF6+NMulLawKl+KKxxYkFXxgWF6+ULQ3HtFasrd:pXxgWFbwH9FE4kGXxgWFDS9Kx/XxgWF9
MD5:	632BDD5C76B01CA6D146C5365DD1EA90
SHA1:	E509F7194FDF23726D6A5C9D19E7D73C38ED249E
SHA-256:	1182874CE544B00A2BE853CE440888D50D45EAC54C47676FC31F9E60069F4DF3
SHA-512:	712FD1D0950D4FC7FED8EAB714D35FAA4E6596B28CE85846630DA1A3CB30877503C4C29940D7B1417E4F383E78DB2BFADC71C728C62828115C77721B42816FAF
Malicious:	false
Reputation:	low
Preview:	Jan 12 22:52:02 galassia gdm-password]: pam_systemd(gdm-password:session): Failed to release session: Connection reset by peer.Jan 12 22:52:02 galassia systemd-logind[797]: Failed to abandon session scope, ignoring: Transport endpoint is not connected.Jan 12 22:52:02 galassia systemd-logind[797]: Session 2 logged out. Waiting for processes to exit..

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	717
Entropy (8bit):	4.697061541611764
Encrypted:	false
SSDEEP:	12:pXeFUSe5XeFUTWYGpFhXeFUtpSXeFUc2eoXeFUcF8IRXeFUoPGoGLoXeFUTAI1lh:5lSeJlaTpFBltpkltFlA8UloeoGLKlTT
MD5:	D7B920B2CF5240982283E4D8220B62E2
SHA1:	E20FF8392ACF605552B7740CE969F49287A681D4
SHA-256:	A901D5FEE648FDBE8293BB89B64A0EE73D3D8F05695B3CB83CA80A11350CD5FA
SHA-512:	EA99F586B631F1C9F602D4B1FA384CB5BEB53885633334902E3B544FC23A622D33824F99CF995ABE5955D5FAC56EBFEA9500730EF2A26E1279B60291903D686F
Malicious:	false
Reputation:	low
Preview:	Jan 12 22:52:03 galassia kernel: [ 427.284242] blocking signal 9: 6241 -> 658.Jan 12 22:52:03 galassia kernel: [ 427.443983] blocking signal 9: 6241 -> 720.Jan 12 22:52:03 galassia kernel: [ 427.476036] blocking signal 9: 6241 -> 772.Jan 12 22:52:03 galassia kernel: [ 427.529729] blocking signal 9: 6238 -> 1.Jan 12 22:52:03 galassia kernel: [ 427.532581] blocking signal 9: 6241 -> 936.Jan 12 22:52:03 galassia kernel: [ 427.706483] blocking signal 9: 6241 -> 2048.Jan 12 22:52:03 galassia kernel: [ 428.239361] New task spawned: old: (tgid 6317, tid 6317), new (tgid: 6317, tid: 6319).Jan 12 22:52:03 galassia kernel: [ 428.240224] New task spawned: old: (tgid 6317, tid 6317), new (tgid: 6317, tid: 6320).

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	2567
Entropy (8bit):	5.008121564797808
Encrypted:	false
SSDEEP:	48:5F39FKy9JzcNFPcAcWPyLRRbGPG6lSUlalnlnklDlulUcKltTl1T42ztIETLL9Wa:x43/QRRpU3
MD5:	D7326FB0F24D16D6AA9C85705E34AB67
SHA1:	379AB84CD2AE1E4B20C39A84AB41E01AA9A9D207
SHA-256:	B07C2840364C159D36B38F6C27F521786624CDC3CB968425C55118BDB8409D55
SHA-512:	8835FE7A5D6E898E22EF4C28FD7C47A6EA9349BC1195298CA32A1B6603BD1BCA0156BA50EB2B5823350CDD2DFC15F755458B45DEDD16FB1D3A9FED14CC4D6D1F
Malicious:	false
Reputation:	low
Preview:	Jan 12 22:52:03 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Jan 12 22:52:03 galassia systemd[1]: rsyslog.service: Failed with result 'signal'..Jan 12 22:52:03 galassia systemd[1]: whoopsie.service: Main process exited, code=killed, status=9/KILL.Jan 12 22:52:03 galassia systemd[1]: whoopsie.service: Failed with result 'signal'..Jan 12 22:52:03 galassia systemd[1860]: pulseaudio.service: Scheduled restart job, restart counter is at 5..Jan 12 22:52:03 galassia systemd[1860]: Stopped Sound Service..Jan 12 22:52:03 galassia systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 5..Jan 12 22:52:03 galassia systemd[1]: whoopsie.service: Scheduled restart job, restart counter is at 5..Jan 12 22:52:03 galassia systemd[1]: Stopped System Logging Service..Jan 12 22:52:03 galassia systemd[1860]: Starting Sound Service....Jan 12 22:52:03 galassia systemd[1]: Starting System Logging Service....Jan 12 22:52:03 galassia systemd[1]: Stopped

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.608838051420038
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	byte.x86.elf
File size:	75'088 bytes
MD5:	a2451f6bd0eb6b177d5f40d71e0e4059
SHA1:	fc3baa30b559b41ce64fef7eda787f37bb43077e
SHA256:	898aabc9633231e530c8a5ce539c80b11535aacbc9f28740cf42016eee0fc787
SHA512:	8ed3383b471ccad5c5919e2c4aac64573d12decee13b6d25a643c4e2b48701952a462647247d657fa22a941eeff6b4b97695ddd77c00445df27dd75ee45d07cb
SSDEEP:	1536:6SYXBbpKbF+5AQZKOtRDXVFxKbgMj+B3bEKoui0QOo/Y0TB3:SbobF+5QOth3AbgMj+xbyuPXopt3
TLSH:	1E736CC9A693E8F6FC160A751173FB325B77E17F2029CA83C7985D32D906A02E51239D
File Content Preview:	.ELF....................d...4....#......4. ...(..........................................................3..........Q.td............................U..S........'...h........[]...$.............U......=.....t..5...................u........t....h............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74688
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xe9a6	0x0	0x6	AX	16
.fini	PROGBITS	0x8056a56	0xea56	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8056a80	0xea80	0x2d1c	0x0	0x2	A	32
.ctors	PROGBITS	0x805a7a0	0x117a0	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805a7a8	0x117a8	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x805a7c0	0x117c0	0xbc0	0x0	0x3	WA	32
.bss	NOBITS	0x805b380	0x12380	0x2800	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x12380	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x1179c	0x1179c	6.6277	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x117a0	0x805a7a0	0x805a7a0	0xbe0	0x33e0	4.9502	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 05:51:54.166575909 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 05:51:54.406975985 CET	39078	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:54.411804914 CET	2222	39078	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:54.411875010 CET	39078	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:54.411875010 CET	39078	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:54.416714907 CET	2222	39078	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:54.416763067 CET	39078	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:54.421566963 CET	2222	39078	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:55.114728928 CET	2222	39078	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:55.114816904 CET	39078	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:55.114816904 CET	39078	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:55.435880899 CET	39080	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:55.440798998 CET	2222	39080	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:55.440855980 CET	39080	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:55.440874100 CET	39080	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:55.445677042 CET	2222	39080	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:55.445735931 CET	39080	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:55.450469971 CET	2222	39080	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.142658949 CET	2222	39080	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.142739058 CET	39080	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.142740011 CET	39080	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.149682999 CET	39082	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.154515028 CET	2222	39082	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.154580116 CET	39082	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.154614925 CET	39082	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.159379959 CET	2222	39082	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.159441948 CET	39082	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.164256096 CET	2222	39082	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.837393999 CET	2222	39082	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.837455034 CET	39082	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.837455034 CET	39082	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.844464064 CET	39086	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.849283934 CET	2222	39086	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.849333048 CET	39086	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.849351883 CET	39086	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.854135036 CET	2222	39086	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:56.854176998 CET	39086	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:56.858983040 CET	2222	39086	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:57.524307013 CET	2222	39086	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:57.524377108 CET	39086	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:57.524415016 CET	39086	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:57.531466007 CET	39088	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:57.536289930 CET	2222	39088	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:57.536344051 CET	39088	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:57.536361933 CET	39088	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:57.541153908 CET	2222	39088	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:57.541214943 CET	39088	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:57.546014071 CET	2222	39088	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.243000031 CET	2222	39088	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.243072033 CET	39088	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.243072033 CET	39088	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.250093937 CET	39090	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.254946947 CET	2222	39090	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.255023003 CET	39090	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.255023003 CET	39090	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.259824038 CET	2222	39090	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.259871006 CET	39090	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.264647961 CET	2222	39090	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.958952904 CET	2222	39090	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.959028959 CET	39090	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.959028959 CET	39090	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.966672897 CET	39092	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.971568108 CET	2222	39092	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.971636057 CET	39092	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.971636057 CET	39092	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.976449966 CET	2222	39092	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:58.976500034 CET	39092	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:58.981300116 CET	2222	39092	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:59.656280994 CET	2222	39092	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:59.656383038 CET	39092	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:59.656383038 CET	39092	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:59.663737059 CET	39094	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:59.668514967 CET	2222	39094	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:59.668570042 CET	39094	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:59.668602943 CET	39094	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:59.673355103 CET	2222	39094	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:59.673403025 CET	39094	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:51:59.678147078 CET	2222	39094	193.143.1.66	192.168.2.23
Jan 13, 2025 05:51:59.797807932 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 05:52:00.385696888 CET	2222	39094	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:00.385952950 CET	39094	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:00.385953903 CET	39094	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:00.393295050 CET	39096	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:00.398139000 CET	2222	39096	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:00.398211956 CET	39096	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:00.398212910 CET	39096	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:00.403033018 CET	2222	39096	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:00.403122902 CET	39096	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:00.407888889 CET	2222	39096	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:00.821676016 CET	42516	80	192.168.2.23	109.202.202.202
Jan 13, 2025 05:52:01.095525980 CET	2222	39096	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:01.095572948 CET	39096	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:01.095607996 CET	39096	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:01.413350105 CET	39098	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:01.418195963 CET	2222	39098	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:01.418257952 CET	39098	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:01.418322086 CET	39098	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:01.423130035 CET	2222	39098	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:01.423167944 CET	39098	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:01.427972078 CET	2222	39098	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.147058964 CET	2222	39098	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.147113085 CET	39098	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.147228956 CET	39098	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.154742002 CET	39100	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.159657001 CET	2222	39100	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.159734964 CET	39100	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.159734964 CET	39100	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.164598942 CET	2222	39100	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.164653063 CET	39100	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.169539928 CET	2222	39100	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.922321081 CET	2222	39100	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.922427893 CET	39100	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.922429085 CET	39100	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.932845116 CET	39102	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.941029072 CET	2222	39102	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.941093922 CET	39102	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.941155910 CET	39102	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.949306965 CET	2222	39102	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:02.949371099 CET	39102	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:02.957449913 CET	2222	39102	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:03.627767086 CET	2222	39102	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:03.627854109 CET	39102	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:03.627855062 CET	39102	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:03.635330915 CET	39104	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:03.640337944 CET	2222	39104	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:03.640434980 CET	39104	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:03.640434980 CET	39104	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:03.645323992 CET	2222	39104	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:03.645395994 CET	39104	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:03.650350094 CET	2222	39104	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:04.420491934 CET	2222	39104	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:04.420619011 CET	39104	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:04.420619011 CET	39104	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:04.673626900 CET	39106	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:04.678746939 CET	2222	39106	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:04.678817987 CET	39106	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:04.678858995 CET	39106	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:04.683720112 CET	2222	39106	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:04.683774948 CET	39106	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:04.688606977 CET	2222	39106	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:05.444309950 CET	2222	39106	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:05.444401979 CET	39106	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:05.444401979 CET	39106	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:05.451884985 CET	39108	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:05.456824064 CET	2222	39108	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:05.456908941 CET	39108	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:05.456908941 CET	39108	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:05.461874008 CET	2222	39108	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:05.461927891 CET	39108	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:05.466794968 CET	2222	39108	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.177232027 CET	2222	39108	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.177339077 CET	39108	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.177340031 CET	39108	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.184906006 CET	39110	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.191068888 CET	2222	39110	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.191150904 CET	39110	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.191150904 CET	39110	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.197190046 CET	2222	39110	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.197261095 CET	39110	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.202764034 CET	2222	39110	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.878524065 CET	2222	39110	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.878609896 CET	39110	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.878611088 CET	39110	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.885726929 CET	39112	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.890533924 CET	2222	39112	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.890590906 CET	39112	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.890611887 CET	39112	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.895405054 CET	2222	39112	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:06.895450115 CET	39112	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:06.900300980 CET	2222	39112	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:07.594906092 CET	2222	39112	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:07.594983101 CET	39112	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:07.595071077 CET	39112	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:07.602298021 CET	39114	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:07.607080936 CET	2222	39114	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:07.607135057 CET	39114	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:07.607135057 CET	39114	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:07.612427950 CET	2222	39114	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:07.612477064 CET	39114	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:07.617639065 CET	2222	39114	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:08.311122894 CET	2222	39114	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:08.311213970 CET	39114	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:08.311213970 CET	39114	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:08.317878008 CET	39116	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:08.322751045 CET	2222	39116	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:08.322823048 CET	39116	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:08.322823048 CET	39116	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:08.327589035 CET	2222	39116	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:08.327637911 CET	39116	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:08.332436085 CET	2222	39116	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.013217926 CET	2222	39116	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.013319969 CET	39116	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.013320923 CET	39116	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.020605087 CET	39118	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.025444984 CET	2222	39118	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.025512934 CET	39118	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.025512934 CET	39118	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.030277967 CET	2222	39118	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.030322075 CET	39118	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.035068989 CET	2222	39118	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.731401920 CET	2222	39118	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.731545925 CET	39118	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.731547117 CET	39118	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.739006042 CET	39120	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.744635105 CET	2222	39120	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.744699001 CET	39120	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.744746923 CET	39120	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.750225067 CET	2222	39120	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:09.750277042 CET	39120	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:09.755697966 CET	2222	39120	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:10.454052925 CET	2222	39120	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:10.454107046 CET	39120	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:10.454153061 CET	39120	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:10.461652040 CET	39122	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:10.466981888 CET	2222	39122	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:10.467087984 CET	39122	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:10.467087984 CET	39122	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:10.472640038 CET	2222	39122	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:10.472696066 CET	39122	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:10.478110075 CET	2222	39122	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.176281929 CET	2222	39122	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.176357985 CET	39122	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.176357985 CET	39122	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.183878899 CET	39124	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.188720942 CET	2222	39124	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.188772917 CET	39124	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.188815117 CET	39124	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.193559885 CET	2222	39124	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.193620920 CET	39124	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.198404074 CET	2222	39124	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.898083925 CET	2222	39124	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.898210049 CET	39124	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.898210049 CET	39124	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.905664921 CET	39126	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.910499096 CET	2222	39126	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.910587072 CET	39126	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.910587072 CET	39126	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.915404081 CET	2222	39126	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:11.915452003 CET	39126	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:11.920223951 CET	2222	39126	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:12.603127956 CET	2222	39126	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:12.603180885 CET	39126	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:12.603180885 CET	39126	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:12.610434055 CET	39128	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:12.615350962 CET	2222	39128	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:12.615418911 CET	39128	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:12.615453959 CET	39128	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:12.620260954 CET	2222	39128	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:12.620311975 CET	39128	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:12.625133991 CET	2222	39128	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:13.329495907 CET	2222	39128	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:13.329571009 CET	39128	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:13.329571962 CET	39128	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:13.336899996 CET	39130	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:13.341691971 CET	2222	39130	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:13.341756105 CET	39130	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:13.341814995 CET	39130	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:13.346613884 CET	2222	39130	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:13.346672058 CET	39130	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:13.351474047 CET	2222	39130	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.111139059 CET	2222	39130	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.111207008 CET	39130	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.111289024 CET	39130	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.117729902 CET	39132	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.122545004 CET	2222	39132	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.122665882 CET	39132	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.122665882 CET	39132	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.127454996 CET	2222	39132	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.127595901 CET	39132	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.132411957 CET	2222	39132	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.833911896 CET	2222	39132	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.833961964 CET	39132	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.833990097 CET	39132	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.840931892 CET	39134	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.845796108 CET	2222	39134	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.845849991 CET	39134	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.845870018 CET	39134	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.850626945 CET	2222	39134	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:14.850681067 CET	39134	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:14.855515003 CET	2222	39134	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:15.561451912 CET	2222	39134	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:15.561505079 CET	39134	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:15.561538935 CET	39134	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:15.568567991 CET	39136	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:15.573501110 CET	2222	39136	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:15.573559046 CET	39136	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:15.573601007 CET	39136	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:15.578433990 CET	2222	39136	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:15.578490973 CET	39136	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:15.583331108 CET	2222	39136	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:15.668015957 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 05:52:16.278192997 CET	2222	39136	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:16.278264046 CET	39136	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:16.278317928 CET	39136	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:16.285351038 CET	39138	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:16.290201902 CET	2222	39138	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:16.290254116 CET	39138	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:16.290281057 CET	39138	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:16.295118093 CET	2222	39138	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:16.295181036 CET	39138	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:16.300379992 CET	2222	39138	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.012753963 CET	2222	39138	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.012840986 CET	39138	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.012898922 CET	39138	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.020416021 CET	39140	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.025343895 CET	2222	39140	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.025398970 CET	39140	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.025441885 CET	39140	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.030278921 CET	2222	39140	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.030322075 CET	39140	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.035142899 CET	2222	39140	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.709628105 CET	2222	39140	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.709731102 CET	39140	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.709732056 CET	39140	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.716749907 CET	39142	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.721597910 CET	2222	39142	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.721658945 CET	39142	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.721658945 CET	39142	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.726515055 CET	2222	39142	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:17.726566076 CET	39142	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:17.731345892 CET	2222	39142	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:18.434833050 CET	2222	39142	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:18.434912920 CET	39142	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:18.434912920 CET	39142	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:18.441895962 CET	39144	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:18.446798086 CET	2222	39144	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:18.446866989 CET	39144	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:18.446866989 CET	39144	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:18.451694012 CET	2222	39144	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:18.451744080 CET	39144	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:18.456566095 CET	2222	39144	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.159178019 CET	2222	39144	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.159259081 CET	39144	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.159259081 CET	39144	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.166766882 CET	39146	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.171734095 CET	2222	39146	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.171783924 CET	39146	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.171809912 CET	39146	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.176769972 CET	2222	39146	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.176824093 CET	39146	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.181570053 CET	2222	39146	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.885155916 CET	2222	39146	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.885252953 CET	39146	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.885252953 CET	39146	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.892868996 CET	39148	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.898175955 CET	2222	39148	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.898268938 CET	39148	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.898268938 CET	39148	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.903443098 CET	2222	39148	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:19.903496027 CET	39148	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:19.908963919 CET	2222	39148	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:20.599822044 CET	2222	39148	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:20.599931002 CET	39148	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:20.599931002 CET	39148	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:20.608306885 CET	39150	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:20.614407063 CET	2222	39150	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:20.614471912 CET	39150	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:20.614471912 CET	39150	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:20.620101929 CET	2222	39150	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:20.620150089 CET	39150	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:20.625015974 CET	2222	39150	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:21.320832014 CET	2222	39150	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:21.320889950 CET	39150	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:21.320907116 CET	39150	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:21.327924013 CET	39152	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:21.333872080 CET	2222	39152	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:21.333933115 CET	39152	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:21.333971024 CET	39152	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:21.338897943 CET	2222	39152	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:21.338948965 CET	39152	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:21.343861103 CET	2222	39152	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.031991005 CET	2222	39152	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.032830000 CET	39152	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.032830954 CET	39152	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.039964914 CET	39154	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.044785976 CET	2222	39154	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.045968056 CET	39154	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.046004057 CET	39154	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.050795078 CET	2222	39154	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.051110983 CET	39154	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.055867910 CET	2222	39154	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.718281031 CET	2222	39154	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.718348980 CET	39154	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.718415976 CET	39154	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.725853920 CET	39156	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.730717897 CET	2222	39156	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.730783939 CET	39156	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.730822086 CET	39156	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.735584974 CET	2222	39156	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:22.735650063 CET	39156	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:22.740427971 CET	2222	39156	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:23.441531897 CET	2222	39156	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:23.441612005 CET	39156	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:23.441690922 CET	39156	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:23.448695898 CET	39158	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:23.453586102 CET	2222	39158	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:23.453696012 CET	39158	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:23.453727961 CET	39158	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:23.458558083 CET	2222	39158	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:23.458610058 CET	39158	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:23.463422060 CET	2222	39158	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.138287067 CET	2222	39158	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.138371944 CET	39158	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.138372898 CET	39158	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.146089077 CET	39160	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.152646065 CET	2222	39160	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.152719021 CET	39160	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.152719021 CET	39160	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.157593012 CET	2222	39160	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.157654047 CET	39160	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.162534952 CET	2222	39160	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.863241911 CET	2222	39160	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.863301039 CET	39160	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.863346100 CET	39160	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.870027065 CET	39162	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.874911070 CET	2222	39162	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.874982119 CET	39162	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.874982119 CET	39162	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.879925013 CET	2222	39162	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:24.879971981 CET	39162	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:24.884798050 CET	2222	39162	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:25.576690912 CET	2222	39162	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:25.576805115 CET	39162	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:25.576832056 CET	39162	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:25.584009886 CET	39164	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:25.588984966 CET	2222	39164	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:25.589067936 CET	39164	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:25.589067936 CET	39164	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:25.594027042 CET	2222	39164	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:25.594077110 CET	39164	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:25.598851919 CET	2222	39164	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:25.906238079 CET	42836	443	192.168.2.23	91.189.91.43
Jan 13, 2025 05:52:26.315665007 CET	2222	39164	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:26.315789938 CET	39164	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:26.315789938 CET	39164	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:26.323355913 CET	39166	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:26.328320026 CET	2222	39166	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:26.328406096 CET	39166	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:26.328454971 CET	39166	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:26.333295107 CET	2222	39166	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:26.333353996 CET	39166	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:26.338217974 CET	2222	39166	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.008919001 CET	2222	39166	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.009000063 CET	39166	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.009000063 CET	39166	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.016320944 CET	39168	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.021184921 CET	2222	39168	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.021248102 CET	39168	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.021305084 CET	39168	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.026148081 CET	2222	39168	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.026204109 CET	39168	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.031063080 CET	2222	39168	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.761329889 CET	2222	39168	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.761404037 CET	39168	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.761404991 CET	39168	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.768747091 CET	39170	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.773679018 CET	2222	39170	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.773736000 CET	39170	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.773773909 CET	39170	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.778589010 CET	2222	39170	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:27.778645039 CET	39170	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:27.783885956 CET	2222	39170	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:28.491980076 CET	2222	39170	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:28.492058992 CET	39170	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:28.492058992 CET	39170	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:28.499131918 CET	39172	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:28.504060984 CET	2222	39172	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:28.504132032 CET	39172	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:28.504132032 CET	39172	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:28.508976936 CET	2222	39172	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:28.509035110 CET	39172	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:28.514024973 CET	2222	39172	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.181348085 CET	2222	39172	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.181433916 CET	39172	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.181433916 CET	39172	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.188843012 CET	39174	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.193802118 CET	2222	39174	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.193909883 CET	39174	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.193943024 CET	39174	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.198753119 CET	2222	39174	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.198798895 CET	39174	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.203650951 CET	2222	39174	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.915499926 CET	2222	39174	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.915585995 CET	39174	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.915585995 CET	39174	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.922957897 CET	39176	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.928217888 CET	2222	39176	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.928263903 CET	39176	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.928276062 CET	39176	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.933202028 CET	2222	39176	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:29.933249950 CET	39176	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:29.938384056 CET	2222	39176	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:30.624839067 CET	2222	39176	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:30.624914885 CET	39176	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:30.624955893 CET	39176	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:30.632189035 CET	39178	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:30.637223005 CET	2222	39178	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:30.637276888 CET	39178	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:30.637303114 CET	39178	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:30.642193079 CET	2222	39178	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:30.642244101 CET	39178	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:30.647156954 CET	2222	39178	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:31.340594053 CET	2222	39178	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:31.340656042 CET	39178	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:31.340682030 CET	39178	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:31.347759008 CET	39180	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:31.352710962 CET	2222	39180	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:31.352777004 CET	39180	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:31.352814913 CET	39180	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:31.357671976 CET	2222	39180	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:31.357732058 CET	39180	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:31.362792015 CET	2222	39180	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.049398899 CET	42516	80	192.168.2.23	109.202.202.202
Jan 13, 2025 05:52:32.052459002 CET	2222	39180	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.052537918 CET	39180	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.052537918 CET	39180	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.060823917 CET	39182	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.066633940 CET	2222	39182	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.066693068 CET	39182	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.066726923 CET	39182	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.071748972 CET	2222	39182	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.071801901 CET	39182	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.076669931 CET	2222	39182	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.766469002 CET	2222	39182	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.766566038 CET	39182	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.766633034 CET	39182	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.773613930 CET	39184	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.778553963 CET	2222	39184	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.778625965 CET	39184	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.778666973 CET	39184	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.783555031 CET	2222	39184	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:32.783612967 CET	39184	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:32.788477898 CET	2222	39184	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:33.464838028 CET	2222	39184	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:33.464904070 CET	39184	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:33.464961052 CET	39184	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:33.472244978 CET	39186	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:33.477052927 CET	2222	39186	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:33.477127075 CET	39186	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:33.477160931 CET	39186	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:33.482079983 CET	2222	39186	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:33.482129097 CET	39186	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:33.486963034 CET	2222	39186	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.186258078 CET	2222	39186	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.186322927 CET	39186	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.186372995 CET	39186	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.193525076 CET	39188	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.198393106 CET	2222	39188	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.198438883 CET	39188	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.198493958 CET	39188	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.203283072 CET	2222	39188	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.204626083 CET	39188	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.209398985 CET	2222	39188	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.894259930 CET	2222	39188	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.894326925 CET	39188	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.894392967 CET	39188	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.901063919 CET	39190	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.906022072 CET	2222	39190	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.906090021 CET	39190	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.906125069 CET	39190	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.911031008 CET	2222	39190	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:34.911092043 CET	39190	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:34.915973902 CET	2222	39190	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:35.598903894 CET	2222	39190	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:35.598970890 CET	39190	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:35.599010944 CET	39190	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:35.606571913 CET	39192	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:35.611582041 CET	2222	39192	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:35.611649990 CET	39192	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:35.611649990 CET	39192	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:35.616496086 CET	2222	39192	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:35.616552114 CET	39192	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:35.621383905 CET	2222	39192	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:36.284148932 CET	2222	39192	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:36.284229994 CET	39192	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.284229994 CET	39192	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.291520119 CET	39194	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.296459913 CET	2222	39194	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:36.296516895 CET	39194	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.296550035 CET	39194	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.301371098 CET	2222	39194	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:36.303080082 CET	39194	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.307985067 CET	2222	39194	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:36.997693062 CET	2222	39194	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:36.997781992 CET	39194	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:36.997781992 CET	39194	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.004996061 CET	39196	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.009855032 CET	2222	39196	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:37.009977102 CET	39196	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.009989977 CET	39196	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.014877081 CET	2222	39196	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:37.016707897 CET	39196	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.021641970 CET	2222	39196	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:37.721298933 CET	2222	39196	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:37.721358061 CET	39196	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.721378088 CET	39196	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.728028059 CET	39198	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.732918978 CET	2222	39198	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:37.732975960 CET	39198	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.732992887 CET	39198	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.737873077 CET	2222	39198	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:37.737970114 CET	39198	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:37.742763996 CET	2222	39198	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:38.418762922 CET	2222	39198	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:38.418823004 CET	39198	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:38.418843031 CET	39198	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:38.426028013 CET	39200	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:38.431004047 CET	2222	39200	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:38.431071043 CET	39200	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:38.431071043 CET	39200	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:38.435982943 CET	2222	39200	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:38.436041117 CET	39200	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:38.440897942 CET	2222	39200	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.120899916 CET	2222	39200	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.120986938 CET	39200	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.121038914 CET	39200	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.128262997 CET	39202	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.133153915 CET	2222	39202	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.133213997 CET	39202	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.133244038 CET	39202	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.138108015 CET	2222	39202	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.138159990 CET	39202	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.143011093 CET	2222	39202	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.844355106 CET	2222	39202	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.844429016 CET	39202	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.844485998 CET	39202	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.851758003 CET	39204	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.856734991 CET	2222	39204	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.856795073 CET	39204	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.856837034 CET	39204	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.861707926 CET	2222	39204	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:39.861763954 CET	39204	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:39.866671085 CET	2222	39204	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:40.560677052 CET	2222	39204	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:40.560770988 CET	39204	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:40.560770988 CET	39204	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:40.568044901 CET	39206	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:40.573009014 CET	2222	39206	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:40.573088884 CET	39206	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:40.573129892 CET	39206	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:40.577980042 CET	2222	39206	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:40.578049898 CET	39206	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:40.582933903 CET	2222	39206	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.272272110 CET	2222	39206	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.272367954 CET	39206	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.272367954 CET	39206	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.279566050 CET	39208	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.284512043 CET	2222	39208	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.284573078 CET	39208	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.284614086 CET	39208	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.289423943 CET	2222	39208	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.289494991 CET	39208	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.294373035 CET	2222	39208	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.985917091 CET	2222	39208	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.986000061 CET	39208	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.986079931 CET	39208	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.993187904 CET	39210	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.998085976 CET	2222	39210	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:41.998150110 CET	39210	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:41.998183966 CET	39210	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.003083944 CET	2222	39210	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:42.003187895 CET	39210	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.008395910 CET	2222	39210	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:42.700747967 CET	2222	39210	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:42.700872898 CET	39210	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.700951099 CET	39210	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.708025932 CET	39212	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.712905884 CET	2222	39212	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:42.712965965 CET	39212	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.712994099 CET	39212	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.717902899 CET	2222	39212	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:42.717955112 CET	39212	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:42.722881079 CET	2222	39212	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:43.400938988 CET	2222	39212	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:43.401005983 CET	39212	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:43.401034117 CET	39212	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:43.408039093 CET	39214	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:43.412920952 CET	2222	39214	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:43.412975073 CET	39214	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:43.412993908 CET	39214	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:43.417855978 CET	2222	39214	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:43.417906046 CET	39214	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:43.422734022 CET	2222	39214	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.127252102 CET	2222	39214	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.127329111 CET	39214	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.127353907 CET	39214	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.134414911 CET	39216	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.139235973 CET	2222	39216	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.139354944 CET	39216	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.139394045 CET	39216	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.144258022 CET	2222	39216	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.144315004 CET	39216	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.149239063 CET	2222	39216	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.841367960 CET	2222	39216	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.841437101 CET	39216	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.841505051 CET	39216	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.848515987 CET	39218	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.853410006 CET	2222	39218	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.853478909 CET	39218	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.853512049 CET	39218	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.858372927 CET	2222	39218	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:44.858423948 CET	39218	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:44.863346100 CET	2222	39218	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:45.563836098 CET	2222	39218	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:45.564884901 CET	39218	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:45.564886093 CET	39218	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:45.572161913 CET	39220	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:45.577138901 CET	2222	39220	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:45.577552080 CET	39220	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:45.577590942 CET	39220	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:45.582442045 CET	2222	39220	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:45.582494020 CET	39220	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:45.587409019 CET	2222	39220	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.266520023 CET	2222	39220	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.266592026 CET	39220	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.266592979 CET	39220	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.273786068 CET	39222	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.278743982 CET	2222	39222	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.278824091 CET	39222	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.278824091 CET	39222	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.283727884 CET	2222	39222	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.284634113 CET	39222	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.289628029 CET	2222	39222	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.978641987 CET	2222	39222	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.978832006 CET	39222	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.978832006 CET	39222	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.986902952 CET	39224	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.991848946 CET	2222	39224	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.991899014 CET	39224	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.991919994 CET	39224	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:46.996728897 CET	2222	39224	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:46.996783972 CET	39224	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.001674891 CET	2222	39224	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:47.729511976 CET	2222	39224	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:47.729572058 CET	39224	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.729594946 CET	39224	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.736818075 CET	39226	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.741729021 CET	2222	39226	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:47.741782904 CET	39226	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.741806984 CET	39226	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.746721029 CET	2222	39226	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:47.746786118 CET	39226	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:47.751585960 CET	2222	39226	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:48.447926044 CET	2222	39226	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:48.447984934 CET	39226	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:48.448009968 CET	39226	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:48.454808950 CET	39228	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:48.459757090 CET	2222	39228	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:48.459829092 CET	39228	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:48.459867001 CET	39228	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:48.464782953 CET	2222	39228	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:48.464840889 CET	39228	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:48.469710112 CET	2222	39228	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.187383890 CET	2222	39228	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.187453032 CET	39228	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.187525034 CET	39228	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.194457054 CET	39230	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.199398041 CET	2222	39230	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.199470997 CET	39230	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.199470997 CET	39230	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.204332113 CET	2222	39230	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.204392910 CET	39230	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.209252119 CET	2222	39230	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.884743929 CET	2222	39230	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.884829044 CET	39230	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.884829044 CET	39230	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.891551018 CET	39232	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.896508932 CET	2222	39232	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.896573067 CET	39232	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.896608114 CET	39232	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.901469946 CET	2222	39232	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:49.901531935 CET	39232	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:49.906390905 CET	2222	39232	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:50.611942053 CET	2222	39232	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:50.612032890 CET	39232	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:50.612111092 CET	39232	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:50.619102955 CET	39234	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:50.624054909 CET	2222	39234	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:50.624109030 CET	39234	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:50.624144077 CET	39234	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:50.629040956 CET	2222	39234	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:50.629096031 CET	39234	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:50.633913040 CET	2222	39234	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:51.320218086 CET	2222	39234	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:51.320286036 CET	39234	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:51.320286036 CET	39234	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:51.326906919 CET	39236	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:51.331752062 CET	2222	39236	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:51.331792116 CET	39236	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:51.331805944 CET	39236	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:51.336622000 CET	2222	39236	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:51.336658955 CET	39236	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:51.341434956 CET	2222	39236	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.031961918 CET	2222	39236	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.032010078 CET	39236	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.032028913 CET	39236	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.038438082 CET	39238	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.043230057 CET	2222	39238	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.043271065 CET	39238	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.043292046 CET	39238	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.048089981 CET	2222	39238	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.048129082 CET	39238	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.052862883 CET	2222	39238	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.718738079 CET	2222	39238	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.718799114 CET	39238	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.718825102 CET	39238	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.726001024 CET	39240	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.730896950 CET	2222	39240	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.730947971 CET	39240	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.730963945 CET	39240	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.735817909 CET	2222	39240	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:52.735865116 CET	39240	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:52.740761995 CET	2222	39240	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:53.442018986 CET	2222	39240	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:53.442099094 CET	39240	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:53.442118883 CET	39240	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:53.448944092 CET	39242	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:53.453849077 CET	2222	39242	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:53.453906059 CET	39242	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:53.453918934 CET	39242	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:53.458794117 CET	2222	39242	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:53.458846092 CET	39242	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:53.463749886 CET	2222	39242	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.161343098 CET	2222	39242	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.161406994 CET	39242	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.161427021 CET	39242	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.170624971 CET	39244	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.175681114 CET	2222	39244	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.175745964 CET	39244	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.175782919 CET	39244	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.180653095 CET	2222	39244	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.180707932 CET	39244	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.185518980 CET	2222	39244	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.888519049 CET	2222	39244	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.888618946 CET	39244	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.888654947 CET	39244	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.895850897 CET	39246	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.900706053 CET	2222	39246	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.900770903 CET	39246	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.900799990 CET	39246	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.905651093 CET	2222	39246	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:54.905724049 CET	39246	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:54.910507917 CET	2222	39246	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:55.604068041 CET	2222	39246	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:55.604196072 CET	39246	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:55.604196072 CET	39246	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:55.611938000 CET	39248	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:55.616851091 CET	2222	39248	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:55.616966963 CET	39248	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:55.616966963 CET	39248	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:55.621835947 CET	2222	39248	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:55.621905088 CET	39248	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:55.626756907 CET	2222	39248	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:56.314065933 CET	2222	39248	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:56.314194918 CET	39248	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:56.314265966 CET	39248	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:56.321003914 CET	39250	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:56.325870991 CET	2222	39250	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:56.325942039 CET	39250	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:56.325974941 CET	39250	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:56.330892086 CET	2222	39250	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:56.330945015 CET	39250	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:56.335764885 CET	2222	39250	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:56.622001886 CET	43928	443	192.168.2.23	91.189.91.42
Jan 13, 2025 05:52:57.035336018 CET	2222	39250	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.035410881 CET	39250	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.035480022 CET	39250	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.042294025 CET	39252	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.047187090 CET	2222	39252	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.047259092 CET	39252	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.047297001 CET	39252	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.052190065 CET	2222	39252	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.052254915 CET	39252	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.057101011 CET	2222	39252	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.778127909 CET	2222	39252	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.778191090 CET	39252	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.778260946 CET	39252	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.785082102 CET	39254	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.790007114 CET	2222	39254	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.790066004 CET	39254	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.790096998 CET	39254	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.795427084 CET	2222	39254	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:57.795480967 CET	39254	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:57.800296068 CET	2222	39254	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:58.508999109 CET	2222	39254	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:58.509074926 CET	39254	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:58.509139061 CET	39254	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:58.516185999 CET	39256	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:58.521078110 CET	2222	39256	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:58.521158934 CET	39256	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:58.521159887 CET	39256	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:58.526057959 CET	2222	39256	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:58.526114941 CET	39256	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:58.531016111 CET	2222	39256	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.209680080 CET	2222	39256	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.209763050 CET	39256	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.209820032 CET	39256	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.216763020 CET	39258	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.221888065 CET	2222	39258	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.221961021 CET	39258	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.221961021 CET	39258	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.226974010 CET	2222	39258	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.227042913 CET	39258	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.232091904 CET	2222	39258	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.918936968 CET	2222	39258	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.919018030 CET	39258	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.919018030 CET	39258	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.926012039 CET	39260	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.930825949 CET	2222	39260	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.930881023 CET	39260	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.930905104 CET	39260	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.935709000 CET	2222	39260	193.143.1.66	192.168.2.23
Jan 13, 2025 05:52:59.935750961 CET	39260	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:52:59.940685034 CET	2222	39260	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:00.700076103 CET	2222	39260	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:00.700135946 CET	39260	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:00.700160027 CET	39260	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:00.707350016 CET	39262	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:00.712234020 CET	2222	39262	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:00.712304115 CET	39262	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:00.712316990 CET	39262	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:00.717255116 CET	2222	39262	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:00.717291117 CET	39262	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:00.722099066 CET	2222	39262	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:01.408340931 CET	2222	39262	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:01.408396959 CET	39262	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:01.408427954 CET	39262	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:01.415415049 CET	39264	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:01.421201944 CET	2222	39264	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:01.421262980 CET	39264	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:01.421299934 CET	39264	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:01.426099062 CET	2222	39264	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:01.426150084 CET	39264	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:01.430994034 CET	2222	39264	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.133552074 CET	2222	39264	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.133621931 CET	39264	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.133690119 CET	39264	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.140886068 CET	39266	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.145781994 CET	2222	39266	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.145837069 CET	39266	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.145870924 CET	39266	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.150746107 CET	2222	39266	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.150803089 CET	39266	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.155587912 CET	2222	39266	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.849927902 CET	2222	39266	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.850012064 CET	39266	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.850061893 CET	39266	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.857712984 CET	39268	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.862549067 CET	2222	39268	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.862611055 CET	39268	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.862652063 CET	39268	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.867508888 CET	2222	39268	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:02.867582083 CET	39268	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:02.872442961 CET	2222	39268	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:03.602184057 CET	2222	39268	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:03.602262020 CET	39268	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:03.602262020 CET	39268	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:03.609041929 CET	39270	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:03.613953114 CET	2222	39270	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:03.614021063 CET	39270	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:03.614021063 CET	39270	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:03.618901968 CET	2222	39270	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:03.619009972 CET	39270	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:03.623908997 CET	2222	39270	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:04.349551916 CET	2222	39270	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:04.349632978 CET	39270	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:04.349633932 CET	39270	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:04.356733084 CET	39272	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:04.361725092 CET	2222	39272	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:04.361788988 CET	39272	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:04.361788988 CET	39272	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:04.366703987 CET	2222	39272	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:04.366796017 CET	39272	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:04.371638060 CET	2222	39272	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.185606003 CET	2222	39272	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.185707092 CET	39272	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.185707092 CET	39272	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.192491055 CET	39274	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.197721958 CET	2222	39274	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.197770119 CET	39274	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.197808027 CET	39274	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.202683926 CET	2222	39274	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.202740908 CET	39274	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.207767963 CET	2222	39274	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.907546043 CET	2222	39274	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.907639027 CET	39274	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.907639027 CET	39274	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.914343119 CET	39276	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.919850111 CET	2222	39276	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.919958115 CET	39276	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.919975042 CET	39276	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.924930096 CET	2222	39276	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:05.924981117 CET	39276	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:05.929877043 CET	2222	39276	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:06.629635096 CET	2222	39276	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:06.629725933 CET	39276	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:06.629761934 CET	39276	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:06.636893988 CET	39278	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:06.641767025 CET	2222	39278	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:06.641822100 CET	39278	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:06.641838074 CET	39278	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:06.646713018 CET	2222	39278	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:06.646811008 CET	39278	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:06.651698112 CET	2222	39278	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:07.338527918 CET	2222	39278	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:07.338598967 CET	39278	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:07.338618994 CET	39278	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:07.345222950 CET	39280	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:07.350119114 CET	2222	39280	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:07.350193977 CET	39280	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:07.350193977 CET	39280	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:07.355163097 CET	2222	39280	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:07.355231047 CET	39280	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:07.360138893 CET	2222	39280	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.059082031 CET	2222	39280	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.059170008 CET	39280	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.059170008 CET	39280	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.065828085 CET	39282	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.070847988 CET	2222	39282	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.070913076 CET	39282	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.070945978 CET	39282	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.075834990 CET	2222	39282	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.075887918 CET	39282	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.080826044 CET	2222	39282	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.784826994 CET	2222	39282	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.784902096 CET	39282	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.784902096 CET	39282	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.792193890 CET	39284	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.797147036 CET	2222	39284	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.797202110 CET	39284	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.797216892 CET	39284	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.802057028 CET	2222	39284	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:08.802102089 CET	39284	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:08.806977987 CET	2222	39284	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:09.480146885 CET	2222	39284	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:09.480201006 CET	39284	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:09.480221987 CET	39284	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:09.488107920 CET	39286	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:09.493009090 CET	2222	39286	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:09.493062973 CET	39286	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:09.493076086 CET	39286	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:09.497910023 CET	2222	39286	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:09.497953892 CET	39286	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:09.502814054 CET	2222	39286	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.186434984 CET	2222	39286	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.186499119 CET	39286	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.186499119 CET	39286	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.193864107 CET	39288	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.198753119 CET	2222	39288	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.198821068 CET	39288	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.198821068 CET	39288	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.203785896 CET	2222	39288	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.203836918 CET	39288	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.208745956 CET	2222	39288	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.905314922 CET	2222	39288	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.905436993 CET	39288	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.905468941 CET	39288	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.912214041 CET	39290	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.917128086 CET	2222	39290	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.917196989 CET	39290	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.917196989 CET	39290	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.922100067 CET	2222	39290	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:10.922159910 CET	39290	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:10.926960945 CET	2222	39290	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:11.608776093 CET	2222	39290	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:11.608839989 CET	39290	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:11.608875990 CET	39290	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:11.616873026 CET	39292	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:11.622160912 CET	2222	39292	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:11.622237921 CET	39292	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:11.622237921 CET	39292	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:11.627171040 CET	2222	39292	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:11.627242088 CET	39292	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:11.633276939 CET	2222	39292	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:12.309415102 CET	2222	39292	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:12.309509993 CET	39292	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:12.309510946 CET	39292	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:12.316751957 CET	39294	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:12.321636915 CET	2222	39294	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:12.321705103 CET	39294	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:12.321738958 CET	39294	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:12.326716900 CET	2222	39294	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:12.326777935 CET	39294	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:12.331737041 CET	2222	39294	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.012051105 CET	2222	39294	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.012136936 CET	39294	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.012232065 CET	39294	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.019304991 CET	39296	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.024636030 CET	2222	39296	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.024694920 CET	39296	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.024718046 CET	39296	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.029561043 CET	2222	39296	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.029630899 CET	39296	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.034512997 CET	2222	39296	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.706247091 CET	2222	39296	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.706356049 CET	39296	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.706388950 CET	39296	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.713654041 CET	39298	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.718532085 CET	2222	39298	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.718594074 CET	39298	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.718614101 CET	39298	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.723529100 CET	2222	39298	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:13.723583937 CET	39298	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:13.729048967 CET	2222	39298	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:14.430895090 CET	2222	39298	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:14.430963993 CET	39298	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:14.431000948 CET	39298	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:14.438242912 CET	39300	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:14.443141937 CET	2222	39300	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:14.443212986 CET	39300	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:14.443252087 CET	39300	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:14.448060989 CET	2222	39300	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:14.448132038 CET	39300	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:14.452960968 CET	2222	39300	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.124335051 CET	2222	39300	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.124403000 CET	39300	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.124439001 CET	39300	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.131413937 CET	39302	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.136766911 CET	2222	39302	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.136835098 CET	39302	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.136852026 CET	39302	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.142178059 CET	2222	39302	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.142227888 CET	39302	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.147377014 CET	2222	39302	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.855082989 CET	2222	39302	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.855166912 CET	39302	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.855168104 CET	39302	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.862332106 CET	39304	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.867389917 CET	2222	39304	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.867460966 CET	39304	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.867460966 CET	39304	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.872309923 CET	2222	39304	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:15.872364044 CET	39304	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:15.877655983 CET	2222	39304	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:16.568312883 CET	2222	39304	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:16.568378925 CET	39304	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:16.568424940 CET	39304	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:16.575139046 CET	39306	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:16.580029011 CET	2222	39306	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:16.580099106 CET	39306	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:16.580157042 CET	39306	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:16.585040092 CET	2222	39306	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:16.585092068 CET	39306	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:16.589929104 CET	2222	39306	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:17.320055008 CET	2222	39306	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:17.320233107 CET	39306	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:17.320234060 CET	39306	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:17.327234983 CET	39308	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:17.332211018 CET	2222	39308	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:17.332271099 CET	39308	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:17.332271099 CET	39308	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:17.337174892 CET	2222	39308	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:17.337222099 CET	39308	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:17.342108965 CET	2222	39308	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:18.043935061 CET	2222	39308	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:18.043987036 CET	39308	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.044009924 CET	39308	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.051112890 CET	39310	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.055984020 CET	2222	39310	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:18.056032896 CET	39310	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.056045055 CET	39310	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.060981989 CET	2222	39310	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:18.061042070 CET	39310	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.065943003 CET	2222	39310	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:18.789020061 CET	2222	39310	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:18.789076090 CET	39310	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:18.789098978 CET	39310	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:19.827485085 CET	39312	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:19.832470894 CET	2222	39312	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:19.832544088 CET	39312	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:19.832578897 CET	39312	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:19.837462902 CET	2222	39312	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:19.837543011 CET	39312	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:19.842477083 CET	2222	39312	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:20.534470081 CET	2222	39312	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:20.534557104 CET	39312	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:20.534586906 CET	39312	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:20.541722059 CET	39314	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:20.546638966 CET	2222	39314	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:20.546720028 CET	39314	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:20.546765089 CET	39314	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:20.551700115 CET	2222	39314	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:20.551862001 CET	39314	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:20.556731939 CET	2222	39314	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:21.253499031 CET	2222	39314	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:21.253614902 CET	39314	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.253685951 CET	39314	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.261131048 CET	39316	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.266102076 CET	2222	39316	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:21.266215086 CET	39316	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.266268015 CET	39316	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.271116972 CET	2222	39316	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:21.271194935 CET	39316	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.276161909 CET	2222	39316	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:21.998018980 CET	2222	39316	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:21.998099089 CET	39316	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:21.998115063 CET	39316	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.004723072 CET	39318	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.009668112 CET	2222	39318	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:22.009726048 CET	39318	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.009766102 CET	39318	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.014605045 CET	2222	39318	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:22.014659882 CET	39318	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.019496918 CET	2222	39318	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:22.725326061 CET	2222	39318	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:22.725431919 CET	39318	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.725490093 CET	39318	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.732553959 CET	39320	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.737521887 CET	2222	39320	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:22.737670898 CET	39320	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.737718105 CET	39320	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.742588043 CET	2222	39320	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:22.742659092 CET	39320	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:22.747586012 CET	2222	39320	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:23.552918911 CET	2222	39320	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:23.553003073 CET	39320	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:23.553004026 CET	39320	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:23.559653044 CET	39322	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:23.564569950 CET	2222	39322	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:23.564631939 CET	39322	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:23.564631939 CET	39322	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:23.569559097 CET	2222	39322	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:23.569612026 CET	39322	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:23.574476004 CET	2222	39322	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:24.302405119 CET	2222	39322	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:24.302572966 CET	39322	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:24.302572966 CET	39322	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:24.309617043 CET	39324	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:24.314568043 CET	2222	39324	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:24.314635992 CET	39324	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:24.314707041 CET	39324	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:24.319504023 CET	2222	39324	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:24.319550037 CET	39324	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:24.324393988 CET	2222	39324	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:25.574218988 CET	2222	39324	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:25.574297905 CET	39324	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:25.574352980 CET	39324	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:25.581608057 CET	39326	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:25.586548090 CET	2222	39326	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:25.586596012 CET	39326	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:25.586608887 CET	39326	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:25.592262030 CET	2222	39326	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:25.592305899 CET	39326	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:25.597291946 CET	2222	39326	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:26.382721901 CET	2222	39326	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:26.382798910 CET	39326	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:26.382817030 CET	39326	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:26.390229940 CET	39328	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:26.395204067 CET	2222	39328	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:26.395287991 CET	39328	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:26.395287991 CET	39328	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:26.400211096 CET	2222	39328	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:26.400273085 CET	39328	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:26.405133009 CET	2222	39328	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:27.188812017 CET	2222	39328	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:27.189014912 CET	39328	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:27.189016104 CET	39328	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:27.196285963 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:27.201209068 CET	2222	39330	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:27.201289892 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:27.201289892 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:27.206208944 CET	2222	39330	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:27.206290960 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:27.211193085 CET	2222	39330	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:28.148637056 CET	2222	39330	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:28.148749113 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.148749113 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.149274111 CET	2222	39330	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:28.149343967 CET	39330	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.155952930 CET	39332	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.160826921 CET	2222	39332	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:28.160955906 CET	39332	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.160955906 CET	39332	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.165813923 CET	2222	39332	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:28.165863991 CET	39332	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:28.170672894 CET	2222	39332	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.000113010 CET	2222	39332	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.000184059 CET	39332	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.000221014 CET	39332	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.006722927 CET	39334	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.011646986 CET	2222	39334	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.011710882 CET	39334	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.011724949 CET	39334	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.016633987 CET	2222	39334	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.016705036 CET	39334	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.021547079 CET	2222	39334	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.827307940 CET	2222	39334	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.827367067 CET	39334	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.827408075 CET	39334	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.834613085 CET	39336	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.839569092 CET	2222	39336	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.839637995 CET	39336	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.839673042 CET	39336	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.844549894 CET	2222	39336	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:29.844615936 CET	39336	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:29.849531889 CET	2222	39336	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:30.652810097 CET	2222	39336	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:30.652889967 CET	39336	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:30.652957916 CET	39336	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:30.660120010 CET	39338	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:30.665090084 CET	2222	39338	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:30.665170908 CET	39338	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:30.665206909 CET	39338	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:30.670108080 CET	2222	39338	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:30.670171976 CET	39338	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:30.675148010 CET	2222	39338	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:31.444185972 CET	2222	39338	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:31.444262028 CET	39338	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:31.444344997 CET	39338	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:31.450764894 CET	39340	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:31.455704927 CET	2222	39340	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:31.455775976 CET	39340	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:31.455787897 CET	39340	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:31.460681915 CET	2222	39340	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:31.460731030 CET	39340	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:31.465624094 CET	2222	39340	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:38.163336992 CET	2222	39340	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:38.163415909 CET	39340	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:38.163444996 CET	39340	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:38.170650005 CET	39342	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:38.175576925 CET	2222	39342	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:38.175654888 CET	39342	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:38.175654888 CET	39342	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:38.180531025 CET	2222	39342	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:38.180574894 CET	39342	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:38.185471058 CET	2222	39342	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.015352964 CET	2222	39342	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.015419960 CET	39342	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.015446901 CET	39342	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.022284985 CET	39344	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.027415991 CET	2222	39344	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.027470112 CET	39344	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.027499914 CET	39344	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.032418013 CET	2222	39344	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.032468081 CET	39344	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.037322044 CET	2222	39344	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.836587906 CET	2222	39344	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.836664915 CET	39344	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.836694002 CET	39344	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.843585968 CET	39346	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.848486900 CET	2222	39346	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.848545074 CET	39346	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.848562956 CET	39346	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.853486061 CET	2222	39346	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:48.853539944 CET	39346	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:48.858454943 CET	2222	39346	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.161417961 CET	2222	39346	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.161500931 CET	39346	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.161521912 CET	39346	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.168046951 CET	39348	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.172935009 CET	2222	39348	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.173010111 CET	39348	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.173010111 CET	39348	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.177925110 CET	2222	39348	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.177990913 CET	39348	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.182888985 CET	2222	39348	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.975301981 CET	2222	39348	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.975404024 CET	39348	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.975482941 CET	39348	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.981965065 CET	39350	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.986902952 CET	2222	39350	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.986985922 CET	39350	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.986985922 CET	39350	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.991908073 CET	2222	39350	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:50.991962910 CET	39350	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:50.996875048 CET	2222	39350	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:54.798414946 CET	2222	39350	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:54.798527956 CET	39350	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:54.798610926 CET	39350	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:54.805381060 CET	39352	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:54.810415030 CET	2222	39352	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:54.810480118 CET	39352	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:54.810522079 CET	39352	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:54.815392971 CET	2222	39352	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:54.815510988 CET	39352	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:54.820502996 CET	2222	39352	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:58.638842106 CET	2222	39352	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:58.639054060 CET	39352	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:58.639055014 CET	39352	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:58.645591021 CET	39354	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:58.650456905 CET	2222	39354	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:58.650521040 CET	39354	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:58.650554895 CET	39354	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:58.655417919 CET	2222	39354	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:58.655476093 CET	39354	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:58.660378933 CET	2222	39354	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:59.425672054 CET	2222	39354	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:59.425863981 CET	39354	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:59.425863981 CET	39354	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:59.432818890 CET	39356	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:59.437757969 CET	2222	39356	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:59.437813997 CET	39356	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:59.437833071 CET	39356	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:59.442683935 CET	2222	39356	193.143.1.66	192.168.2.23
Jan 13, 2025 05:53:59.442735910 CET	39356	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:53:59.447652102 CET	2222	39356	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:09.250184059 CET	2222	39356	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:09.250278950 CET	39356	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:09.250279903 CET	39356	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:09.256875038 CET	39358	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:09.261719942 CET	2222	39358	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:09.261784077 CET	39358	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:09.261784077 CET	39358	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:09.266676903 CET	2222	39358	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:09.266727924 CET	39358	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:09.271574020 CET	2222	39358	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:10.073843002 CET	2222	39358	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:10.073925972 CET	39358	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:10.073926926 CET	39358	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:10.080884933 CET	39360	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:10.085743904 CET	2222	39360	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:10.085800886 CET	39360	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:10.085813046 CET	39360	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:10.090625048 CET	2222	39360	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:10.090683937 CET	39360	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:10.095555067 CET	2222	39360	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:13.912365913 CET	2222	39360	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:13.912419081 CET	39360	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:13.912482023 CET	39360	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:13.919835091 CET	39362	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:13.924747944 CET	2222	39362	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:13.924844980 CET	39362	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:13.924904108 CET	39362	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:13.929718971 CET	2222	39362	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:13.929764032 CET	39362	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:13.934643030 CET	2222	39362	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:14.701095104 CET	2222	39362	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:14.701154947 CET	39362	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:14.701189041 CET	39362	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:14.708089113 CET	39364	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:14.713382959 CET	2222	39364	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:14.713520050 CET	39364	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:14.713561058 CET	39364	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:14.718456030 CET	2222	39364	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:14.718517065 CET	39364	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:14.723378897 CET	2222	39364	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:18.535279989 CET	2222	39364	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:18.535478115 CET	39364	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:18.535478115 CET	39364	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:18.542098045 CET	39366	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:18.547002077 CET	2222	39366	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:18.547068119 CET	39366	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:18.547137022 CET	39366	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:18.552004099 CET	2222	39366	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:18.552061081 CET	39366	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:18.556947947 CET	2222	39366	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:19.343033075 CET	2222	39366	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:19.343099117 CET	39366	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:19.343153000 CET	39366	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:19.349922895 CET	39368	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:19.354928970 CET	2222	39368	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:19.354995012 CET	39368	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:19.355032921 CET	39368	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:19.359846115 CET	2222	39368	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:19.359898090 CET	39368	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:19.364787102 CET	2222	39368	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:23.168531895 CET	2222	39368	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:23.168616056 CET	39368	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:23.168739080 CET	39368	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:23.175512075 CET	39370	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:23.180358887 CET	2222	39370	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:23.180428982 CET	39370	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:23.180461884 CET	39370	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:23.185273886 CET	2222	39370	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:23.185323954 CET	39370	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:23.190218925 CET	2222	39370	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:24.020999908 CET	2222	39370	193.143.1.66	192.168.2.23
Jan 13, 2025 05:54:24.021070004 CET	39370	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:24.021166086 CET	39370	2222	192.168.2.23	193.143.1.66
Jan 13, 2025 05:54:24.027976990 CET	39372	2222	192.168.2.23	193.143.1.66

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 05:51:54.399903059 CET	41991	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:54.406789064 CET	53	41991	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:55.114873886 CET	43038	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:55.435769081 CET	53	43038	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:56.142807007 CET	53823	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:56.149596930 CET	53	53823	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:56.837516069 CET	45129	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:56.844387054 CET	53	45129	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:57.524462938 CET	44662	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:57.531383991 CET	53	44662	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:58.243123055 CET	57421	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:58.250009060 CET	53	57421	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:58.959150076 CET	46264	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:58.966557980 CET	53	46264	8.8.8.8	192.168.2.23
Jan 13, 2025 05:51:59.656465054 CET	37436	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:51:59.663644075 CET	53	37436	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:00.386077881 CET	33226	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:00.392891884 CET	53	33226	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:01.095721960 CET	33396	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:01.413270950 CET	53	33396	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:02.147186041 CET	49066	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:02.154660940 CET	53	49066	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:02.922516108 CET	33780	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:02.932729006 CET	53	33780	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:03.627913952 CET	40200	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:03.635221004 CET	53	40200	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:04.420619011 CET	44122	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:04.673491001 CET	53	44122	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:05.444494009 CET	42800	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:05.451773882 CET	53	42800	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:06.177479982 CET	55510	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:06.184813023 CET	53	55510	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:06.878673077 CET	50714	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:06.885653019 CET	53	50714	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:07.595067978 CET	53615	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:07.602037907 CET	53	53615	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:08.311376095 CET	46371	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:08.317784071 CET	53	46371	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:09.013464928 CET	49078	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:09.020520926 CET	53	49078	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:09.731657982 CET	52421	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:09.738900900 CET	53	52421	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:10.454184055 CET	51801	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:10.461560011 CET	53	51801	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:11.176424980 CET	37778	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:11.183665991 CET	53	37778	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:11.898205042 CET	47753	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:11.905566931 CET	53	47753	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:12.603231907 CET	53190	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:12.610341072 CET	53	53190	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:13.329602003 CET	40779	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:13.336816072 CET	53	40779	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:14.111293077 CET	57099	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:14.117557049 CET	53	57099	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:14.834045887 CET	60214	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:14.840840101 CET	53	60214	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:15.561583996 CET	47453	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:15.568465948 CET	53	47453	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:16.278326988 CET	53641	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:16.285290003 CET	53	53641	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:17.012881994 CET	58599	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:17.020344019 CET	53	58599	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:17.709750891 CET	34200	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:17.716677904 CET	53	34200	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:18.434966087 CET	51680	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:18.441797972 CET	53	51680	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:19.159290075 CET	39186	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:19.166702032 CET	53	39186	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:19.885293961 CET	51460	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:19.892765999 CET	53	51460	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:20.599944115 CET	43296	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:20.608232021 CET	53	43296	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:21.320938110 CET	50721	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:21.327847958 CET	53	50721	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:22.032888889 CET	46176	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:22.039896011 CET	53	46176	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:22.718415976 CET	36698	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:22.725759029 CET	53	36698	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:23.441761017 CET	46981	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:23.448616982 CET	53	46981	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:24.138396025 CET	48184	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:24.146006107 CET	53	48184	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:24.863360882 CET	47413	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:24.869957924 CET	53	47413	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:25.576865911 CET	53719	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:25.583905935 CET	53	53719	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:26.315825939 CET	39129	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:26.323261976 CET	53	39129	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:27.009051085 CET	39860	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:27.016242027 CET	53	39860	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:27.761488914 CET	34002	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:27.768670082 CET	53	34002	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:28.492136002 CET	33611	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:28.499053955 CET	53	33611	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:29.181473970 CET	48592	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:29.188770056 CET	53	48592	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:29.915620089 CET	32852	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:29.922890902 CET	53	32852	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:30.625000000 CET	41074	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:30.632117033 CET	53	41074	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:31.340728998 CET	47386	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:31.347664118 CET	53	47386	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:32.052573919 CET	56014	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:32.060745001 CET	53	56014	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:32.766634941 CET	59539	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:32.773503065 CET	53	59539	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:33.464972973 CET	57201	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:33.472162962 CET	53	57201	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:34.186381102 CET	35513	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:34.193419933 CET	53	35513	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:34.894406080 CET	46828	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:34.900963068 CET	53	46828	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:35.599033117 CET	56540	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:35.606344938 CET	53	56540	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:36.284250975 CET	48235	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:36.291399956 CET	53	48235	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:36.997823000 CET	44561	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:37.004935026 CET	53	44561	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:37.721436024 CET	37215	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:37.727957964 CET	53	37215	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:38.418894053 CET	38576	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:38.425946951 CET	53	38576	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:39.121212959 CET	35656	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:39.128182888 CET	53	35656	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:39.844629049 CET	54510	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:39.851632118 CET	53	54510	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:40.560811996 CET	33097	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:40.567948103 CET	53	33097	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:41.272404909 CET	47770	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:41.279481888 CET	53	47770	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:41.986078978 CET	49901	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:41.993108034 CET	53	49901	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:42.700941086 CET	53170	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:42.707849979 CET	53	53170	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:43.401068926 CET	59155	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:43.407975912 CET	53	59155	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:44.127393007 CET	44609	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:44.134337902 CET	53	44609	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:44.841505051 CET	47476	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:44.848432064 CET	53	47476	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:45.564968109 CET	36180	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:45.572076082 CET	53	36180	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:46.266640902 CET	54274	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:46.273694992 CET	53	54274	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:46.978796959 CET	50765	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:46.986810923 CET	53	50765	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:47.729640961 CET	41197	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:47.736747026 CET	53	41197	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:48.448045015 CET	42119	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:48.454713106 CET	53	42119	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:49.187513113 CET	47121	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:49.194369078 CET	53	47121	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:49.884859085 CET	40808	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:49.891464949 CET	53	40808	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:50.612132072 CET	52094	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:50.619021893 CET	53	52094	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:51.320317030 CET	56549	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:51.326853037 CET	53	56549	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:52.032062054 CET	53376	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:52.038355112 CET	53	53376	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:52.718878031 CET	55276	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:52.725935936 CET	53	55276	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:53.442162991 CET	46748	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:53.448813915 CET	53	46748	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:54.161493063 CET	34422	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:54.170525074 CET	53	34422	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:54.888716936 CET	49953	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:54.895716906 CET	53	49953	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:55.604258060 CET	40358	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:55.611859083 CET	53	40358	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:56.314265966 CET	60743	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:56.320928097 CET	53	60743	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:57.035465002 CET	39405	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:57.042165995 CET	53	39405	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:57.778260946 CET	43560	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:57.785005093 CET	53	43560	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:58.509171963 CET	40236	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:58.516062021 CET	53	40236	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:59.209825993 CET	44871	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:59.216675043 CET	53	44871	8.8.8.8	192.168.2.23
Jan 13, 2025 05:52:59.919068098 CET	49973	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:52:59.925915956 CET	53	49973	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:00.700192928 CET	42996	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:00.707276106 CET	53	42996	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:01.408449888 CET	34347	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:01.415345907 CET	53	34347	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:02.133687973 CET	40731	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:02.140795946 CET	53	40731	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:02.850094080 CET	55479	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:02.857625961 CET	53	55479	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:03.602334023 CET	58846	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:03.608959913 CET	53	58846	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:04.349721909 CET	59748	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:04.356595039 CET	53	59748	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:05.185713053 CET	43869	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:05.192426920 CET	53	43869	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:05.907656908 CET	33924	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:05.914280891 CET	53	33924	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:06.629838943 CET	37406	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:06.636816025 CET	53	37406	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:07.338640928 CET	46576	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:07.345148087 CET	53	46576	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:08.059191942 CET	55717	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:08.065761089 CET	53	55717	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:08.784934998 CET	39045	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:08.792135954 CET	53	39045	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:09.480272055 CET	53686	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:09.487988949 CET	53	53686	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:10.186530113 CET	38475	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:10.193799973 CET	53	38475	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:10.905534029 CET	47074	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:10.912147999 CET	53	47074	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:11.608899117 CET	42489	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:11.616775990 CET	53	42489	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:12.309652090 CET	56982	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:12.316675901 CET	53	56982	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:13.012312889 CET	41275	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:13.019233942 CET	53	41275	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:13.706427097 CET	38425	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:13.713572025 CET	53	38425	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:14.431066036 CET	33470	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:14.438093901 CET	53	33470	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:15.124468088 CET	40332	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:15.131336927 CET	53	40332	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:15.855199099 CET	50833	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:15.862246037 CET	53	50833	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:16.568423986 CET	47252	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:16.575006008 CET	53	47252	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:17.320152998 CET	57102	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:17.327163935 CET	53	57102	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:18.044037104 CET	56640	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:18.051059008 CET	53	56640	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:18.789140940 CET	41529	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:19.827151060 CET	53	41529	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:20.534655094 CET	44174	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:20.541531086 CET	53	44174	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:21.253679037 CET	48704	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:21.261012077 CET	53	48704	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:21.998169899 CET	45256	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:22.004647970 CET	53	45256	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:22.725579023 CET	48119	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:22.732433081 CET	53	48119	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:23.553025007 CET	39984	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:23.559586048 CET	53	39984	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:24.302584887 CET	39391	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:24.309551001 CET	53	39391	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:25.574449062 CET	39248	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:25.581543922 CET	53	39248	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:26.382837057 CET	50547	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:26.389978886 CET	53	50547	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:27.188956976 CET	52644	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:27.196130991 CET	53	52644	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:28.148770094 CET	57904	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:28.155884981 CET	53	57904	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:29.000227928 CET	40921	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:29.006653070 CET	53	40921	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:29.827414036 CET	54723	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:29.834533930 CET	53	54723	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:30.652951956 CET	35058	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:30.660029888 CET	53	35058	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:31.444318056 CET	57551	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:31.450696945 CET	53	57551	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:38.163475037 CET	50300	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:38.170569897 CET	53	50300	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:48.015526056 CET	57718	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:48.022202015 CET	53	57718	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:48.836724043 CET	41330	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:48.843508005 CET	53	41330	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:50.161566973 CET	48989	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:50.167855978 CET	53	48989	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:50.975465059 CET	36579	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:50.981880903 CET	53	36579	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:54.798593044 CET	33903	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:54.805140972 CET	53	33903	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:58.638998032 CET	51436	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:58.645502090 CET	53	51436	8.8.8.8	192.168.2.23
Jan 13, 2025 05:53:59.425821066 CET	36101	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:53:59.432739973 CET	53	36101	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:09.250437021 CET	50806	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:09.256803989 CET	53	50806	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:10.073971033 CET	42435	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:10.080820084 CET	53	42435	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:13.912596941 CET	38406	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:13.919624090 CET	53	38406	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:14.701291084 CET	56652	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:14.707925081 CET	53	56652	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:18.535465002 CET	57237	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:18.541950941 CET	53	57237	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:19.343255043 CET	37795	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:19.349811077 CET	53	37795	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:23.168831110 CET	36433	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:23.175390005 CET	53	36433	8.8.8.8	192.168.2.23
Jan 13, 2025 05:54:24.021255970 CET	44703	53	192.168.2.23	8.8.8.8
Jan 13, 2025 05:54:24.027842999 CET	53	44703	8.8.8.8	192.168.2.23

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 13, 2025 05:52:03.046843052 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Jan 13, 2025 05:53:23.059364080 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 05:51:54.399903059 CET	192.168.2.23	8.8.8.8	0x8dcb	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:55.114873886 CET	192.168.2.23	8.8.8.8	0x5d35	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:56.142807007 CET	192.168.2.23	8.8.8.8	0xe5b7	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:56.837516069 CET	192.168.2.23	8.8.8.8	0x6077	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:57.524462938 CET	192.168.2.23	8.8.8.8	0x84c5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:58.243123055 CET	192.168.2.23	8.8.8.8	0xeac	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:58.959150076 CET	192.168.2.23	8.8.8.8	0x782a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:59.656465054 CET	192.168.2.23	8.8.8.8	0x5e1c	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:00.386077881 CET	192.168.2.23	8.8.8.8	0x2261	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:01.095721960 CET	192.168.2.23	8.8.8.8	0x856a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:02.147186041 CET	192.168.2.23	8.8.8.8	0x256b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:02.922516108 CET	192.168.2.23	8.8.8.8	0x3a05	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:03.627913952 CET	192.168.2.23	8.8.8.8	0x73ee	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:04.420619011 CET	192.168.2.23	8.8.8.8	0x2c61	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:05.444494009 CET	192.168.2.23	8.8.8.8	0xc0b5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:06.177479982 CET	192.168.2.23	8.8.8.8	0xc2fa	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:06.878673077 CET	192.168.2.23	8.8.8.8	0x53e6	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:07.595067978 CET	192.168.2.23	8.8.8.8	0x3cf9	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:08.311376095 CET	192.168.2.23	8.8.8.8	0xdbaf	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:09.013464928 CET	192.168.2.23	8.8.8.8	0xbdb1	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:09.731657982 CET	192.168.2.23	8.8.8.8	0x4d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:10.454184055 CET	192.168.2.23	8.8.8.8	0x3b3e	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:11.176424980 CET	192.168.2.23	8.8.8.8	0x9ed1	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:11.898205042 CET	192.168.2.23	8.8.8.8	0x62b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:12.603231907 CET	192.168.2.23	8.8.8.8	0xc303	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:13.329602003 CET	192.168.2.23	8.8.8.8	0x4f53	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:14.111293077 CET	192.168.2.23	8.8.8.8	0x90bd	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:14.834045887 CET	192.168.2.23	8.8.8.8	0x3219	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:15.561583996 CET	192.168.2.23	8.8.8.8	0xbd0a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:16.278326988 CET	192.168.2.23	8.8.8.8	0x7ded	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:17.012881994 CET	192.168.2.23	8.8.8.8	0x9244	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:17.709750891 CET	192.168.2.23	8.8.8.8	0xc382	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:18.434966087 CET	192.168.2.23	8.8.8.8	0x575d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:19.159290075 CET	192.168.2.23	8.8.8.8	0x4d04	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:19.885293961 CET	192.168.2.23	8.8.8.8	0x61af	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:20.599944115 CET	192.168.2.23	8.8.8.8	0x1d70	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:21.320938110 CET	192.168.2.23	8.8.8.8	0x7b5d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:22.032888889 CET	192.168.2.23	8.8.8.8	0x2f8	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:22.718415976 CET	192.168.2.23	8.8.8.8	0x8448	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:23.441761017 CET	192.168.2.23	8.8.8.8	0xfea5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:24.138396025 CET	192.168.2.23	8.8.8.8	0x72d9	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:24.863360882 CET	192.168.2.23	8.8.8.8	0xd879	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:25.576865911 CET	192.168.2.23	8.8.8.8	0xc160	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:26.315825939 CET	192.168.2.23	8.8.8.8	0x9c64	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:27.009051085 CET	192.168.2.23	8.8.8.8	0x485	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:27.761488914 CET	192.168.2.23	8.8.8.8	0x1270	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:28.492136002 CET	192.168.2.23	8.8.8.8	0xcd24	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:29.181473970 CET	192.168.2.23	8.8.8.8	0xb56f	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:29.915620089 CET	192.168.2.23	8.8.8.8	0xbebc	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:30.625000000 CET	192.168.2.23	8.8.8.8	0x6431	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:31.340728998 CET	192.168.2.23	8.8.8.8	0xbeab	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:32.052573919 CET	192.168.2.23	8.8.8.8	0x2417	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:32.766634941 CET	192.168.2.23	8.8.8.8	0xfc1e	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:33.464972973 CET	192.168.2.23	8.8.8.8	0x423a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:34.186381102 CET	192.168.2.23	8.8.8.8	0x70f9	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:34.894406080 CET	192.168.2.23	8.8.8.8	0x262	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:35.599033117 CET	192.168.2.23	8.8.8.8	0xc45b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:36.284250975 CET	192.168.2.23	8.8.8.8	0x5a24	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:36.997823000 CET	192.168.2.23	8.8.8.8	0xd9c2	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:37.721436024 CET	192.168.2.23	8.8.8.8	0x44f3	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:38.418894053 CET	192.168.2.23	8.8.8.8	0xcff8	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:39.121212959 CET	192.168.2.23	8.8.8.8	0x895	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:39.844629049 CET	192.168.2.23	8.8.8.8	0x595f	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:40.560811996 CET	192.168.2.23	8.8.8.8	0xb70d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:41.272404909 CET	192.168.2.23	8.8.8.8	0xe9fb	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:41.986078978 CET	192.168.2.23	8.8.8.8	0xf419	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:42.700941086 CET	192.168.2.23	8.8.8.8	0x8f8a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:43.401068926 CET	192.168.2.23	8.8.8.8	0xf5b9	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:44.127393007 CET	192.168.2.23	8.8.8.8	0xd86e	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:44.841505051 CET	192.168.2.23	8.8.8.8	0xddb2	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:45.564968109 CET	192.168.2.23	8.8.8.8	0x8b7a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:46.266640902 CET	192.168.2.23	8.8.8.8	0x4518	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:46.978796959 CET	192.168.2.23	8.8.8.8	0xbde1	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:47.729640961 CET	192.168.2.23	8.8.8.8	0x5442	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:48.448045015 CET	192.168.2.23	8.8.8.8	0xfff6	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:49.187513113 CET	192.168.2.23	8.8.8.8	0x2915	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:49.884859085 CET	192.168.2.23	8.8.8.8	0xe3a5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:50.612132072 CET	192.168.2.23	8.8.8.8	0xdd3f	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:51.320317030 CET	192.168.2.23	8.8.8.8	0xde59	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:52.032062054 CET	192.168.2.23	8.8.8.8	0x4867	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:52.718878031 CET	192.168.2.23	8.8.8.8	0x600e	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:53.442162991 CET	192.168.2.23	8.8.8.8	0x9c62	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:54.161493063 CET	192.168.2.23	8.8.8.8	0x905c	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:54.888716936 CET	192.168.2.23	8.8.8.8	0x8055	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:55.604258060 CET	192.168.2.23	8.8.8.8	0x860b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:56.314265966 CET	192.168.2.23	8.8.8.8	0xef19	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:57.035465002 CET	192.168.2.23	8.8.8.8	0x6de5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:57.778260946 CET	192.168.2.23	8.8.8.8	0x48a2	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:58.509171963 CET	192.168.2.23	8.8.8.8	0x6f4f	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:59.209825993 CET	192.168.2.23	8.8.8.8	0xbdd8	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:59.919068098 CET	192.168.2.23	8.8.8.8	0xbc9d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:00.700192928 CET	192.168.2.23	8.8.8.8	0xaa8d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:01.408449888 CET	192.168.2.23	8.8.8.8	0xf6cf	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:02.133687973 CET	192.168.2.23	8.8.8.8	0x5d21	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:02.850094080 CET	192.168.2.23	8.8.8.8	0xf4b0	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:03.602334023 CET	192.168.2.23	8.8.8.8	0x4114	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:04.349721909 CET	192.168.2.23	8.8.8.8	0x8a7a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:05.185713053 CET	192.168.2.23	8.8.8.8	0xdad8	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:05.907656908 CET	192.168.2.23	8.8.8.8	0xdea1	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:06.629838943 CET	192.168.2.23	8.8.8.8	0x7e9b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:07.338640928 CET	192.168.2.23	8.8.8.8	0x2d1e	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:08.059191942 CET	192.168.2.23	8.8.8.8	0x1167	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:08.784934998 CET	192.168.2.23	8.8.8.8	0xae02	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:09.480272055 CET	192.168.2.23	8.8.8.8	0x168a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:10.186530113 CET	192.168.2.23	8.8.8.8	0xe878	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:10.905534029 CET	192.168.2.23	8.8.8.8	0xed76	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:11.608899117 CET	192.168.2.23	8.8.8.8	0xe508	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:12.309652090 CET	192.168.2.23	8.8.8.8	0xa11c	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:13.012312889 CET	192.168.2.23	8.8.8.8	0x4dce	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:13.706427097 CET	192.168.2.23	8.8.8.8	0xe3dc	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:14.431066036 CET	192.168.2.23	8.8.8.8	0xa7f3	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:15.124468088 CET	192.168.2.23	8.8.8.8	0xcaab	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:15.855199099 CET	192.168.2.23	8.8.8.8	0x7cae	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:16.568423986 CET	192.168.2.23	8.8.8.8	0xc79b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:17.320152998 CET	192.168.2.23	8.8.8.8	0x9aa0	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:18.044037104 CET	192.168.2.23	8.8.8.8	0x277a	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:18.789140940 CET	192.168.2.23	8.8.8.8	0xfe03	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:20.534655094 CET	192.168.2.23	8.8.8.8	0xb42d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:21.253679037 CET	192.168.2.23	8.8.8.8	0x5c57	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:21.998169899 CET	192.168.2.23	8.8.8.8	0x6d3f	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:22.725579023 CET	192.168.2.23	8.8.8.8	0x2334	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:23.553025007 CET	192.168.2.23	8.8.8.8	0x766b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:24.302584887 CET	192.168.2.23	8.8.8.8	0x9ae5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:25.574449062 CET	192.168.2.23	8.8.8.8	0x9f44	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:26.382837057 CET	192.168.2.23	8.8.8.8	0xcadb	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:27.188956976 CET	192.168.2.23	8.8.8.8	0x923f	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:28.148770094 CET	192.168.2.23	8.8.8.8	0xc21	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:29.000227928 CET	192.168.2.23	8.8.8.8	0x1886	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:29.827414036 CET	192.168.2.23	8.8.8.8	0x27be	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:30.652951956 CET	192.168.2.23	8.8.8.8	0xeefc	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:31.444318056 CET	192.168.2.23	8.8.8.8	0x8a99	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:38.163475037 CET	192.168.2.23	8.8.8.8	0x22a5	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:48.015526056 CET	192.168.2.23	8.8.8.8	0xe524	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:48.836724043 CET	192.168.2.23	8.8.8.8	0x2be2	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:50.161566973 CET	192.168.2.23	8.8.8.8	0xb817	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:50.975465059 CET	192.168.2.23	8.8.8.8	0xf06b	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:54.798593044 CET	192.168.2.23	8.8.8.8	0x3791	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:58.638998032 CET	192.168.2.23	8.8.8.8	0x76d4	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:59.425821066 CET	192.168.2.23	8.8.8.8	0x15e0	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:09.250437021 CET	192.168.2.23	8.8.8.8	0x1e62	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:10.073971033 CET	192.168.2.23	8.8.8.8	0xfa31	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:13.912596941 CET	192.168.2.23	8.8.8.8	0xb100	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:14.701291084 CET	192.168.2.23	8.8.8.8	0x3f2d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:18.535465002 CET	192.168.2.23	8.8.8.8	0x3c4	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:19.343255043 CET	192.168.2.23	8.8.8.8	0xb95d	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:23.168831110 CET	192.168.2.23	8.8.8.8	0xf607	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:24.021255970 CET	192.168.2.23	8.8.8.8	0x1efe	Standard query (0)	vbtgsze.r-e.kr	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 05:51:54.406789064 CET	8.8.8.8	192.168.2.23	0x8dcb	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:55.435769081 CET	8.8.8.8	192.168.2.23	0x5d35	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:56.149596930 CET	8.8.8.8	192.168.2.23	0xe5b7	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:56.844387054 CET	8.8.8.8	192.168.2.23	0x6077	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:57.531383991 CET	8.8.8.8	192.168.2.23	0x84c5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:58.250009060 CET	8.8.8.8	192.168.2.23	0xeac	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:58.966557980 CET	8.8.8.8	192.168.2.23	0x782a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:51:59.663644075 CET	8.8.8.8	192.168.2.23	0x5e1c	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:00.392891884 CET	8.8.8.8	192.168.2.23	0x2261	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:01.413270950 CET	8.8.8.8	192.168.2.23	0x856a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:02.154660940 CET	8.8.8.8	192.168.2.23	0x256b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:02.932729006 CET	8.8.8.8	192.168.2.23	0x3a05	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:03.635221004 CET	8.8.8.8	192.168.2.23	0x73ee	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:04.673491001 CET	8.8.8.8	192.168.2.23	0x2c61	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:05.451773882 CET	8.8.8.8	192.168.2.23	0xc0b5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:06.184813023 CET	8.8.8.8	192.168.2.23	0xc2fa	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:06.885653019 CET	8.8.8.8	192.168.2.23	0x53e6	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:07.602037907 CET	8.8.8.8	192.168.2.23	0x3cf9	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:08.317784071 CET	8.8.8.8	192.168.2.23	0xdbaf	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:09.020520926 CET	8.8.8.8	192.168.2.23	0xbdb1	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:09.738900900 CET	8.8.8.8	192.168.2.23	0x4d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:10.461560011 CET	8.8.8.8	192.168.2.23	0x3b3e	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:11.183665991 CET	8.8.8.8	192.168.2.23	0x9ed1	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:11.905566931 CET	8.8.8.8	192.168.2.23	0x62b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:12.610341072 CET	8.8.8.8	192.168.2.23	0xc303	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:13.336816072 CET	8.8.8.8	192.168.2.23	0x4f53	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:14.117557049 CET	8.8.8.8	192.168.2.23	0x90bd	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:14.840840101 CET	8.8.8.8	192.168.2.23	0x3219	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:15.568465948 CET	8.8.8.8	192.168.2.23	0xbd0a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:16.285290003 CET	8.8.8.8	192.168.2.23	0x7ded	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:17.020344019 CET	8.8.8.8	192.168.2.23	0x9244	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:17.716677904 CET	8.8.8.8	192.168.2.23	0xc382	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:18.441797972 CET	8.8.8.8	192.168.2.23	0x575d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:19.166702032 CET	8.8.8.8	192.168.2.23	0x4d04	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:19.892765999 CET	8.8.8.8	192.168.2.23	0x61af	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:20.608232021 CET	8.8.8.8	192.168.2.23	0x1d70	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:21.327847958 CET	8.8.8.8	192.168.2.23	0x7b5d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:22.039896011 CET	8.8.8.8	192.168.2.23	0x2f8	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:22.725759029 CET	8.8.8.8	192.168.2.23	0x8448	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:23.448616982 CET	8.8.8.8	192.168.2.23	0xfea5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:24.146006107 CET	8.8.8.8	192.168.2.23	0x72d9	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:24.869957924 CET	8.8.8.8	192.168.2.23	0xd879	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:25.583905935 CET	8.8.8.8	192.168.2.23	0xc160	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:26.323261976 CET	8.8.8.8	192.168.2.23	0x9c64	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:27.016242027 CET	8.8.8.8	192.168.2.23	0x485	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:27.768670082 CET	8.8.8.8	192.168.2.23	0x1270	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:28.499053955 CET	8.8.8.8	192.168.2.23	0xcd24	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:29.188770056 CET	8.8.8.8	192.168.2.23	0xb56f	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:29.922890902 CET	8.8.8.8	192.168.2.23	0xbebc	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:30.632117033 CET	8.8.8.8	192.168.2.23	0x6431	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:31.347664118 CET	8.8.8.8	192.168.2.23	0xbeab	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:32.060745001 CET	8.8.8.8	192.168.2.23	0x2417	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:32.773503065 CET	8.8.8.8	192.168.2.23	0xfc1e	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:33.472162962 CET	8.8.8.8	192.168.2.23	0x423a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:34.193419933 CET	8.8.8.8	192.168.2.23	0x70f9	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:34.900963068 CET	8.8.8.8	192.168.2.23	0x262	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:35.606344938 CET	8.8.8.8	192.168.2.23	0xc45b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:36.291399956 CET	8.8.8.8	192.168.2.23	0x5a24	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:37.004935026 CET	8.8.8.8	192.168.2.23	0xd9c2	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:37.727957964 CET	8.8.8.8	192.168.2.23	0x44f3	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:38.425946951 CET	8.8.8.8	192.168.2.23	0xcff8	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:39.128182888 CET	8.8.8.8	192.168.2.23	0x895	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:39.851632118 CET	8.8.8.8	192.168.2.23	0x595f	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:40.567948103 CET	8.8.8.8	192.168.2.23	0xb70d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:41.279481888 CET	8.8.8.8	192.168.2.23	0xe9fb	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:41.993108034 CET	8.8.8.8	192.168.2.23	0xf419	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:42.707849979 CET	8.8.8.8	192.168.2.23	0x8f8a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:43.407975912 CET	8.8.8.8	192.168.2.23	0xf5b9	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:44.134337902 CET	8.8.8.8	192.168.2.23	0xd86e	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:44.848432064 CET	8.8.8.8	192.168.2.23	0xddb2	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:45.572076082 CET	8.8.8.8	192.168.2.23	0x8b7a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:46.273694992 CET	8.8.8.8	192.168.2.23	0x4518	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:46.986810923 CET	8.8.8.8	192.168.2.23	0xbde1	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:47.736747026 CET	8.8.8.8	192.168.2.23	0x5442	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:48.454713106 CET	8.8.8.8	192.168.2.23	0xfff6	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:49.194369078 CET	8.8.8.8	192.168.2.23	0x2915	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:49.891464949 CET	8.8.8.8	192.168.2.23	0xe3a5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:50.619021893 CET	8.8.8.8	192.168.2.23	0xdd3f	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:51.326853037 CET	8.8.8.8	192.168.2.23	0xde59	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:52.038355112 CET	8.8.8.8	192.168.2.23	0x4867	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:52.725935936 CET	8.8.8.8	192.168.2.23	0x600e	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:53.448813915 CET	8.8.8.8	192.168.2.23	0x9c62	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:54.170525074 CET	8.8.8.8	192.168.2.23	0x905c	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:54.895716906 CET	8.8.8.8	192.168.2.23	0x8055	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:55.611859083 CET	8.8.8.8	192.168.2.23	0x860b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:56.320928097 CET	8.8.8.8	192.168.2.23	0xef19	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:57.042165995 CET	8.8.8.8	192.168.2.23	0x6de5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:57.785005093 CET	8.8.8.8	192.168.2.23	0x48a2	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:58.516062021 CET	8.8.8.8	192.168.2.23	0x6f4f	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:59.216675043 CET	8.8.8.8	192.168.2.23	0xbdd8	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:52:59.925915956 CET	8.8.8.8	192.168.2.23	0xbc9d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:00.707276106 CET	8.8.8.8	192.168.2.23	0xaa8d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:01.415345907 CET	8.8.8.8	192.168.2.23	0xf6cf	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:02.140795946 CET	8.8.8.8	192.168.2.23	0x5d21	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:02.857625961 CET	8.8.8.8	192.168.2.23	0xf4b0	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:03.608959913 CET	8.8.8.8	192.168.2.23	0x4114	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:04.356595039 CET	8.8.8.8	192.168.2.23	0x8a7a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:05.192426920 CET	8.8.8.8	192.168.2.23	0xdad8	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:05.914280891 CET	8.8.8.8	192.168.2.23	0xdea1	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:06.636816025 CET	8.8.8.8	192.168.2.23	0x7e9b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:07.345148087 CET	8.8.8.8	192.168.2.23	0x2d1e	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:08.065761089 CET	8.8.8.8	192.168.2.23	0x1167	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:08.792135954 CET	8.8.8.8	192.168.2.23	0xae02	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:09.487988949 CET	8.8.8.8	192.168.2.23	0x168a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:10.193799973 CET	8.8.8.8	192.168.2.23	0xe878	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:10.912147999 CET	8.8.8.8	192.168.2.23	0xed76	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:11.616775990 CET	8.8.8.8	192.168.2.23	0xe508	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:12.316675901 CET	8.8.8.8	192.168.2.23	0xa11c	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:13.019233942 CET	8.8.8.8	192.168.2.23	0x4dce	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:13.713572025 CET	8.8.8.8	192.168.2.23	0xe3dc	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:14.438093901 CET	8.8.8.8	192.168.2.23	0xa7f3	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:15.131336927 CET	8.8.8.8	192.168.2.23	0xcaab	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:15.862246037 CET	8.8.8.8	192.168.2.23	0x7cae	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:16.575006008 CET	8.8.8.8	192.168.2.23	0xc79b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:17.327163935 CET	8.8.8.8	192.168.2.23	0x9aa0	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:18.051059008 CET	8.8.8.8	192.168.2.23	0x277a	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:19.827151060 CET	8.8.8.8	192.168.2.23	0xfe03	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:20.541531086 CET	8.8.8.8	192.168.2.23	0xb42d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:21.261012077 CET	8.8.8.8	192.168.2.23	0x5c57	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:22.004647970 CET	8.8.8.8	192.168.2.23	0x6d3f	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:22.732433081 CET	8.8.8.8	192.168.2.23	0x2334	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:23.559586048 CET	8.8.8.8	192.168.2.23	0x766b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:24.309551001 CET	8.8.8.8	192.168.2.23	0x9ae5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:25.581543922 CET	8.8.8.8	192.168.2.23	0x9f44	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:26.389978886 CET	8.8.8.8	192.168.2.23	0xcadb	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:27.196130991 CET	8.8.8.8	192.168.2.23	0x923f	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:28.155884981 CET	8.8.8.8	192.168.2.23	0xc21	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:29.006653070 CET	8.8.8.8	192.168.2.23	0x1886	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:29.834533930 CET	8.8.8.8	192.168.2.23	0x27be	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:30.660029888 CET	8.8.8.8	192.168.2.23	0xeefc	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:31.450696945 CET	8.8.8.8	192.168.2.23	0x8a99	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:38.170569897 CET	8.8.8.8	192.168.2.23	0x22a5	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:48.022202015 CET	8.8.8.8	192.168.2.23	0xe524	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:48.843508005 CET	8.8.8.8	192.168.2.23	0x2be2	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:50.167855978 CET	8.8.8.8	192.168.2.23	0xb817	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:50.981880903 CET	8.8.8.8	192.168.2.23	0xf06b	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:54.805140972 CET	8.8.8.8	192.168.2.23	0x3791	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:58.645502090 CET	8.8.8.8	192.168.2.23	0x76d4	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:53:59.432739973 CET	8.8.8.8	192.168.2.23	0x15e0	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:09.256803989 CET	8.8.8.8	192.168.2.23	0x1e62	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:10.080820084 CET	8.8.8.8	192.168.2.23	0xfa31	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:13.919624090 CET	8.8.8.8	192.168.2.23	0xb100	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:14.707925081 CET	8.8.8.8	192.168.2.23	0x3f2d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:18.541950941 CET	8.8.8.8	192.168.2.23	0x3c4	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:19.349811077 CET	8.8.8.8	192.168.2.23	0xb95d	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:23.175390005 CET	8.8.8.8	192.168.2.23	0xf607	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false
Jan 13, 2025 05:54:24.027842999 CET	8.8.8.8	192.168.2.23	0x1efe	No error (0)	vbtgsze.r-e.kr	193.143.1.66	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: byte.x86.elf PID: 6237, Parent PID: 6162

General

Start time (UTC):	04:51:53
Start date (UTC):	13/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	/tmp/byte.x86.elf
File size:	75088 bytes
MD5 hash:	a2451f6bd0eb6b177d5f40d71e0e4059

Start time (UTC):	04:51:53
Start date (UTC):	13/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75088 bytes
MD5 hash:	a2451f6bd0eb6b177d5f40d71e0e4059

Start time (UTC):	04:51:53
Start date (UTC):	13/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75088 bytes
MD5 hash:	a2451f6bd0eb6b177d5f40d71e0e4059

Start time (UTC):	04:51:53
Start date (UTC):	13/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75088 bytes
MD5 hash:	a2451f6bd0eb6b177d5f40d71e0e4059

Start time (UTC):	04:51:53
Start date (UTC):	13/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75088 bytes
MD5 hash:	a2451f6bd0eb6b177d5f40d71e0e4059

Start time (UTC):	04:51:53
Start date (UTC):	13/01/2025
Path:	/tmp/byte.x86.elf
Arguments:	-
File size:	75088 bytes
MD5 hash:	a2451f6bd0eb6b177d5f40d71e0e4059

Start time (UTC):	04:51:54
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:54
Start date (UTC):	13/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	04:51:54
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:54
Start date (UTC):	13/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Start time (UTC):	04:51:54
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:54
Start date (UTC):	13/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	04:51:55
Start date (UTC):	13/01/2025
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	04:51:55
Start date (UTC):	13/01/2025
Path:	/bin/fusermount
Arguments:	fusermount -u -q -z -- /run/user/1000/gvfs
File size:	39144 bytes
MD5 hash:	576a1b135c82bdcbc97a91acea900566

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:56
Start date (UTC):	13/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/etc/gdm3/PrimeOff/Default
Arguments:	/etc/gdm3/PrimeOff/Default
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:51:59
Start date (UTC):	13/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	04:52:00
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:00
Start date (UTC):	13/01/2025
Path:	/usr/bin/dbus-daemon
Arguments:	/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	04:52:00
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:00
Start date (UTC):	13/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Start time (UTC):	04:52:00
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:00
Start date (UTC):	13/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	04:52:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:03
Start date (UTC):	13/01/2025
Path:	/usr/bin/pulseaudio
Arguments:	/usr/bin/pulseaudio --daemonize=no --log-target=journal
File size:	100832 bytes
MD5 hash:	0c3b4c789d8ffb12b25507f27e14c186

Start time (UTC):	04:52:03
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:03
Start date (UTC):	13/01/2025
Path:	/usr/sbin/rsyslogd
Arguments:	/usr/sbin/rsyslogd -n -iNONE
File size:	727248 bytes
MD5 hash:	0b8087fc907c42eb3c81a691db258e33

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:04
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:05
Start date (UTC):	13/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Start time (UTC):	04:52:07
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:07
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:07
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:07
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:07
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:07
Start date (UTC):	13/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Start time (UTC):	04:52:10
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:10
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:11
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/usr/bin/grep
Arguments:	grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
File size:	199136 bytes
MD5 hash:	1e6ebb9dd094f774478f72727bdba0f5

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:12
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:13
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:13
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:13
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:13
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:13
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:13
Start date (UTC):	13/01/2025
Path:	/usr/bin/pkill
Arguments:	pkill --signal HUP --uid gdm dconf-service
File size:	30968 bytes
MD5 hash:	fa96a75a08109d8842e4865b2907d51f

Start time (UTC):	04:52:15
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:15
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:15
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:15
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:16
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:16
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:16
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:16
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:17
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:17
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:17
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:17
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:19
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:19
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	04:52:19
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:19
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:20
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:20
Start date (UTC):	13/01/2025
Path:	/usr/bin/gpu-manager
Arguments:	/usr/bin/gpu-manager --log /var/log/gpu-manager.log
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Analysis Process: systemd PID: 6366, Parent PID: 1

General

Start time (UTC):	04:52:20
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:20
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:21
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:21
Start date (UTC):	13/01/2025
Path:	/usr/share/gdm/generate-config
Arguments:	/usr/share/gdm/generate-config
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	04:52:22
Start date (UTC):	13/01/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	04:52:22
Start date (UTC):	13/01/2025
Path:	/bin/plymouth
Arguments:	/bin/plymouth quit
File size:	51352 bytes
MD5 hash:	87003efd8dad470042f5e75360a8f49f

Source: byte.x86.elf	ReversingLabs: Detection: 73%
Source: byte.x86.elf	Virustotal: Detection: 65%			Perma Link

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete or modify artifacts generated within systems to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary’s actions. Typically these artifacts are used as defensive indicators related to monitored events, such as strings from downloaded files, logs that are generated from user actions, and other data analyzed by defenders. Location, format, and type of artifact (such as command or login history) are often specific to each platform.
Tactics:	Defense Evasion
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Deletion, File: File Metadata, File: File Modification, Firewall: Firewall Rule Modification, Network Traffic: Network Traffic Content, Process: OS API Execution, Process: Process Creation, Scheduled Job: Scheduled Job Modification, User Account: User Account Authentication, User Account: User Account Deletion, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, Google Workspace, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report byte.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/var/log/auth.log

/var/log/kern.log

/var/log/syslog

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: byte.x86.elf PID: 6237, Parent PID: 6162

General

Chronological Activities

Analysis Process: byte.x86.elf PID: 6238, Parent PID: 6237

General

Chronological Activities

Analysis Process: byte.x86.elf PID: 6239, Parent PID: 6237

General

Chronological Activities

Analysis Process: byte.x86.elf PID: 6240, Parent PID: 6237

General

Chronological Activities

Linux Analysis Report
byte.x86.elf